Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/86B7624062FE11EEB277647CC4F9AE02.roa
File: 86B7624062FE11EEB277647CC4F9AE02.roa (raw, json)
Hash identifier: +KT0Egyqjjf85ES0SDoa2VeTo6qX07zVXJ1wUoWuy48=
Subject key identifier: A4:00:F0:8B:BD:BB:87:9A:B6:6C:DA:1A:87:86:1C:44:14:C6:57:FA
Certificate issuer: /CN=A913F600/serialNumber=08DB815B7310D87EEFAFCD52CF261CD15829F790
Certificate serial: 113C
Authority key identifier: 08:DB:81:5B:73:10:D8:7E:EF:AF:CD:52:CF:26:1C:D1:58:29:F7:90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNuBW3MQ2H7vr81SzyYc0Vgp95A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/86B7624062FE11EEB277647CC4F9AE02.roa
Signing time: Thu 20 Feb 2025 17:55:37 +0000
ROA not before: Thu 20 Feb 2025 17:55:37 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 135106
IP address blocks: 2404:5c0:2800::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4412 (0x113c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F600
Validity
Not Before: Feb 20 17:55:37 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67b76c98-baf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:25:cc:ac:7d:2f:f0:3a:6f:8c:34:4a:80:e1:
35:b7:7a:c6:77:f7:89:7e:47:b9:e1:64:72:dd:e0:
21:46:e7:61:c3:1a:8d:ae:ba:fb:96:a8:f5:a8:6a:
b3:1e:39:7c:1f:41:02:4a:26:ff:85:d3:e1:c3:16:
b8:0b:62:4e:54:e5:dc:ba:70:c1:32:4a:ab:71:dd:
c5:87:13:f2:8d:fa:af:7e:41:eb:62:57:10:1e:6f:
aa:f7:83:c5:3d:fd:1b:0b:f8:a2:8b:d0:95:46:e1:
44:8d:16:60:66:44:98:45:49:c2:71:3d:9b:f0:78:
15:26:50:6d:b0:97:53:f3:63:77:de:02:4d:57:31:
d9:a9:c8:12:a6:69:44:f0:13:8f:58:67:71:d2:e7:
2b:90:dc:4f:70:31:25:af:c1:f4:a5:fc:bb:c6:5b:
e9:82:64:8a:74:4a:4d:c0:c6:70:08:3d:7d:0d:0d:
a3:87:df:47:33:0d:b1:f8:b6:3b:b0:67:9f:1c:ea:
c4:49:71:73:f6:8e:a1:62:9b:a7:86:84:a7:18:29:
57:c9:a8:51:e8:82:9b:81:2b:1d:53:91:7b:cb:a9:
fe:ac:65:5a:31:72:1d:91:0a:f2:78:49:2b:bb:f7:
02:02:ec:35:b2:49:89:73:37:fd:26:d3:70:db:ad:
84:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:00:F0:8B:BD:BB:87:9A:B6:6C:DA:1A:87:86:1C:44:14:C6:57:FA
X509v3 Authority Key Identifier:
keyid:08:DB:81:5B:73:10:D8:7E:EF:AF:CD:52:CF:26:1C:D1:58:29:F7:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/CNuBW3MQ2H7vr81SzyYc0Vgp95A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNuBW3MQ2H7vr81SzyYc0Vgp95A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/86B7624062FE11EEB277647CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:5c0:2800::/48
Signature Algorithm: sha256WithRSAEncryption
06:21:52:fd:ff:d6:bb:16:6a:f5:4b:e7:7e:98:89:a9:d9:01:
17:46:d4:5e:fc:55:86:3c:60:28:92:67:33:f2:31:2a:8c:9d:
74:6b:70:f5:a9:02:0f:2b:88:89:f2:dc:9d:61:ea:2f:c0:a9:
94:52:46:76:d5:d3:c8:05:c7:f6:97:65:ee:f8:77:cc:ed:f5:
71:ba:37:47:58:5f:db:ef:d2:90:4c:b7:67:2b:4f:aa:a6:6e:
cb:56:c1:15:f9:9d:62:31:2b:f4:1e:d3:fa:8f:f9:8b:22:b1:
6e:0b:f5:3a:10:95:f8:76:fa:01:b4:dd:25:b1:8f:6d:fe:18:
eb:79:d2:82:a4:b3:6e:06:3c:66:29:a3:33:6e:c5:50:ee:6b:
70:6c:b6:5d:92:d6:e1:af:7e:60:07:ad:b9:78:0e:89:0b:b9:
0c:a8:f7:bc:e7:a8:f2:aa:d8:67:dc:2f:50:35:22:79:af:2b:
80:59:6c:5e:11:b1:15:21:27:02:0e:05:63:5c:ea:18:ca:ce:
c4:97:f9:6d:4e:ad:35:23:e3:57:11:1a:27:3b:6c:e7:a9:a4:
63:bf:8d:a3:0b:e2:b8:aa:53:69:eb:78:f9:83:78:4a:63:03:
f4:f2:f0:a4:9f:2f:4f:3e:0d:2f:9d:d4:01:b1:da:2d:f8:b2:
8d:73:99:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 09:04:22 2025 by rpki-client