Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/A46DD938EF8D11EEAF47227BC4F9AE02.roa
File: A46DD938EF8D11EEAF47227BC4F9AE02.roa (raw, json)
Hash identifier: ySDLsUnA1Px9ZdN4Rj4bZJvdBUg6R7IdLHrHlc350Os=
Subject key identifier: 0C:9C:3E:0D:65:27:E0:5A:A7:C4:22:6F:EC:C4:06:E8:07:E7:2C:D6
Certificate issuer: /CN=A913FF2C/serialNumber=FE3DA17B54A4D42F7C5C9A8A67D379067A76080E
Certificate serial: 0417
Authority key identifier: FE:3D:A1:7B:54:A4:D4:2F:7C:5C:9A:8A:67:D3:79:06:7A:76:08:0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/A46DD938EF8D11EEAF47227BC4F9AE02.roa
Signing time: Tue 21 Jan 2025 00:03:56 +0000
ROA not before: Tue 21 Jan 2025 00:03:56 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 150805
IP address blocks: 2001:df0:32c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1047 (0x417)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913FF2C
Validity
Not Before: Jan 21 00:03:56 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=678ee46c-20c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:52:1f:55:8f:57:22:a8:85:80:9f:3b:1a:33:
ac:09:15:0f:d8:a1:ef:76:c0:cd:ae:a7:36:3f:fd:
72:49:45:a4:76:17:95:b6:18:50:7b:1f:c4:a4:5e:
e6:e9:2e:a5:f9:0c:02:27:47:0a:2e:ba:af:eb:fb:
bf:1a:46:02:d5:5a:70:14:84:31:4d:f0:cc:65:b2:
2e:f2:8d:b1:1c:49:b1:60:48:2b:0f:66:d8:2f:71:
7b:0e:82:27:fc:1b:9f:50:cd:69:c4:88:00:ae:6c:
a2:65:91:fb:f4:f6:ac:e6:ae:78:69:e0:a9:fe:10:
df:0e:5f:61:69:bf:cb:bb:c0:31:3f:d6:af:a4:72:
6d:2c:18:4b:fb:af:6a:0b:ce:79:ba:c4:36:40:84:
29:ab:1d:85:62:02:3c:43:4a:d0:ff:75:3d:d5:8c:
c1:f4:f0:26:01:86:67:c2:48:b8:ca:0d:93:54:6c:
0b:d0:09:bf:02:0f:5c:32:07:ad:ad:0f:5a:cc:e7:
38:9e:0b:fa:65:74:09:fd:a4:77:cf:f6:01:49:76:
e9:a3:57:a9:11:63:1b:6e:04:40:e0:0c:d5:73:bc:
24:93:74:cf:88:f2:20:1c:0e:2c:f8:cf:a2:e0:20:
e7:21:13:15:48:f1:34:ee:e6:d7:d2:f4:b3:ba:0f:
7a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:9C:3E:0D:65:27:E0:5A:A7:C4:22:6F:EC:C4:06:E8:07:E7:2C:D6
X509v3 Authority Key Identifier:
keyid:FE:3D:A1:7B:54:A4:D4:2F:7C:5C:9A:8A:67:D3:79:06:7A:76:08:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/A46DD938EF8D11EEAF47227BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df0:32c0::/48
Signature Algorithm: sha256WithRSAEncryption
26:a8:51:26:d3:0d:12:93:bc:77:16:cf:8c:18:ae:cc:ec:15:
95:be:88:3c:43:2a:1f:18:dd:f5:e2:e6:7b:5b:7a:dd:be:9d:
e8:17:29:ba:d3:24:16:ab:ea:e0:2b:80:3d:14:91:97:ef:a7:
cb:26:c1:c5:bc:19:08:a1:e0:3e:16:9c:28:35:1c:24:df:d6:
b6:9b:b6:29:2a:ca:be:cd:4f:71:02:21:fa:0d:fb:a2:07:bb:
1e:49:a4:98:37:3d:8b:1d:5b:26:68:51:bf:42:e1:a1:92:ca:
69:22:1a:cc:38:56:1d:54:6a:40:bd:66:03:2c:da:83:c8:68:
d6:3e:7c:6e:6c:30:73:e3:20:b9:63:53:74:d9:07:93:3f:5b:
01:39:84:48:14:2e:fb:a7:8a:22:fb:2d:1d:3c:75:00:3a:e8:
17:38:96:1c:b3:c8:c2:9f:29:d3:09:18:bc:27:9b:f1:5f:a4:
bc:91:12:cc:04:72:f3:44:8a:0c:a7:4f:db:2b:d1:cd:94:44:
89:9b:ea:f1:e9:3a:6a:06:e9:30:64:4e:07:d3:a9:12:aa:32:
4e:5c:19:88:60:18:05:ba:bc:67:c0:6b:06:6c:fe:66:37:c5:
77:fd:63:90:8d:5c:0d:51:20:9c:eb:bc:11:dd:a4:71:99:9b:
5d:42:73:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:27:45 2025 by rpki-client