Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91411B3/C6DA292C184611EA9B842F27C4F9AE02/4FE2CBA0F74C11EEA9368831C4F9AE02.roa
File: 4FE2CBA0F74C11EEA9368831C4F9AE02.roa (raw, json)
Hash identifier: wUtWWtOblDmN2oZ3l5tp2ZFVmOtLMYWVgUpV6mOP4KI=
Subject key identifier: E5:67:2B:6F:50:6E:14:20:CB:04:87:FF:AF:41:54:E2:5C:10:08:3D
Certificate issuer: /CN=A91411B3/serialNumber=ACD04E49C8B72BBE01E3537559CF4C94730ED5DF
Certificate serial: 0B39
Authority key identifier: AC:D0:4E:49:C8:B7:2B:BE:01:E3:53:75:59:CF:4C:94:73:0E:D5:DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBOSci3K74B41N1Wc9MlHMO1d8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91411B3/C6DA292C184611EA9B842F27C4F9AE02/4FE2CBA0F74C11EEA9368831C4F9AE02.roa
Signing time: Wed 10 Apr 2024 15:24:26 +0000
ROA not before: Wed 10 Apr 2024 15:24:26 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 150001
IP address blocks: 2404:1c0::/32 maxlen: 32
2404:1c0::/33 maxlen: 33
2404:1c0:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2873 (0xb39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91411B3
Validity
Not Before: Apr 10 15:24:26 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=6616af2a-6a24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:32:78:65:89:9e:59:e9:5f:2d:07:70:b0:06:
9b:da:17:64:54:0d:1e:31:d0:27:fe:27:53:de:4a:
42:83:51:a5:a5:50:98:7e:5e:dc:48:c3:d3:d7:7a:
5f:3e:b4:49:56:14:56:02:9d:6f:ad:18:0c:73:78:
b9:21:00:e4:69:7a:15:ca:23:7f:ff:87:6d:6d:20:
50:2d:a6:11:7d:16:16:13:fe:22:d1:6b:9b:be:fb:
d1:ec:7f:24:ce:f0:8f:97:ae:d2:a4:ec:f1:d1:e9:
87:e1:7b:17:d6:56:1c:10:4a:a3:58:5e:1a:9a:2c:
6c:2c:1f:e1:4c:7f:a4:60:d7:ea:4e:68:a6:2a:e9:
85:12:23:c8:14:38:8e:f5:8f:a4:96:66:90:0e:dd:
3c:df:58:d7:47:79:c9:c5:b8:74:36:07:26:f7:d3:
9a:96:f6:19:06:80:13:0d:cb:0b:79:8b:43:11:72:
13:dd:c1:da:c2:33:c9:fb:4b:37:85:59:0b:27:6c:
30:e8:9c:e2:8d:69:fb:d7:1c:35:63:f3:8d:c4:c4:
a3:a8:83:38:93:4a:a2:64:47:57:29:bc:4a:a3:42:
03:45:b8:b7:4b:e1:5f:03:e6:7a:58:05:8a:14:b0:
c2:87:2e:f4:6d:85:38:7d:68:68:c8:2c:b9:c3:c2:
79:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:67:2B:6F:50:6E:14:20:CB:04:87:FF:AF:41:54:E2:5C:10:08:3D
X509v3 Authority Key Identifier:
keyid:AC:D0:4E:49:C8:B7:2B:BE:01:E3:53:75:59:CF:4C:94:73:0E:D5:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91411B3/C6DA292C184611EA9B842F27C4F9AE02/rNBOSci3K74B41N1Wc9MlHMO1d8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBOSci3K74B41N1Wc9MlHMO1d8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91411B3/C6DA292C184611EA9B842F27C4F9AE02/4FE2CBA0F74C11EEA9368831C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:1c0::/32
Signature Algorithm: sha256WithRSAEncryption
7d:99:7b:26:c1:01:f1:da:5b:9a:53:15:29:c9:55:a7:4a:fb:
7c:bd:2b:02:91:c3:75:2f:13:11:e4:bd:7d:66:6b:f8:c9:ea:
87:d9:c7:f1:f6:20:0f:8f:b8:16:6a:f8:3e:3b:5a:98:98:e5:
30:72:37:41:77:eb:42:5b:26:5c:67:07:9b:8a:64:64:c9:81:
91:9c:00:1f:0a:8f:86:e6:e6:4c:b4:e5:73:f1:58:61:b3:f0:
60:bb:85:1d:08:c5:f8:5f:1f:83:05:6b:51:d5:7e:6a:ad:f1:
e8:6f:f9:9d:5d:6b:b0:81:a9:c4:b6:86:09:0b:93:9f:b8:7d:
9a:b9:52:09:6d:91:0a:1a:07:7d:a5:f6:f7:ad:5f:41:3d:1e:
a6:29:d3:6a:4b:13:99:89:0d:76:2f:0e:ce:ee:92:e2:33:8c:
75:c1:58:8f:2f:8c:f4:5c:03:ce:81:49:41:9b:33:2e:28:21:
31:d3:c6:c8:22:13:8d:12:85:f8:74:ad:6d:86:8f:14:c7:05:
49:3d:e6:d2:71:dd:26:c4:91:73:b8:bb:22:ef:d2:09:e5:9f:
7b:cc:db:a7:e3:f9:f1:7a:f7:ac:2a:cf:a7:c6:9c:1b:90:d5:
20:cf:3f:e3:ef:ca:5a:98:ab:cd:bd:5a:2b:36:6d:2a:70:74:
6c:e7:f1:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:24:37 2025 by rpki-client