Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/0FE13C92EBB411EE9D86095BC4F9AE02.roa
File: 0FE13C92EBB411EE9D86095BC4F9AE02.roa (raw, json)
Hash identifier: dRNilESPTQz/Q5N/cLbpDlE/USFMgoC4F5PCG8xDhno=
Subject key identifier: DC:FC:58:2C:86:2E:57:F7:85:33:C7:63:FE:F3:A2:3F:4E:17:37:E9
Certificate issuer: /CN=A9153490/serialNumber=137353D0E8C145A580CB00BC3222089C4048AE51
Certificate serial: D4
Authority key identifier: 13:73:53:D0:E8:C1:45:A5:80:CB:00:BC:32:22:08:9C:40:48:AE:51
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3NT0OjBRaWAywC8MiIInEBIrlE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/0FE13C92EBB411EE9D86095BC4F9AE02.roa
Signing time: Thu 27 Mar 2025 05:11:36 +0000
ROA not before: Thu 27 Mar 2025 05:11:36 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 139623
IP address blocks: 2401:7f20::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 212 (0xd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153490
Validity
Not Before: Mar 27 05:11:36 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67e4de07-9a71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d8:42:e3:ec:cd:35:33:42:ce:1e:dc:a9:4e:
48:06:b7:74:30:7c:d4:53:c3:59:de:e2:3a:18:31:
cf:1b:fd:2b:bf:22:29:1b:a5:57:58:41:00:66:dc:
bf:89:82:0d:fa:c4:7c:c5:bc:93:6c:df:8a:08:9f:
47:33:a1:de:1d:2f:6d:41:ec:de:f1:03:5b:ed:cb:
85:c8:8f:78:9f:47:bb:da:c6:62:04:10:4f:d0:4e:
c6:63:39:b4:3f:fe:08:74:54:22:c1:d4:9e:c3:23:
f5:d5:28:5b:c6:bf:92:5e:29:94:83:97:3b:58:22:
55:11:d7:38:0d:50:ac:df:17:7a:0b:e2:e1:07:72:
bd:3f:41:a3:43:11:85:48:73:e7:a3:6b:7e:71:3b:
e3:bf:2f:00:0e:84:29:2e:19:de:8e:a2:94:7f:cd:
da:dd:f0:92:81:41:84:c2:57:51:cc:08:95:8d:bb:
dc:17:22:f7:05:91:1f:32:91:ef:ab:69:de:a0:77:
a3:4b:88:f4:68:a3:cc:30:3d:0e:60:2c:78:46:84:
29:d4:34:cf:ec:22:fc:0c:2c:bb:ec:86:e5:5b:37:
a2:c9:a3:d2:34:19:b7:62:69:8b:3c:ab:25:38:8d:
a9:e5:57:61:a3:72:e2:3e:1f:65:b2:42:a9:cb:20:
91:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FC:58:2C:86:2E:57:F7:85:33:C7:63:FE:F3:A2:3F:4E:17:37:E9
X509v3 Authority Key Identifier:
keyid:13:73:53:D0:E8:C1:45:A5:80:CB:00:BC:32:22:08:9C:40:48:AE:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3NT0OjBRaWAywC8MiIInEBIrlE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/0FE13C92EBB411EE9D86095BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:7f20::/32
Signature Algorithm: sha256WithRSAEncryption
2c:f3:6b:64:86:95:dd:e0:d5:8d:93:c7:b3:bd:6e:ce:ca:38:
3c:c1:e0:fd:b8:32:c7:71:d5:c9:4d:01:31:79:0c:9d:b0:c4:
f0:85:c1:af:cc:af:b1:90:32:d4:4c:99:e7:6b:90:dd:ec:fc:
17:b4:ba:b9:b2:e2:46:99:f9:a9:b2:a7:3c:8b:f8:5b:9e:42:
c6:00:35:88:cb:9c:a7:b9:e5:fd:8e:ec:b9:1d:47:8a:6f:6b:
07:2c:b1:11:2a:7e:7d:d4:e4:39:0c:dd:9d:df:dd:08:06:e9:
98:fa:1f:f0:5f:8a:86:76:c3:18:c4:9d:ae:d2:8f:91:04:e8:
d2:15:ae:4d:94:e7:4e:29:d9:f0:9a:69:71:98:7c:be:ea:cc:
cc:f4:b4:f5:da:35:12:88:9d:21:52:de:20:b7:7f:7e:c9:66:
03:cb:6e:3e:ab:dc:6e:f5:58:5f:9f:9b:6f:c6:01:83:87:ea:
56:62:ad:48:84:9c:00:1b:84:5b:4e:50:d2:93:40:54:03:03:
16:d3:47:57:db:b6:fd:d7:e2:ba:60:63:d4:df:29:8f:91:be:
b2:7f:44:4f:ae:67:82:7f:86:1d:cf:f5:3a:5f:a3:8e:85:0e:
d1:5e:16:ba:98:a7:36:67:e5:67:ff:04:31:92:b9:aa:8d:99:
39:56:ce:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:07:10 2025 by rpki-client