Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/8A27B986FFB811EFB6E16425C4F9AE02.roa
File: 8A27B986FFB811EFB6E16425C4F9AE02.roa (raw, json)
Hash identifier: g20Eco9SaLOp8CUCQLbxBAHWlc3BxmlgHVHA64eMjfs=
Subject key identifier: A9:5F:AA:FD:D0:97:0F:41:D0:66:66:C9:ED:8F:A8:03:74:91:7D:70
Certificate issuer: /CN=A9155098/serialNumber=6032F63FD261681A40F730B9787251E63328CD6E
Certificate serial: BC
Authority key identifier: 60:32:F6:3F:D2:61:68:1A:40:F7:30:B9:78:72:51:E6:33:28:CD:6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/8A27B986FFB811EFB6E16425C4F9AE02.roa
Signing time: Sat 29 Mar 2025 05:31:18 +0000
ROA not before: Sat 29 Mar 2025 05:31:18 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 152700
IP address blocks: 2001:df3:ae40::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 188 (0xbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155098
Validity
Not Before: Mar 29 05:31:18 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=67e785a6-6746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b0:2d:56:63:45:18:68:78:e5:9b:6c:58:2f:
0d:d3:2e:a3:4d:13:6e:de:cc:94:bb:61:bb:ba:ca:
dd:3a:75:62:b8:6f:f7:05:89:26:4f:a3:45:22:93:
3a:90:12:a5:75:62:97:3a:d4:6a:71:fd:2d:36:c4:
8c:2d:08:fd:20:e5:60:db:e4:ec:d4:31:d1:8e:53:
76:b4:df:62:d9:39:79:d8:44:04:1a:64:28:8d:d1:
1a:d3:63:f5:da:f3:de:e4:6e:41:ef:96:74:6c:e3:
31:46:36:43:56:ed:99:1e:34:a4:17:b6:31:e4:db:
3a:ae:ea:cb:ee:fa:ab:e5:5a:74:3a:10:47:3a:d7:
e7:bc:87:e3:70:5d:7e:1b:7f:ad:fa:bd:28:e9:91:
02:11:b4:e4:76:e1:ec:7a:10:1f:ea:93:47:a1:14:
f7:2c:2f:43:6b:1e:5b:fa:c2:bd:cf:bc:81:e3:9c:
b8:76:4b:d6:4f:3c:97:cb:29:f1:49:3d:b5:1c:d3:
3a:f1:3e:9e:0f:52:f8:d3:43:27:ca:7f:8e:c6:fb:
23:b6:49:24:67:3f:96:b8:e3:ef:51:a6:94:30:a9:
95:3b:e5:f7:14:e3:60:3c:53:66:39:9c:77:9d:71:
6d:99:da:af:d4:c9:8a:7f:12:94:ef:5f:36:43:d6:
9d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:5F:AA:FD:D0:97:0F:41:D0:66:66:C9:ED:8F:A8:03:74:91:7D:70
X509v3 Authority Key Identifier:
keyid:60:32:F6:3F:D2:61:68:1A:40:F7:30:B9:78:72:51:E6:33:28:CD:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/8A27B986FFB811EFB6E16425C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:ae40::/48
Signature Algorithm: sha256WithRSAEncryption
15:df:8c:b4:c4:d8:f3:d1:6d:40:b4:8b:2e:f8:6a:96:5a:5b:
79:a1:10:bb:c0:38:d7:e0:9a:9f:36:45:7e:45:f8:a9:4c:2d:
ee:67:d3:18:86:7f:d9:de:2a:3c:19:11:21:f9:48:99:ec:c7:
5e:91:e6:5c:30:cb:3f:c6:23:d1:8c:ad:97:d2:61:64:11:23:
ac:07:bd:ea:7c:37:41:cd:02:9c:fa:81:98:78:31:5b:bf:a2:
5e:df:b3:c4:0f:9b:99:b8:a3:0f:1b:43:32:a1:3d:cd:eb:6c:
a6:94:56:bd:d8:76:33:cf:dc:db:00:31:e0:fa:fc:4e:5c:40:
07:e5:13:f7:d8:9a:ec:a0:7d:cc:88:b6:03:82:b8:82:c4:cb:
4b:09:7d:52:42:63:ba:01:5b:33:72:4a:d8:3a:ad:f5:de:01:
c0:02:c3:dd:89:8e:42:b1:58:fe:ec:bc:6f:2b:e4:a8:b1:4d:
83:d3:a2:c1:19:04:39:ac:ee:93:12:28:26:85:f5:81:58:1a:
0e:81:f8:e4:9d:ab:ad:46:e5:67:c4:6b:4b:9a:c0:59:c9:3f:
29:87:e2:a3:28:76:b1:c8:ea:f3:45:19:82:27:17:e0:31:c0:
78:f2:00:f6:d1:51:bf:5b:d5:03:56:a3:f1:66:af:7c:0a:17:
1d:cd:d8:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:10:11 2025 by rpki-client