Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/6548EFE8ACAE11EFAA0B675DC4F9AE02.roa
File: 6548EFE8ACAE11EFAA0B675DC4F9AE02.roa (raw, json)
Hash identifier: YsjchunrZcyUbY9lPht+PgDWKgTsGFw/LZAvLTuR2sQ=
Subject key identifier: D0:C3:A5:EE:B0:C9:9D:A4:63:F0:F9:84:45:03:7F:70:A2:ED:1E:40
Certificate issuer: /CN=A915825D/serialNumber=B88BD5D5B9B8646D8E43E64C127B8481A418C636
Certificate serial: 08
Authority key identifier: B8:8B:D5:D5:B9:B8:64:6D:8E:43:E6:4C:12:7B:84:81:A4:18:C6:36
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/6548EFE8ACAE11EFAA0B675DC4F9AE02.roa
Signing time: Wed 27 Nov 2024 10:57:29 +0000
ROA not before: Wed 27 Nov 2024 10:57:29 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 138184
IP address blocks: 2001:df4:8a40::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915825D
Validity
Not Before: Nov 27 10:57:29 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=6746fb19-56b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:16:6b:c9:86:f8:86:3e:55:50:b7:c1:c8:6e:
e5:92:f8:60:c9:80:11:49:d4:af:1e:7f:40:f7:18:
76:9d:d6:55:2f:5f:95:d3:69:71:1a:4b:a6:8b:39:
46:c1:63:82:87:fd:17:67:68:ec:8d:0d:14:ca:ce:
ee:21:3e:21:30:19:7e:a6:4e:40:fb:74:be:38:6b:
17:d0:93:11:7a:94:7b:4a:9d:ec:bd:b9:70:29:31:
04:b3:da:07:51:2b:20:0a:54:fa:7b:e2:97:a1:1e:
86:26:d0:83:f8:84:06:40:dc:9b:04:0a:d9:0e:1b:
b2:7a:3e:bb:a6:4c:b1:e4:17:ec:53:1e:b7:45:0d:
a2:9c:73:73:c3:de:df:50:4f:44:6e:07:f9:dd:a4:
5b:46:b4:6d:f0:63:7c:d8:fa:c1:3f:0f:a9:15:f7:
81:87:c7:94:87:b1:32:0f:7c:21:4c:ec:32:9d:a3:
69:96:1a:fa:4a:cd:18:7c:6c:53:37:45:d2:79:2c:
3e:0c:32:d2:58:a9:66:79:55:c0:26:f2:28:52:2b:
79:4a:68:e0:50:03:6a:cd:ba:0f:24:ba:5e:a7:b1:
68:cb:5d:8f:30:c1:a1:36:23:a2:8e:eb:8e:8b:88:
84:15:bf:1e:78:13:6d:d2:5b:a2:8f:9d:67:9c:85:
c1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C3:A5:EE:B0:C9:9D:A4:63:F0:F9:84:45:03:7F:70:A2:ED:1E:40
X509v3 Authority Key Identifier:
keyid:B8:8B:D5:D5:B9:B8:64:6D:8E:43:E6:4C:12:7B:84:81:A4:18:C6:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/6548EFE8ACAE11EFAA0B675DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:8a40::/48
Signature Algorithm: sha256WithRSAEncryption
dd:74:f8:b2:9b:a5:b9:0c:01:ae:0a:ea:c2:68:cb:71:30:51:
06:84:c4:75:18:15:df:2e:77:26:2a:27:f9:35:4b:78:68:63:
70:9b:79:4a:3d:32:f6:92:a0:06:50:62:7c:d8:40:8d:fe:ca:
a6:44:2e:d2:3d:ae:c9:5d:e0:7d:51:0e:ee:17:a3:b5:7a:51:
41:bb:d5:1b:02:5b:59:21:f3:5d:4b:80:47:d9:d8:38:03:fa:
8d:3b:5a:79:97:46:32:a7:e6:ca:b6:01:37:33:48:2e:59:90:
98:8a:5f:c9:5d:89:4f:18:ec:ce:c0:af:40:57:b4:6b:77:34:
41:58:9b:1e:a7:ee:81:46:61:89:d5:65:e2:fe:fe:c0:78:44:
33:02:b3:bd:e7:16:a6:5f:67:db:cb:a8:c0:58:c4:90:08:2e:
99:8e:15:86:48:52:09:ee:09:1e:73:0b:54:2b:a4:f6:ce:17:
09:24:2f:ee:0c:fc:b6:0e:c1:40:8f:da:a1:27:c6:43:fe:27:
5d:c5:cf:ea:3f:64:73:9d:91:48:d9:09:fe:79:36:60:77:cd:
d9:60:d2:c9:e4:e6:68:ef:c9:09:25:2f:d5:39:18:09:e9:cb:
00:11:65:f7:bc:bd:71:16:30:9f:3c:7c:10:14:ba:1b:75:fe:
85:c3:e0:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:19:11 2025 by rpki-client