Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/7F5D0764906911EEBB2B0A26C4F9AE02.roa
File: 7F5D0764906911EEBB2B0A26C4F9AE02.roa (raw, json)
Hash identifier: KUPLnys74WqmqVqucsdU+KeRmQCLs7F8x3QgybqxFGY=
Subject key identifier: 07:47:45:2F:C8:C6:37:10:BB:04:0D:91:E4:FC:C1:81:57:00:89:EB
Certificate issuer: /CN=A91625DB/serialNumber=7BE230153CFF9001642DBC9B24F85D0CC282364E
Certificate serial: 02
Authority key identifier: 7B:E2:30:15:3C:FF:90:01:64:2D:BC:9B:24:F8:5D:0C:C2:82:36:4E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-IwFTz_kAFkLbybJPhdDMKCNk4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/7F5D0764906911EEBB2B0A26C4F9AE02.roa
Signing time: Fri 01 Dec 2023 16:48:48 +0000
ROA not before: Fri 01 Dec 2023 16:48:48 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 152176
IP address blocks: 2001:df3:3d40::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91625DB
Validity
Not Before: Dec 1 16:48:48 2023 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=656a0e70-75ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c0:f7:f5:da:42:6c:b5:64:c0:d5:61:cf:0b:
d5:03:a8:0c:da:d7:18:8f:0d:ee:89:9f:78:93:ba:
ff:99:2b:35:47:6b:44:7b:52:8c:da:12:01:1b:df:
5e:6f:eb:dc:e4:8b:c9:53:1d:5e:5d:0f:92:92:af:
47:42:6f:e5:10:33:98:d0:1d:f0:62:48:89:8a:91:
d7:6f:ce:a1:ed:eb:e3:d5:d1:94:bc:68:d6:4a:23:
68:68:5d:6e:01:f2:1b:e1:f9:42:78:ec:32:b7:f2:
fe:1e:18:07:3a:42:84:7c:b0:f4:79:f0:78:71:0e:
20:2a:c2:5d:b0:64:c1:61:94:95:44:75:7a:ca:03:
ad:30:e4:18:0a:93:33:f6:78:1a:c7:60:6b:b0:19:
05:12:66:4f:44:0d:df:ee:18:b2:71:81:a5:02:a6:
b7:36:90:4a:11:64:9a:27:c0:08:ac:1b:5d:cf:ef:
df:a3:82:00:10:3e:65:ed:82:79:98:08:72:0a:e0:
2a:5a:64:d2:a3:af:94:55:be:be:3b:4a:d3:1e:7c:
fb:66:4f:e9:a3:cc:70:51:28:fa:7d:5c:f4:e6:05:
f1:e5:02:c0:dc:77:7c:e1:4b:45:3e:d9:99:4e:64:
e2:d3:89:fc:9a:7f:14:6f:4f:7b:ef:2b:5c:b1:62:
0b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:47:45:2F:C8:C6:37:10:BB:04:0D:91:E4:FC:C1:81:57:00:89:EB
X509v3 Authority Key Identifier:
keyid:7B:E2:30:15:3C:FF:90:01:64:2D:BC:9B:24:F8:5D:0C:C2:82:36:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-IwFTz_kAFkLbybJPhdDMKCNk4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/7F5D0764906911EEBB2B0A26C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:3d40::/48
Signature Algorithm: sha256WithRSAEncryption
8b:15:e8:6d:bd:2e:52:7b:03:f4:19:1c:53:97:ba:d8:00:18:
75:ee:a9:1f:f2:6e:e0:a2:a2:47:75:73:51:ad:6a:af:cc:e5:
61:6c:f3:44:b6:52:2c:69:f6:12:2b:ed:0c:c7:da:74:38:d2:
e5:37:60:c4:56:4e:38:d9:68:10:c5:5b:4c:50:0f:72:60:c8:
18:9e:fc:ae:21:16:53:83:ac:69:bb:21:cf:81:1d:40:49:6a:
05:c4:6a:2b:c9:08:77:7a:c5:c3:dc:2d:7a:9d:cd:6e:e0:5f:
e3:49:c6:19:cb:ae:f7:d8:25:03:66:a8:03:41:80:db:cf:1d:
63:e0:87:77:dd:03:f9:91:0e:32:02:9e:cb:af:c0:66:36:5c:
1f:44:13:43:50:b5:99:2a:3a:ef:b4:c0:e4:c9:2d:61:2e:2c:
56:9e:de:77:68:28:1e:70:25:e3:96:3f:82:84:20:e2:36:02:
08:54:3e:eb:25:65:be:cc:fc:57:ab:a5:77:6a:34:7e:6c:7a:
8f:06:08:b5:35:27:a1:f4:89:32:19:44:05:cb:19:09:16:7f:
fb:ba:21:42:e6:08:cb:36:12:bd:0d:2e:7f:63:52:2f:96:c8:
be:cd:7d:51:3c:8b:9d:3e:a5:ce:e3:4f:d0:a9:6b:9c:c1:a3:
a7:c2:94:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:09:10 2025 by rpki-client