Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/E0ACCAC4ECD211EFA6C15823C4F9AE02.roa
File: E0ACCAC4ECD211EFA6C15823C4F9AE02.roa (raw, json)
Hash identifier: /d3XQ565KopoANcg+pwgBZqGoqy8+pW8EGFbyyXXzys=
Subject key identifier: 02:B0:54:F1:BB:50:08:41:CB:21:35:66:F8:DF:3E:6D:88:B3:97:C8
Certificate issuer: /CN=A9164860/serialNumber=BC536C00F85F59041D9C4C2961F72242BF60D51E
Certificate serial: 1227
Authority key identifier: BC:53:6C:00:F8:5F:59:04:1D:9C:4C:29:61:F7:22:42:BF:60:D5:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/E0ACCAC4ECD211EFA6C15823C4F9AE02.roa
Signing time: Mon 17 Feb 2025 01:59:53 +0000
ROA not before: Mon 17 Feb 2025 01:59:53 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 59325
IP address blocks: 2406:e100::/32 maxlen: 32
2406:e100::/36 maxlen: 36
2406:e100:1000::/36 maxlen: 36
2406:e100:2000::/36 maxlen: 36
2406:e100:3000::/36 maxlen: 36
2406:e100:4000::/36 maxlen: 36
2406:e100:5000::/36 maxlen: 36
2406:e100:6000::/36 maxlen: 36
2406:e100:7000::/36 maxlen: 36
2406:e100:8000::/36 maxlen: 36
2406:e100:9000::/36 maxlen: 36
2406:e100:a000::/36 maxlen: 36
2406:e100:b000::/36 maxlen: 36
2406:e100:c000::/36 maxlen: 36
2406:e100:d000::/36 maxlen: 36
2406:e100:e000::/36 maxlen: 36
2406:e100:f000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4647 (0x1227)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9164860
Validity
Not Before: Feb 17 01:59:53 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67b29819-e586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:43:19:f2:0b:19:3b:56:6d:58:44:ce:2d:7f:
a6:07:c6:ae:36:3a:e8:c9:7b:14:67:bf:3b:dd:c2:
42:c4:1e:a9:42:ed:a0:31:96:1c:8f:7e:51:1d:dd:
f8:a9:fe:b3:53:30:68:7f:72:de:bb:a4:70:03:f1:
36:36:f2:99:06:13:84:3c:b3:ce:8e:5e:aa:05:9c:
6b:11:35:cb:c4:95:56:04:73:51:a2:05:a7:2d:3c:
e2:1d:52:de:df:04:7f:79:58:e2:ac:b9:be:14:6c:
33:0a:e9:a4:a3:c7:d6:f1:6a:68:52:4c:13:cf:b6:
94:4c:c5:84:52:d8:7a:c1:a1:56:91:10:2f:04:11:
89:85:c4:b1:c4:4a:32:93:d5:14:d6:25:b7:69:3e:
74:ab:03:64:78:1c:89:d2:1a:a4:70:87:22:03:1b:
36:23:ea:e5:1f:60:56:1e:11:6e:29:1d:92:c4:74:
34:aa:4d:9b:b4:53:01:73:d3:85:4e:3c:7c:89:10:
ba:d7:52:44:d3:f3:35:5e:01:5e:4d:7f:03:82:94:
02:03:3e:39:74:71:70:cb:82:9e:31:ae:00:79:33:
a4:8a:73:b6:7d:89:38:c9:a5:ae:ba:c0:de:14:46:
0e:d9:f1:b9:be:6e:e6:8c:a0:70:c5:8c:c5:07:2b:
64:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B0:54:F1:BB:50:08:41:CB:21:35:66:F8:DF:3E:6D:88:B3:97:C8
X509v3 Authority Key Identifier:
keyid:BC:53:6C:00:F8:5F:59:04:1D:9C:4C:29:61:F7:22:42:BF:60:D5:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/E0ACCAC4ECD211EFA6C15823C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:e100::/32
Signature Algorithm: sha256WithRSAEncryption
24:68:91:c7:27:a0:3a:e8:3d:1d:a8:77:6f:6e:68:65:c0:d3:
f1:9d:bd:ad:3e:12:b9:18:be:39:1f:22:bc:9a:3c:df:56:09:
3b:7c:92:7a:69:ef:e4:bb:af:fc:f7:1e:2f:41:c9:74:d7:b0:
ef:f5:d8:a5:92:7f:76:e3:e5:3e:26:53:5c:59:33:c1:b3:23:
d7:ea:47:23:13:b3:27:b8:5e:75:e1:f2:4e:10:ce:1b:d6:f3:
44:bd:66:af:c1:56:80:9c:4e:b7:d9:a5:d8:d7:c2:22:8f:2f:
5f:a5:48:40:fe:4f:a6:90:6a:e7:e1:5b:b5:23:ce:43:ba:60:
61:95:d7:94:58:8e:f5:37:c7:3a:08:0c:1d:9c:35:cf:3f:bc:
08:a9:95:68:87:38:27:40:3b:98:1b:44:c2:45:76:2c:85:e4:
12:b1:16:40:a6:bd:29:17:78:ee:b2:2e:f9:c0:a5:78:c7:43:
41:2f:36:e1:5f:87:c3:ff:23:db:bc:31:f3:56:11:f0:d2:06:
e5:5e:d5:57:b7:3e:c8:25:a0:24:f1:b5:1e:a2:36:82:66:e0:
6d:86:3e:87:0d:09:93:bf:38:14:4d:b6:ca:42:49:00:23:96:
59:30:62:d5:bb:ac:80:ab:05:81:83:8b:fd:d0:bc:ba:de:55:
35:2c:5e:79
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgICEicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjQ4NjAxMTAvBgNVBAUTKEJDNTM2QzAwRjg1RjU5MDQxRDlDNEMyOTYxRjcyMjQy
QkY2MEQ1MUUwHhcNMjUwMjE3MDE1OTUzWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2IyOTgxOS1lNTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA30MZ8gsZO1ZtWETOLX+mB8auNjroyXsUZ7873cJCxB6pQu2gMZYcj35RHd34
qf6zUzBof3Leu6RwA/E2NvKZBhOEPLPOjl6qBZxrETXLxJVWBHNRogWnLTziHVLe
3wR/eVjirLm+FGwzCumko8fW8WpoUkwTz7aUTMWEUth6waFWkRAvBBGJhcSxxEoy
k9UU1iW3aT50qwNkeByJ0hqkcIciAxs2I+rlH2BWHhFuKR2SxHQ0qk2btFMBc9OF
Tjx8iRC611JE0/M1XgFeTX8DgpQCAz45dHFwy4KeMa4AeTOkinO2fYk4yaWuusDe
FEYO2fG5vm7mjKBwxYzFBytkZwIDAQABo4ICljCCApIwHQYDVR0OBBYEFAKwVPG7
UAhByyE1ZvjfPm2Is5fIMB8GA1UdIwQYMBaAFLxTbAD4X1kEHZxMKWH3IkK/YNUe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDg2MC9CNDAxQzk4MkU5
NzAxMUU4QjAzNTkzNTlDNEY5QUUwMi92Rk5zQVBoZldRUWRuRXdwWWZjaVFyOWcx
UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZGTnNBUGhmV1FRZG5Fd3BZZmNpUXI5ZzFSNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjQ4NjAvQjQwMUM5ODJFOTcwMTFFOEIwMzU5MzU5QzRGOUFFMDIvRTBBQ0NBQzRF
Q0QyMTFFRkE2QzE1ODIzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAkBuEAMA0GCSqGSIb3DQEBCwUAA4IBAQAkaJHHJ6A66D0d
qHdvbmhlwNPxnb2tPhK5GL45HyK8mjzfVgk7fJJ6ae/ku6/89x4vQcl017Dv9dil
kn924+U+JlNcWTPBsyPX6kcjE7MnuF514fJOEM4b1vNEvWavwVaAnE632aXY18Ii
jy9fpUhA/k+mkGrn4Vu1I85DumBhldeUWI71N8c6CAwdnDXPP7wIqZVohzgnQDuY
G0TCRXYsheQSsRZApr0pF3jusi75wKV4x0NBLzbhX4fD/yPbvDHzVhHw0gblXtVX
tz7IJaAk8bUeojaCZuBthj6HDQmTvzgUTbbKQkkAI5ZZMGLVu6yAqwWBg4v90Ly6
3lU1LF55
-----END CERTIFICATE-----
Generated at Mon Apr 7 01:49:56 2025 by rpki-client