Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/FABA11B6D2AF11EFA7F61619C4F9AE02.roa
File: FABA11B6D2AF11EFA7F61619C4F9AE02.roa (raw, json)
Hash identifier: mO0p8kMhBlVeU3rmJuw/F4BTS/e5qclwinTqDnIPusY=
Subject key identifier: D0:F0:09:94:80:A0:E3:47:8B:B3:1E:48:FD:77:ED:C6:21:81:94:6C
Certificate issuer: /CN=A91685E9/serialNumber=F698B5B47A06D5307DEC608969063074B68FF5CA
Certificate serial: 09
Authority key identifier: F6:98:B5:B4:7A:06:D5:30:7D:EC:60:89:69:06:30:74:B6:8F:F5:CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/FABA11B6D2AF11EFA7F61619C4F9AE02.roa
Signing time: Tue 14 Jan 2025 19:44:34 +0000
ROA not before: Tue 14 Jan 2025 19:44:34 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 152565
IP address blocks: 2401:e920::/32 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91685E9
Validity
Not Before: Jan 14 19:44:34 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=6786bea2-5a29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:75:0b:ab:81:72:ad:74:14:64:42:2d:b1:ce:
d3:c5:ba:0d:19:70:85:61:a8:f6:96:e1:6b:c3:67:
39:32:c5:a9:3f:8a:c8:2d:c8:c8:b2:d0:c9:f8:81:
97:85:45:01:5e:a5:03:eb:b9:88:c9:7a:f7:f4:07:
b4:a5:e4:2c:87:7f:2e:52:ea:b7:97:13:34:ad:87:
c6:16:17:aa:7c:89:17:e5:fd:6b:fe:a5:4c:73:9a:
cc:5d:b0:03:ae:56:a5:6f:fe:2f:75:05:23:4a:5a:
d6:09:f6:be:9b:e9:62:8b:72:2a:3f:78:38:20:d6:
9f:eb:0e:30:b5:3a:e8:3b:7f:cb:93:d3:46:23:e1:
4a:dc:58:4e:3e:60:c7:0c:24:46:62:cd:64:9d:01:
8b:94:da:e8:ed:26:81:14:40:24:34:8d:15:22:f4:
81:db:7a:1c:5d:f9:b5:06:bb:b0:ee:37:68:26:4f:
b0:08:38:10:58:65:23:e1:9b:e6:d1:23:15:30:f3:
e1:91:ee:b6:01:19:cc:be:f1:ce:62:23:14:f7:fc:
01:3e:27:4d:36:bc:fe:08:59:18:40:61:43:d8:d7:
5a:b1:58:fc:58:ef:ed:90:c4:8b:e1:4a:59:9f:d3:
4d:7c:40:86:cb:b7:01:b7:bb:4e:f0:f2:49:e4:c5:
38:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F0:09:94:80:A0:E3:47:8B:B3:1E:48:FD:77:ED:C6:21:81:94:6C
X509v3 Authority Key Identifier:
keyid:F6:98:B5:B4:7A:06:D5:30:7D:EC:60:89:69:06:30:74:B6:8F:F5:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/FABA11B6D2AF11EFA7F61619C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:e920::/32
Signature Algorithm: sha256WithRSAEncryption
35:17:3b:f6:f9:56:65:7f:97:c8:ba:a1:a1:17:da:91:ec:14:
af:da:e3:e6:18:3b:24:2d:10:f8:26:de:3f:7a:2a:37:c2:53:
63:6f:b1:47:84:31:33:a2:2b:fd:55:8b:84:45:04:6c:d1:2d:
e7:0b:7f:de:2d:dd:fe:57:0a:b1:d9:5c:34:b3:1f:a1:63:cd:
2b:20:75:45:76:d8:7f:ba:7d:cc:da:99:48:8c:2b:33:cc:da:
7f:cb:0b:5d:74:1e:ed:8f:d9:ac:97:28:1c:a3:30:3c:ba:e5:
63:6a:e5:45:3b:10:06:bf:da:9f:21:44:20:b6:e4:15:c6:73:
b5:b2:09:9e:1f:7b:01:4a:d5:b1:e5:5d:f2:92:ea:ff:6a:42:
27:ef:23:43:40:ba:c5:c0:60:b3:a2:97:8a:2f:90:9d:f8:eb:
bc:50:38:c6:34:8a:35:98:32:25:0d:a7:db:14:39:18:82:c9:
d8:18:5f:dc:7c:f6:20:ab:22:d7:c4:2e:b9:49:5f:0c:f7:69:
e5:c8:33:97:75:5c:05:9e:c0:b2:19:15:c4:49:99:82:03:f5:
7d:ba:af:1f:6e:f2:77:ff:ff:8b:e0:3c:ea:e8:02:91:8b:a5:
bb:d8:cc:f9:28:0a:a8:a1:20:f4:09:80:c2:ed:79:66:d3:e7:
73:73:d4:16
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
ODVFOTExMC8GA1UEBRMoRjY5OEI1QjQ3QTA2RDUzMDdERUM2MDg5NjkwNjMwNzRC
NjhGRjVDQTAeFw0yNTAxMTQxOTQ0MzRaFw0yNjA1MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY3ODZiZWEyLTVhMjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC+dQurgXKtdBRkQi2xztPFug0ZcIVhqPaW4WvDZzkyxak/isgtyMiy0Mn4gZeF
RQFepQPruYjJevf0B7Sl5CyHfy5S6reXEzSth8YWF6p8iRfl/Wv+pUxzmsxdsAOu
VqVv/i91BSNKWtYJ9r6b6WKLcio/eDgg1p/rDjC1Oug7f8uT00Yj4UrcWE4+YMcM
JEZizWSdAYuU2ujtJoEUQCQ0jRUi9IHbehxd+bUGu7DuN2gmT7AIOBBYZSPhm+bR
IxUw8+GR7rYBGcy+8c5iIxT3/AE+J002vP4IWRhAYUPY11qxWPxY7+2QxIvhSlmf
0018QIbLtwG3u07w8knkxTjJAgMBAAGjggKWMIICkjAdBgNVHQ4EFgQU0PAJlICg
40eLsx5I/XftxiGBlGwwHwYDVR0jBBgwFoAU9pi1tHoG1TB97GCJaQYwdLaP9cow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4NUU5L0M5MjgwNDNBRDE3
NjExRUY5NUM1REU1QUM0RjlBRTAyLzlwaTF0SG9HMVRCOTdHQ0phUVl3ZExhUDlj
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvOXBpMXRIb0cxVEI5N0dDSmFRWXdkTGFQOWNvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
ODVFOS9DOTI4MDQzQUQxNzYxMUVGOTVDNURFNUFDNEY5QUUwMi9GQUJBMTFCNkQy
QUYxMUVGQTdGNjE2MTlDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACQB6SAwDQYJKoZIhvcNAQELBQADggEBADUXO/b5VmV/l8i6
oaEX2pHsFK/a4+YYOyQtEPgm3j96KjfCU2NvsUeEMTOiK/1Vi4RFBGzRLecLf94t
3f5XCrHZXDSzH6FjzSsgdUV22H+6fczamUiMKzPM2n/LC110Hu2P2ayXKByjMDy6
5WNq5UU7EAa/2p8hRCC25BXGc7WyCZ4fewFK1bHlXfKS6v9qQifvI0NAusXAYLOi
l4ovkJ3467xQOMY0ijWYMiUNp9sUORiCydgYX9x89iCrItfELrlJXwz3aeXIM5d1
XAWewLIZFcRJmYID9X26rx9u8nf//4vgPOroApGLpbvYzPkoCqihIPQJgMLteWbT
53Nz1BY=
-----END CERTIFICATE-----
Generated at Sat Apr 5 05:25:01 2025 by rpki-client