Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/2A3161763D9F11EEACFF646FC4F9AE02.roa
File: 2A3161763D9F11EEACFF646FC4F9AE02.roa (raw, json)
Hash identifier: mm0VJeRGh/+0foB6ENfn+0Td2KUkG+rfML9gCL5EGhk=
Subject key identifier: 8C:84:5F:AF:8A:23:E4:07:58:6F:47:69:46:5F:9B:87:84:F5:A4:BB
Certificate issuer: /CN=A916A31E/serialNumber=E1BB1E625DBDEBB3220FF923CD6A11A2CE245196
Certificate serial: 17B3
Authority key identifier: E1:BB:1E:62:5D:BD:EB:B3:22:0F:F9:23:CD:6A:11:A2:CE:24:51:96
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bseYl2967MiD_kjzWoRos4kUZY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/2A3161763D9F11EEACFF646FC4F9AE02.roa
Signing time: Sat 04 Jan 2025 16:34:35 +0000
ROA not before: Sat 04 Jan 2025 16:34:35 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 133398
IP address blocks: 2401:f9c0:2600::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6067 (0x17b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A31E
Validity
Not Before: Jan 4 16:34:35 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=6779631b-e5d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9c:3f:38:37:42:47:23:4f:f7:78:5a:61:c3:
57:f4:67:5f:2e:76:85:71:d4:d5:e2:f2:69:d1:57:
ee:71:fe:17:ff:7f:10:b7:82:c7:6f:b9:47:32:3a:
83:83:98:30:c4:5c:23:3a:24:58:9f:8a:89:aa:6b:
ca:4f:7e:3a:21:da:de:0a:77:d9:0a:09:0a:18:cc:
2d:17:b2:c8:3f:c7:93:d1:cf:49:85:cc:44:51:49:
22:d9:df:5d:4b:ab:47:4b:e6:ad:e3:b4:9f:98:55:
69:af:73:36:d5:0c:d8:63:c8:b6:78:17:8f:23:65:
a3:e1:b9:ac:0b:d1:9a:69:c5:ee:19:04:8f:10:23:
86:8d:95:6d:c6:10:61:11:1b:a6:7c:a4:e1:58:c9:
c7:d2:f8:5a:d9:4e:18:d2:0d:d3:83:50:2a:8a:82:
62:57:be:ab:a1:a5:51:46:db:9a:41:07:0a:32:c0:
b8:b0:1a:34:77:85:c6:af:46:60:73:02:34:d4:27:
cd:d1:73:62:58:08:a4:7f:21:5a:03:d3:dd:37:d8:
c0:3e:45:a9:4b:77:dc:46:97:4a:6b:45:dc:40:5d:
5c:e6:e7:58:15:16:2c:6f:01:9b:12:09:7e:39:e0:
b6:ba:1f:d1:a6:ef:f7:47:41:56:28:e9:22:51:4f:
f1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:84:5F:AF:8A:23:E4:07:58:6F:47:69:46:5F:9B:87:84:F5:A4:BB
X509v3 Authority Key Identifier:
keyid:E1:BB:1E:62:5D:BD:EB:B3:22:0F:F9:23:CD:6A:11:A2:CE:24:51:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bseYl2967MiD_kjzWoRos4kUZY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/2A3161763D9F11EEACFF646FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:f9c0:2600::/40
Signature Algorithm: sha256WithRSAEncryption
00:45:07:b2:e0:b6:d1:22:56:fb:62:01:76:00:68:d5:18:2f:
91:cc:8d:39:ab:3b:d9:dd:61:95:f1:05:9a:28:98:d1:05:5f:
24:38:ad:a3:4a:47:d4:0b:5a:76:4f:dd:34:f4:e3:61:1e:12:
23:34:a6:1b:c1:37:6d:f7:ee:33:39:f1:1a:59:53:f6:da:73:
e6:f9:b4:17:f1:29:9b:13:df:8a:60:16:c0:3d:d9:72:23:a3:
e6:86:fe:90:9f:fd:06:33:0d:d7:d0:82:b4:18:87:43:5d:c3:
5b:5d:03:ac:de:76:5f:cd:92:77:6b:58:25:d6:ff:58:f9:59:
b7:55:53:ff:cb:a7:a8:bb:4e:62:27:1c:48:38:91:e0:ca:02:
40:1e:36:7b:4b:4b:f1:fa:e9:10:53:54:d8:10:18:d4:24:2e:
ec:55:ce:36:b4:6d:66:dd:44:05:05:b8:ba:2e:c9:10:2a:1f:
7f:9e:3d:fb:32:b8:22:46:41:2a:43:50:13:d3:6c:26:bd:15:
57:1c:d8:cc:d2:02:42:cb:49:25:a5:8e:75:b3:c0:a9:0c:d5:
b4:cc:b6:05:28:a1:e5:30:9f:23:2c:d4:44:27:c1:a2:dc:54:
77:f5:02:52:d4:ae:8d:d5:f3:f8:c2:1f:dc:ba:78:86:df:23:
d0:d9:a5:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:19:26 2025 by rpki-client