Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/1032223CBC2B11EE9E04192FC4F9AE02.roa
File: 1032223CBC2B11EE9E04192FC4F9AE02.roa (raw, json)
Hash identifier: KaLq/qLC36FBeVUH4PJULMTUIMWcwgut4EvM5q8D+vE=
Subject key identifier: 1C:48:C5:33:14:A6:CF:78:27:4F:A0:79:CB:28:3B:A3:B7:92:26:6C
Certificate issuer: /CN=A917530D/serialNumber=E780FA3777B81D4CF6A35406EA5CF4BE4F65E9FA
Certificate serial: CC
Authority key identifier: E7:80:FA:37:77:B8:1D:4C:F6:A3:54:06:EA:5C:F4:BE:4F:65:E9:FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/54D6N3e4HUz2o1QG6lz0vk9l6fo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/1032223CBC2B11EE9E04192FC4F9AE02.roa
Signing time: Mon 03 Feb 2025 04:58:41 +0000
ROA not before: Mon 03 Feb 2025 04:58:41 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 140210
IP address blocks: 2401:7860::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 204 (0xcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917530D
Validity
Not Before: Feb 3 04:58:41 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67a04d01-c78a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c4:30:e9:47:4d:85:76:b6:8c:c4:a8:17:18:
b7:6c:f5:82:4a:06:b6:40:38:ff:8a:4a:b5:da:61:
f9:6a:0e:27:10:97:b7:ca:c7:fd:03:01:57:e6:58:
cf:a5:87:98:1c:2f:8a:b9:cc:2c:37:ea:d6:e1:69:
fa:a1:fe:03:6c:26:d4:e1:c1:31:64:cf:b8:7b:02:
e8:77:68:cf:f6:4d:8b:79:d9:59:36:85:d9:8d:eb:
08:4d:d7:02:97:dc:ee:5c:86:b3:5a:28:db:ea:c6:
c5:8e:6b:bb:c9:c2:63:f1:8e:f5:bc:00:43:fe:2c:
93:06:22:8e:a0:08:82:6f:f8:c0:c8:e7:fb:22:62:
b5:80:93:a2:b2:67:33:fd:6f:5f:b6:8d:dd:76:7f:
26:ff:79:a8:19:72:74:ae:e0:e1:44:df:65:24:84:
3c:ec:b7:e5:77:b3:b7:7e:73:f3:b8:07:02:c7:39:
d9:9f:aa:ad:4e:93:44:79:40:b3:3d:7f:13:73:c8:
40:b4:b6:d4:e3:70:4f:a7:82:d6:b7:48:3f:d9:58:
00:c7:f2:3d:70:3d:f6:aa:ea:58:b7:88:b9:6a:f0:
8c:ed:95:ae:c3:6c:89:c2:68:07:99:11:c1:a9:bc:
c8:2e:95:00:89:d0:a7:c4:9a:f4:96:ef:68:8c:1f:
83:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:48:C5:33:14:A6:CF:78:27:4F:A0:79:CB:28:3B:A3:B7:92:26:6C
X509v3 Authority Key Identifier:
keyid:E7:80:FA:37:77:B8:1D:4C:F6:A3:54:06:EA:5C:F4:BE:4F:65:E9:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/54D6N3e4HUz2o1QG6lz0vk9l6fo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/1032223CBC2B11EE9E04192FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:7860::/48
Signature Algorithm: sha256WithRSAEncryption
9a:1a:36:ae:f6:fb:34:8d:48:2d:58:d1:01:11:c8:f7:72:2c:
2d:9e:38:e3:f6:e8:b1:6c:c9:db:68:a0:64:6e:f9:7e:6b:a1:
aa:78:4d:22:3a:f7:12:65:59:9c:e6:e7:ee:33:18:20:57:71:
c7:f7:96:3c:b3:c9:1a:8f:d6:11:8b:69:41:1f:7b:1f:4d:0b:
86:3d:90:b9:8f:7e:06:1f:6c:ac:65:60:7a:f6:c6:02:d4:61:
fe:8b:c3:9f:e3:5c:b9:f0:da:65:e3:b4:fc:98:ba:e5:35:61:
f7:ce:43:d0:36:cc:f6:68:c7:df:5b:44:4e:11:74:ac:fc:ce:
d6:18:a5:07:42:98:d8:fe:5b:57:ef:78:39:fe:5e:61:ca:16:
1b:f5:0f:c5:1f:d7:8c:aa:fe:73:15:45:83:af:58:be:c6:84:
0d:76:df:ed:c3:22:17:17:79:81:a1:58:a6:27:ad:ac:ba:e6:
01:2a:da:0b:60:be:1a:86:1c:68:b6:c7:ec:98:43:17:ac:24:
bb:d2:b3:87:fe:f5:9a:fc:30:74:2d:26:f2:98:c0:50:ec:5b:
27:e2:b2:74:68:ee:4a:98:5f:8f:b0:68:0c:b2:55:60:13:62:
14:8a:a3:28:e2:23:40:15:7a:b7:6f:8c:8a:01:c1:d9:f7:67:
1f:2a:8e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:57:37 2025 by rpki-client