Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/9166F61638E511EF803AF660C4F9AE02.roa
File: 9166F61638E511EF803AF660C4F9AE02.roa (raw, json)
Hash identifier: HXqdiQxjt6jDJRy6xUG+Y43waVhKeekg/3lz7cpck8U=
Subject key identifier: 4E:B3:86:A5:EB:60:BC:6D:E5:D1:89:B8:1D:7A:08:2D:17:A0:D3:C5
Certificate issuer: /CN=A9178424/serialNumber=6581402A2DAEC53ECD65FD7C1DC800FA6E7573FA
Certificate serial: 83
Authority key identifier: 65:81:40:2A:2D:AE:C5:3E:CD:65:FD:7C:1D:C8:00:FA:6E:75:73:FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYFAKi2uxT7NZf18HcgA-m51c_o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/9166F61638E511EF803AF660C4F9AE02.roa
Signing time: Mon 03 Mar 2025 08:29:35 +0000
ROA not before: Mon 03 Mar 2025 08:29:34 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 4764
IP address blocks: 2001:df0:201::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131 (0x83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178424
Validity
Not Before: Mar 3 08:29:34 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67c5686e-ccc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:32:65:bb:f5:b4:56:71:54:6f:b9:dc:92:73:
d9:8a:34:57:27:27:17:14:6f:86:22:9b:a7:7d:5f:
21:a2:4f:53:9a:85:e4:91:83:36:ab:24:f4:ad:90:
25:47:8a:e4:f5:fb:05:8c:64:ad:83:5d:9f:09:db:
be:26:77:a7:f4:9d:d9:bb:3f:88:78:58:25:68:6c:
9c:c8:48:da:b8:61:23:e6:67:a9:7c:67:90:66:42:
be:61:d0:1f:c9:46:b5:db:02:98:7f:6d:2e:31:63:
3c:18:d3:5b:09:d9:4b:c0:e4:81:12:af:02:c7:93:
94:55:ad:eb:e6:28:e1:9e:01:c4:75:e8:63:57:f1:
fd:6a:71:71:fe:b2:af:de:d9:e6:47:58:1c:0f:a8:
a5:ba:9e:78:8f:cf:ab:3f:13:06:6b:9a:bb:5b:fe:
3c:87:35:2f:a8:8b:8a:c8:b5:5c:c3:ca:c1:eb:9e:
83:2e:b4:ea:08:f7:87:17:85:a0:b4:53:18:57:09:
d0:3d:b5:9b:26:34:77:6d:77:88:d0:76:73:c6:6d:
b9:ec:89:71:ae:00:6a:60:f7:34:18:38:7c:6c:5f:
fc:0c:c8:fe:96:72:14:98:3f:12:03:35:f2:72:5a:
f4:1e:d9:e1:12:92:57:5f:bd:14:ec:85:b8:9a:07:
7e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B3:86:A5:EB:60:BC:6D:E5:D1:89:B8:1D:7A:08:2D:17:A0:D3:C5
X509v3 Authority Key Identifier:
keyid:65:81:40:2A:2D:AE:C5:3E:CD:65:FD:7C:1D:C8:00:FA:6E:75:73:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYFAKi2uxT7NZf18HcgA-m51c_o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/9166F61638E511EF803AF660C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df0:201::/48
Signature Algorithm: sha256WithRSAEncryption
7f:32:0a:02:f2:65:01:58:9f:83:00:67:5f:b2:89:79:a8:07:
d0:27:1e:5f:21:54:64:59:d7:dd:5f:5e:9d:fe:3f:71:bd:b7:
19:34:6a:c9:bb:0d:cf:ce:e1:0e:08:45:e3:1d:1b:61:af:41:
49:bc:38:72:03:bb:ad:f2:ed:93:69:62:aa:8a:4a:12:c5:66:
49:04:a9:79:44:1d:de:b0:17:84:44:0c:1c:4f:7f:ab:38:ff:
44:52:61:55:a5:db:25:b4:5a:45:f6:30:72:0b:a6:6f:e7:b0:
6b:5a:f2:b7:44:05:8f:1d:81:e0:b7:d8:47:82:a3:d3:a6:e8:
83:7e:64:6a:bb:0a:76:9f:e5:c0:88:7c:c8:2c:56:5a:82:0a:
72:6c:05:ee:6e:63:24:e1:61:dd:15:a2:e8:d1:cb:05:1b:a4:
78:93:09:aa:7b:7c:f8:8e:bc:68:dc:65:e1:2c:c4:b8:31:59:
d1:d1:1b:76:14:88:9f:df:06:c6:ac:82:54:86:a9:a0:7e:01:
9e:09:65:9c:5e:2f:7a:b9:0a:9e:c3:37:e2:64:b6:de:87:3f:
d4:6c:8f:d0:b7:d6:d8:92:27:86:ac:f5:e1:ca:d9:99:11:f5:
d8:24:e0:c1:2e:fc:4a:82:96:2a:b9:7d:5b:a2:b4:15:89:12:
9c:82:7c:2d
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgICAIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Nzg0MjQxMTAvBgNVBAUTKDY1ODE0MDJBMkRBRUM1M0VDRDY1RkQ3QzFEQzgwMEZB
NkU3NTczRkEwHhcNMjUwMzAzMDgyOTM0WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02N2M1Njg2ZS1jY2M1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwzJlu/W0VnFUb7ncknPZijRXJycXFG+GIpunfV8hok9TmoXkkYM2qyT0rZAl
R4rk9fsFjGStg12fCdu+Jnen9J3Zuz+IeFglaGycyEjauGEj5mepfGeQZkK+YdAf
yUa12wKYf20uMWM8GNNbCdlLwOSBEq8Cx5OUVa3r5ijhngHEdehjV/H9anFx/rKv
3tnmR1gcD6ilup54j8+rPxMGa5q7W/48hzUvqIuKyLVcw8rB656DLrTqCPeHF4Wg
tFMYVwnQPbWbJjR3bXeI0HZzxm257IlxrgBqYPc0GDh8bF/8DMj+lnIUmD8SAzXy
clr0HtnhEpJXX70U7IW4mgd+1wIDAQABo4ICmDCCApQwHQYDVR0OBBYEFE6zhqXr
YLxt5dGJuB16CC0XoNPFMB8GA1UdIwQYMBaAFGWBQCotrsU+zWX9fB3IAPpudXP6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODQyNC84MjVCRUI3NDM4
RTMxMUVGOTE0QjJGMzNDNEY5QUUwMi9aWUZBS2kydXhUN05aZjE4SGNnQS1tNTFj
X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pZRkFLaTJ1eFQ3TlpmMThIY2dBLW01MWNfby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Nzg0MjQvODI1QkVCNzQzOEUzMTFFRjkxNEIyRjMzQzRGOUFFMDIvOTE2NkY2MTYz
OEU1MTFFRjgwM0FGNjYwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwAgAQ3wAgEwDQYJKoZIhvcNAQELBQADggEBAH8yCgLyZQFY
n4MAZ1+yiXmoB9AnHl8hVGRZ191fXp3+P3G9txk0asm7Dc/O4Q4IReMdG2GvQUm8
OHIDu63y7ZNpYqqKShLFZkkEqXlEHd6wF4REDBxPf6s4/0RSYVWl2yW0WkX2MHIL
pm/nsGta8rdEBY8dgeC32EeCo9Om6IN+ZGq7Cnaf5cCIfMgsVlqCCnJsBe5uYyTh
Yd0VoujRywUbpHiTCap7fPiOvGjcZeEsxLgxWdHRG3YUiJ/fBsasglSGqaB+AZ4J
ZZxeL3q5Cp7DN+Jktt6HP9Rsj9C31tiSJ4as9eHK2ZkR9dgk4MEu/EqCliq5fVui
tBWJEpyCfC0=
-----END CERTIFICATE-----
Generated at Fri Apr 11 17:36:08 2025 by rpki-client