Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/19522CDE1BF511EF8CD81739C4F9AE02.roa
File: 19522CDE1BF511EF8CD81739C4F9AE02.roa (raw, json)
Hash identifier: Strc0+HJ/uCsN5NBs1wb2RRQaRPbowBjV0+cxQioI1M=
Subject key identifier: F0:A8:4C:7A:AA:2F:58:54:B1:3A:65:F3:44:61:C9:3E:14:77:43:B1
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 9086
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/19522CDE1BF511EF8CD81739C4F9AE02.roa
Signing time: Thu 30 May 2024 16:28:19 +0000
ROA not before: Thu 30 May 2024 16:28:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 152506
IP address blocks: 2401:a260::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36998 (0x9086)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 30 16:28:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a923-8c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:94:50:bc:cb:a5:72:e2:c4:7f:ca:4e:7e:1d:
a8:5e:de:83:8d:88:e9:76:6e:f9:c6:a0:1f:df:30:
43:98:a7:51:56:2f:d4:b9:9c:2c:78:6b:20:7b:ef:
5a:b2:3f:e3:7e:39:dd:16:48:03:86:61:17:73:b3:
81:61:73:2a:80:28:15:ca:94:52:2b:d1:6d:3e:34:
d1:30:67:38:06:3b:e7:83:fd:7c:95:cb:38:df:af:
78:d5:f9:41:70:1c:68:9b:d7:d4:01:e2:b6:00:02:
31:c7:9c:67:98:36:6b:5d:f8:a9:dc:8f:f0:2e:d8:
9c:d4:80:df:59:c6:ba:a0:c0:d6:45:13:61:13:2d:
fc:63:bd:a0:5f:a9:96:8c:ed:e8:77:69:99:6b:5f:
fc:39:19:56:0f:58:9c:ec:1d:04:ca:5d:e0:52:fc:
04:85:32:a6:53:84:a2:d1:fc:1d:ce:97:0c:c4:ef:
9f:d2:ff:9a:c9:85:50:e6:c6:9f:0a:2b:59:fc:29:
01:2c:2f:b0:4d:03:4b:0e:c3:3c:41:9e:cd:f9:ac:
ab:0e:78:88:9c:ca:2f:02:26:c9:59:d8:5c:cf:a8:
71:a8:43:22:4d:0f:7a:9d:bb:5f:c3:70:0c:49:d7:
a0:83:c2:c9:2c:f8:73:b7:2a:03:f7:4c:c2:e3:40:
be:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:A8:4C:7A:AA:2F:58:54:B1:3A:65:F3:44:61:C9:3E:14:77:43:B1
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/19522CDE1BF511EF8CD81739C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:a260::/32
Signature Algorithm: sha256WithRSAEncryption
b7:d1:de:8e:53:b0:cd:e7:a9:65:22:77:2c:2a:c9:33:c0:82:
d9:67:17:96:78:41:8f:1e:b9:ca:94:bf:85:a0:b5:cc:5d:ce:
80:99:30:af:11:0f:a1:9d:ba:2a:d1:68:f9:44:04:f5:cb:e5:
57:d0:0c:fa:0d:f6:90:ab:02:03:6c:06:16:c2:3c:d4:94:bb:
3e:65:2e:3a:f3:ea:8a:0a:26:91:00:9f:60:dd:6f:a9:1a:d6:
bb:c7:a4:52:36:1a:2d:cf:2f:fe:51:fa:9b:89:16:d9:3d:38:
4e:23:d6:1e:45:a4:cc:31:2d:f2:58:2f:56:9d:47:df:25:8c:
a0:e7:d2:dd:11:37:4a:86:85:a7:26:13:03:cb:1b:c5:19:8c:
17:4e:18:24:73:46:03:79:8c:4a:fd:21:de:fc:b9:b2:91:f9:
d3:07:c2:fc:6c:55:98:21:21:93:e3:74:0e:6b:8f:32:4c:c5:
0c:12:b7:50:f2:e9:07:e2:76:78:37:0c:71:cd:21:7e:e4:b7:
06:04:98:ec:d9:9f:77:f3:ac:82:83:9e:42:d9:c6:05:0b:f7:
7d:e6:b0:b7:7f:a6:e7:b0:31:e9:a5:13:02:38:22:53:16:4c:
ef:ff:3c:90:b0:bb:23:ef:6c:23:b8:82:d2:82:e1:cf:be:c6:
5a:42:e2:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:12:29 2025 by rpki-client