Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2DCE9F38D8C511EBB077C81FC4F9AE02.roa
File: 2DCE9F38D8C511EBB077C81FC4F9AE02.roa (raw, json)
Hash identifier: Rad3Dw0mOH+1vgP1rGfIjNMY9Z0Ta86pTeUMemOpoxw=
Subject key identifier: 16:7F:69:DE:C9:E9:35:1D:4D:42:BC:94:CC:B6:80:DD:4B:98:E1:7F
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8DE8
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2DCE9F38D8C511EBB077C81FC4F9AE02.roa
Signing time: Thu 30 May 2024 16:17:32 +0000
ROA not before: Thu 30 May 2024 16:17:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 141882
IP address blocks: 2001:df6:4180::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36328 (0x8de8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 30 16:17:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a69c-b9b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e6:cd:b9:8b:ec:11:ed:4c:b2:60:5b:22:50:
04:64:02:c2:ce:c3:cd:11:2a:69:fb:1b:f7:05:a4:
90:ca:bb:18:d4:dc:2f:74:5c:71:b8:a3:7e:17:68:
ab:4e:82:b2:41:48:a0:90:22:f4:17:d3:0f:aa:f3:
fc:bb:a7:b0:14:9a:0b:75:0f:4f:a9:9d:22:f9:42:
43:49:0d:52:1e:14:ae:ef:33:a1:3a:2a:6e:1b:06:
1d:3f:14:49:9e:6d:45:17:54:9f:06:23:3b:24:45:
5a:b0:13:98:1c:8b:40:5c:63:82:95:86:6e:fb:38:
10:cd:99:2a:ac:00:b7:6d:94:46:69:ea:af:f3:e8:
0e:18:21:51:06:08:bf:34:ca:ba:f1:65:b1:70:73:
13:6f:a9:85:ae:31:22:14:13:a0:d3:02:e1:a2:9a:
16:12:ee:60:71:40:fd:94:db:f2:c3:64:dc:87:6b:
7c:47:68:6e:2d:05:da:71:61:3f:df:42:6d:b4:2f:
e0:3b:1c:15:5d:ff:1c:65:49:43:90:57:0a:da:f0:
18:9d:fe:c5:19:57:59:c0:ba:63:01:be:c0:e8:c4:
3e:bf:1c:89:ca:88:8c:5f:52:19:ba:77:4e:e6:51:
0d:f4:b3:14:e8:e6:3a:fb:0d:57:ae:2a:be:d1:c7:
cf:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:7F:69:DE:C9:E9:35:1D:4D:42:BC:94:CC:B6:80:DD:4B:98:E1:7F
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2DCE9F38D8C511EBB077C81FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:4180::/48
Signature Algorithm: sha256WithRSAEncryption
2d:a5:fe:b1:93:89:dd:f8:a0:a0:65:a3:1f:93:6f:7d:29:ae:
f0:bb:49:06:f8:54:f2:8c:3c:9e:3c:54:49:15:7c:1d:0a:92:
8a:74:64:9d:eb:82:82:84:b5:7f:93:ad:87:28:49:66:fd:6e:
c7:8b:e0:7f:62:05:fb:b5:10:3b:c1:36:e3:9f:56:a5:b9:07:
c4:53:24:8e:97:ea:91:77:35:ef:de:3b:33:f8:a2:9b:32:e1:
3c:74:12:99:9b:f4:62:1f:64:1d:e0:11:8d:b0:75:cc:a5:7f:
20:2f:e6:92:b1:40:3f:0d:e1:d8:64:77:3b:a1:bd:ef:56:ec:
ed:36:89:c4:4f:b3:81:44:31:e9:0b:d4:b9:c4:0b:f0:20:e8:
1b:51:00:ef:32:89:d4:15:f5:c9:d3:58:f3:49:e7:06:9a:10:
13:91:50:6a:8a:5f:26:df:0d:3e:28:c3:3d:8e:e1:c3:ee:41:
78:99:88:a4:60:55:08:03:a1:75:3d:81:dd:04:18:f5:4b:f5:
d6:27:cb:8a:3c:25:ac:9c:45:b3:f4:f2:42:80:0f:b3:0a:7e:
01:0c:1a:8a:f0:ae:04:07:68:11:da:75:0d:dc:54:8d:a4:73:
39:c9:96:59:4c:bd:12:07:fb:af:1e:f0:ae:a3:f2:20:63:15:
58:83:a7:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 07:23:26 2025 by rpki-client