Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9DD5C0CA3CF111EF9B00241AC4F9AE02.roa
File: 9DD5C0CA3CF111EF9B00241AC4F9AE02.roa (raw, json)
Hash identifier: Vzjlo3eMf2O4IBh/bC41Zpj6fLBsLS9zqd+uaUeJ8rg=
Subject key identifier: 34:F6:C2:88:CB:52:DA:8A:5C:A7:15:3B:4C:0B:38:07:72:71:5F:00
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 942D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9DD5C0CA3CF111EF9B00241AC4F9AE02.roa
Signing time: Mon 08 Jul 2024 06:16:31 +0000
ROA not before: Mon 08 Jul 2024 06:16:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 152539
IP address blocks: 2001:df3:fdc0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37933 (0x942d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Jul 8 06:16:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=668b843e-22b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b5:ee:39:ab:5f:80:34:2a:3e:71:27:26:b1:
2a:bd:23:59:73:e3:61:78:11:e2:77:ad:54:6d:a3:
07:74:16:97:e6:b1:99:0e:50:d3:a7:31:3f:7c:46:
66:51:f3:e0:7e:bb:c9:41:6a:d1:ee:07:42:d2:5f:
84:c3:91:03:12:8d:a8:00:bf:86:f6:8b:f0:7a:8a:
d8:d9:f0:f6:42:56:0c:94:0e:9d:46:8c:33:43:62:
bd:f5:9e:26:33:22:7d:cf:9c:13:0f:6b:bc:9d:55:
32:2c:0f:15:40:ad:bd:01:c1:3b:58:f8:0c:df:dd:
15:f3:28:ec:7f:1d:6e:ae:a1:01:f8:45:c2:30:a6:
2e:82:c4:34:06:14:ed:01:00:57:db:2b:3d:cf:57:
78:d0:28:c4:62:2f:bb:72:99:e1:84:b5:1b:49:fa:
38:29:01:ea:d5:f9:9c:50:fd:5b:4e:90:e0:79:45:
8d:3d:aa:98:09:7e:3d:e1:5b:64:94:51:ae:7c:48:
eb:1b:fc:ee:55:3d:08:ca:d5:4c:f5:50:7f:39:60:
97:01:b9:1b:6f:9c:ec:6f:a5:6a:67:82:11:32:1b:
a3:ec:90:1e:de:7a:e1:20:b8:47:b8:64:f2:f9:4d:
33:a2:b7:b8:3f:de:f9:95:8a:4c:06:41:4c:2b:95:
a0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F6:C2:88:CB:52:DA:8A:5C:A7:15:3B:4C:0B:38:07:72:71:5F:00
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9DD5C0CA3CF111EF9B00241AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:fdc0::/48
Signature Algorithm: sha256WithRSAEncryption
5c:70:09:a8:d4:66:fd:25:6b:42:27:83:60:a5:93:66:a3:4e:
03:89:a6:6c:6a:5f:72:23:e1:95:33:0f:5d:89:9c:56:79:6b:
87:08:e1:02:5d:b6:bc:37:e2:c7:6d:fb:ba:8a:a1:b5:92:36:
d6:d6:b8:96:70:45:c7:27:0c:90:04:b1:62:2d:49:cf:95:ce:
cc:70:fa:1c:49:23:18:60:26:fc:5a:c8:a1:73:78:16:98:6e:
d0:04:91:e3:47:a0:3e:7b:c1:c2:b8:9c:37:4c:15:ad:ca:ea:
64:ff:a0:2a:f4:30:37:fe:1e:cb:26:3d:c1:a2:29:ec:d6:db:
fc:c1:3b:f5:74:ce:b6:89:c4:98:f9:8f:6d:4f:8b:22:b3:87:
89:50:88:1d:50:69:a7:2a:ff:3e:8a:d1:7a:bc:56:92:aa:d6:
53:42:72:f7:9e:df:90:0e:fd:2a:61:ed:df:a7:24:3a:ab:2b:
7f:48:65:28:c8:ce:09:14:5b:bd:75:9e:3d:31:c9:75:a3:88:
06:62:07:89:62:bc:4f:2c:7b:97:97:bb:5f:30:46:01:cd:89:
ae:46:c6:b9:14:36:a5:c8:cd:96:fa:63:8f:42:c7:92:76:99:
08:76:07:5f:36:af:fb:64:6d:5d:9f:27:45:92:2e:01:86:88:
54:04:87:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 01:32:00 2025 by rpki-client