Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/31C36B64905F11EFAF49EB6BC4F9AE02.roa
File: 31C36B64905F11EFAF49EB6BC4F9AE02.roa (raw, json)
Hash identifier: L+MQl2N4HWMJyowT/sQLapWMqlpwpjacwTEIlXHA4EM=
Subject key identifier: 74:9B:B8:F6:01:51:37:D9:84:C4:A1:94:0F:B7:06:1E:7A:E9:CE:75
Certificate issuer: /CN=A919D88F/serialNumber=3943D4261579CDE0E82A05CA2AB54B387BA51933
Certificate serial: 03
Authority key identifier: 39:43:D4:26:15:79:CD:E0:E8:2A:05:CA:2A:B5:4B:38:7B:A5:19:33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OUPUJhV5zeDoKgXKKrVLOHulGTM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/31C36B64905F11EFAF49EB6BC4F9AE02.roa
Signing time: Tue 22 Oct 2024 10:20:00 +0000
ROA not before: Tue 22 Oct 2024 10:20:00 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 153359
IP address blocks: 2001:df4:6340::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D88F
Validity
Not Before: Oct 22 10:20:00 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=67177c50-3f90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:17:52:3f:57:1c:33:36:71:55:c6:3a:b4:01:
d2:f0:3d:4c:30:ed:96:9e:b9:e0:02:35:24:25:1a:
af:57:c7:47:49:36:5a:29:07:53:a0:95:fb:bf:eb:
83:dd:36:73:96:8f:19:02:24:97:80:90:dd:04:dc:
0c:27:04:03:32:e5:3a:a7:94:65:42:81:f3:c9:0c:
11:6a:8c:db:30:19:c4:7d:1b:9e:cb:72:99:4a:34:
43:77:2c:1b:e0:5c:b1:a5:48:46:b0:03:50:0e:be:
46:90:1e:c9:5d:97:25:ca:83:d5:a9:94:3c:f2:0a:
8d:3d:1f:52:22:10:39:b5:e8:7b:c4:dd:0b:fe:49:
44:0e:e3:d8:4f:02:8a:57:79:db:c0:54:c2:a3:ad:
c2:e5:d5:85:e1:0f:86:27:0d:4c:9b:57:cc:6f:df:
80:be:8d:8d:6f:96:fd:70:33:b1:57:5a:06:d3:e6:
87:8a:06:aa:ee:79:a9:0b:ae:e8:d9:1a:c3:42:db:
13:81:62:c9:f4:71:46:23:d7:4b:21:47:8d:1c:82:
04:92:9d:30:01:0f:ad:53:1e:b1:cc:20:c1:31:00:
db:f2:89:ab:97:6a:f4:4f:9b:93:57:5b:1b:ef:1d:
6a:4f:7d:ac:98:8c:2f:ea:7e:9a:bf:85:36:e7:3b:
d3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:9B:B8:F6:01:51:37:D9:84:C4:A1:94:0F:B7:06:1E:7A:E9:CE:75
X509v3 Authority Key Identifier:
keyid:39:43:D4:26:15:79:CD:E0:E8:2A:05:CA:2A:B5:4B:38:7B:A5:19:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OUPUJhV5zeDoKgXKKrVLOHulGTM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/31C36B64905F11EFAF49EB6BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:6340::/48
Signature Algorithm: sha256WithRSAEncryption
63:a1:1b:93:22:98:52:86:1f:29:32:9b:7f:1b:fa:4b:ad:c6:
13:0f:4c:27:99:0a:8a:04:6d:9e:96:fb:d3:0b:c5:aa:d3:00:
8f:20:91:2c:96:74:0b:2d:17:a7:72:5d:d0:4d:32:f8:bc:3a:
ea:59:b5:84:d9:76:d6:1c:e2:3e:7e:ce:4b:c2:2f:f9:67:d0:
f9:50:bb:6d:75:b5:c7:8a:b6:4e:2d:ef:bf:64:2b:90:03:14:
5b:e4:3d:b5:5a:8f:28:f5:38:93:be:c6:7e:e6:ce:fb:66:1f:
27:e7:5b:6b:6c:04:c4:21:eb:c3:ff:89:f9:95:f2:59:4f:a2:
9d:b8:04:02:7e:e5:e0:41:b3:8f:d8:29:7c:23:64:b7:94:be:
76:6c:6c:a1:88:b3:9b:70:5d:42:05:47:1a:65:29:4c:cb:ef:
fb:fc:2f:f8:ab:16:03:68:c2:86:28:40:af:f7:f6:04:55:22:
58:44:a5:fb:ab:36:44:ae:bf:34:d4:45:06:69:2b:a9:45:0c:
bc:69:0e:91:3d:9c:f5:1b:0e:ff:20:18:1b:d9:50:78:6c:39:
a2:64:75:ec:7b:9c:05:71:bd:14:02:af:43:39:15:ef:8f:c5:
5b:d7:f1:d5:67:5f:c2:c1:a7:26:e8:10:eb:03:ce:3e:0f:21:
e8:ea:37:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:15:01 2025 by rpki-client