Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/FDE6938CE90C11EFB9D98326C4F9AE02.roa
File: FDE6938CE90C11EFB9D98326C4F9AE02.roa (raw, json)
Hash identifier: EQY90pkMKZS20T7XhciTL191HbTMnbpWtQHaja8QyGI=
Subject key identifier: E6:01:87:87:D4:7D:76:15:CF:06:68:F3:7C:C6:AB:C7:C9:CC:C7:11
Certificate issuer: /CN=A91A0A2E/serialNumber=6A3EF67182DBB0F6CCF3CA41378C0119806AE9BD
Certificate serial: 03
Authority key identifier: 6A:3E:F6:71:82:DB:B0:F6:CC:F3:CA:41:37:8C:01:19:80:6A:E9:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aj72cYLbsPbM88pBN4wBGYBq6b0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/FDE6938CE90C11EFB9D98326C4F9AE02.roa
Signing time: Wed 12 Feb 2025 06:45:48 +0000
ROA not before: Wed 12 Feb 2025 06:45:48 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 16509
IP address blocks: 163.61.113.0/24 maxlen: 24
2001:df5:1440::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0A2E
Validity
Not Before: Feb 12 06:45:48 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67ac439c-159b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:72:c5:03:9e:1f:00:13:2e:26:cb:99:d8:64:
84:09:90:87:df:6d:a3:ab:e3:91:95:4f:70:44:56:
d3:28:9d:19:f4:fc:2a:3c:3f:46:cb:f8:2f:4b:61:
1d:97:b0:7b:f2:1f:ae:ad:2f:c3:43:1d:d1:1a:36:
67:de:c8:d9:af:e6:a0:13:18:2f:98:3a:49:a0:9d:
fb:35:bf:67:85:59:89:3c:72:72:d2:2d:45:8e:3c:
3c:74:21:1e:c0:0c:a0:c6:01:94:ec:72:74:86:c6:
af:98:b9:9e:f4:77:16:e8:97:27:1b:3e:5e:b2:45:
75:fc:46:30:dc:4a:13:0e:6f:1b:1a:9f:c7:8f:1b:
54:e0:95:f5:c5:8d:4b:6b:a7:1a:67:85:6d:1e:cf:
af:95:39:f2:e5:a8:f3:20:79:54:27:88:32:59:b0:
ff:10:c7:81:13:e0:66:12:9e:76:34:9f:42:77:e7:
7e:62:ed:c1:f4:f2:1a:70:7c:21:04:22:80:95:6b:
3d:71:9b:50:07:d7:d9:c2:f4:67:81:4d:31:a8:a5:
b3:b0:09:26:dc:9b:f7:67:f4:7e:36:c2:11:6e:75:
0d:5d:5b:c0:16:10:90:8c:8c:cd:fc:8c:e3:4d:6b:
42:37:df:21:61:98:d8:fb:5b:5a:e0:b7:2e:12:0f:
fc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:01:87:87:D4:7D:76:15:CF:06:68:F3:7C:C6:AB:C7:C9:CC:C7:11
X509v3 Authority Key Identifier:
keyid:6A:3E:F6:71:82:DB:B0:F6:CC:F3:CA:41:37:8C:01:19:80:6A:E9:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aj72cYLbsPbM88pBN4wBGYBq6b0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/FDE6938CE90C11EFB9D98326C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
163.61.113.0/24
IPv6:
2001:df5:1440::/48
Signature Algorithm: sha256WithRSAEncryption
2d:f3:6c:72:26:d4:52:cd:06:3a:33:15:f8:3e:9d:c0:bd:7c:
6a:98:71:f1:9c:e1:8e:71:a1:42:98:ab:4c:17:ba:4e:98:c8:
f7:5d:14:85:09:7a:0f:99:c1:02:47:72:96:c9:52:c5:b0:e0:
da:98:ad:24:2f:bd:5b:04:30:be:cc:58:1c:85:4a:d0:8b:02:
55:0d:a7:46:90:5e:4c:63:b0:41:2b:83:dd:44:9b:10:53:3b:
7a:85:2a:1c:26:e5:51:91:3f:06:50:f1:9d:d9:de:22:f0:22:
32:c8:9f:66:1d:e4:b4:68:bb:13:a9:f2:20:5e:d2:3b:03:94:
11:48:73:f5:3f:38:42:7c:58:59:36:f8:ce:55:bb:c5:b3:e6:
f7:25:81:97:7f:45:68:1d:6e:f3:1d:97:07:92:b7:76:75:9c:
93:e5:13:4b:47:f8:01:86:84:95:79:0f:37:32:c0:ba:0e:26:
fb:45:3b:da:9d:27:0b:b9:ca:15:2d:dd:64:4f:ef:79:71:34:
6c:6f:f3:c9:e5:42:7b:b0:1a:da:03:57:4c:5d:9b:a6:d9:eb:
73:86:d1:81:b4:a7:b5:db:bf:e5:05:5f:4c:74:da:5b:4e:97:
b2:01:6e:39:a7:e3:c5:5c:ac:9e:1e:ca:6e:64:0d:0b:12:c2:
63:ac:f3:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:32:40 2025 by rpki-client