Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/5B0D0BFE04D411EAA7E3F81FC4F9AE02.roa
File: 5B0D0BFE04D411EAA7E3F81FC4F9AE02.roa (raw, json)
Hash identifier: rwCF53o/2VLZF/xLvGMTlFyQCHhpOILr4tGZzUzVyo8=
Subject key identifier: E7:74:64:10:70:39:18:16:41:D8:74:C5:5A:09:62:BE:1B:EB:03:55
Certificate issuer: /CN=A91A4517/serialNumber=675F3BA1F96A9E1EC2B0137662C754DB1D1E0073
Certificate serial: 2841
Authority key identifier: 67:5F:3B:A1:F9:6A:9E:1E:C2:B0:13:76:62:C7:54:DB:1D:1E:00:73
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z187oflqnh7CsBN2YsdU2x0eAHM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/5B0D0BFE04D411EAA7E3F81FC4F9AE02.roa
Signing time: Tue 30 Apr 2024 16:22:37 +0000
ROA not before: Tue 30 Apr 2024 16:22:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58587
IP address blocks: 2403:9300::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10305 (0x2841)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4517
Validity
Not Before: Apr 30 16:22:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66311acd-5157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:85:85:ad:8f:c2:bf:ef:cc:2e:eb:6e:2b:31:
2c:86:92:09:59:3b:f5:f2:08:27:eb:e7:53:5a:98:
ea:a6:1e:fc:bb:85:b9:0f:a6:6b:64:43:73:e3:95:
8e:17:06:79:31:78:88:8e:0c:7e:74:7f:0d:88:49:
21:5f:48:88:6b:9f:96:75:6d:21:66:f8:bc:8f:61:
f7:eb:8e:87:46:33:19:ba:57:40:57:40:e9:6c:91:
89:0b:a2:7e:f6:92:87:a7:b2:fb:33:8c:e3:e6:3e:
24:24:0c:74:a3:38:28:12:49:d6:7e:5f:e4:81:36:
c7:da:c0:d5:08:51:71:43:4f:6b:b8:2e:73:fd:93:
5b:d0:c2:96:43:62:1a:4a:d6:c5:59:7c:7f:79:7b:
54:75:e9:46:2f:34:39:f4:05:8a:a2:c6:fa:c2:86:
2a:e8:46:53:a3:4d:13:79:d5:4a:58:ae:78:a8:d2:
a8:9e:9a:02:f8:7e:9d:80:de:f6:73:27:3e:82:7b:
c8:f1:d8:4a:d4:ba:7f:91:0d:f8:cb:fb:6a:df:70:
9b:e9:78:86:f8:03:2b:f4:f8:de:fe:b3:66:5a:45:
36:d3:27:41:20:71:32:54:48:59:7c:3d:85:73:e3:
dd:35:c0:82:6a:c6:7e:09:55:ca:05:c3:26:81:71:
ae:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:74:64:10:70:39:18:16:41:D8:74:C5:5A:09:62:BE:1B:EB:03:55
X509v3 Authority Key Identifier:
keyid:67:5F:3B:A1:F9:6A:9E:1E:C2:B0:13:76:62:C7:54:DB:1D:1E:00:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z187oflqnh7CsBN2YsdU2x0eAHM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/5B0D0BFE04D411EAA7E3F81FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:9300::/32
Signature Algorithm: sha256WithRSAEncryption
b9:8f:cd:84:da:d4:29:c8:de:50:d9:e4:ad:6c:e5:6d:f4:ee:
80:de:cf:2f:c0:cb:c5:7c:db:13:d7:a5:08:43:62:13:68:ab:
f5:84:27:c2:c6:27:22:0c:f6:fe:16:00:f7:c3:9f:87:f1:94:
dd:b7:73:cb:08:40:49:d8:b5:f5:56:c4:07:7d:15:54:50:d1:
57:d3:d6:56:67:84:66:8b:0f:93:87:b0:3b:6c:8d:f9:a9:14:
90:5c:7a:4b:9f:90:86:17:9d:9a:a2:ac:c6:15:1e:f6:9a:6b:
24:54:4d:ae:16:ca:66:12:87:4f:69:db:de:18:64:c0:6c:9d:
47:91:42:5c:9d:b4:49:5c:ca:fe:f1:93:87:c5:25:64:c1:29:
49:e0:37:59:65:25:73:24:70:75:df:af:f4:ba:59:0e:b9:30:
7a:ea:49:9c:28:0c:fc:64:1c:55:71:dc:37:0d:87:ca:8c:4c:
4c:5d:1a:9d:51:cf:89:bd:e1:cc:1e:52:80:19:79:29:68:e3:
76:ed:0b:23:fd:ef:95:49:03:b8:2c:2d:cb:9d:6b:b1:61:74:
5b:fa:b5:77:02:bb:a1:f2:9d:e4:1f:be:5c:56:ac:a2:63:56:
f7:64:37:48:30:9a:0b:07:3e:12:03:b2:66:f7:e8:ba:cd:9d:
9f:32:6f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 16:30:33 2025 by rpki-client