Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/264F1000BC4511EFB8D01632C4F9AE02.roa
File: 264F1000BC4511EFB8D01632C4F9AE02.roa (raw, json)
Hash identifier: Td3WieulTFrCT8Rxa/qKqApQFvtuHIFrWZKyiLFKCGU=
Subject key identifier: 02:3E:3C:76:B2:94:5B:F4:ED:E3:E6:68:AB:F3:53:65:1A:31:67:F1
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 48C7
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/264F1000BC4511EFB8D01632C4F9AE02.roa
Signing time: Tue 17 Dec 2024 07:04:25 +0000
ROA not before: Tue 17 Dec 2024 07:04:25 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 149104
IP address blocks: 2400:8020::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18631 (0x48c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A
Validity
Not Before: Dec 17 07:04:25 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=67612279-7f06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:48:1f:8d:31:d0:87:18:35:fd:6f:fd:a3:62:
2d:7c:46:72:d1:fa:e3:75:a0:38:c8:3a:c1:12:52:
5a:79:8e:63:2b:4a:19:69:9b:83:42:ca:8b:4d:81:
c6:5f:17:05:c2:7e:20:d0:8b:29:f5:cc:fb:b6:7e:
43:0a:71:c5:e5:54:ae:5f:cd:3c:d2:df:c3:19:de:
66:9c:86:29:83:f8:3e:b9:34:a9:e9:fc:40:ea:eb:
98:96:e6:b4:0e:6e:c5:b1:b6:30:82:8d:48:0c:38:
73:09:ab:d4:d5:9a:ee:49:c7:ab:6f:8c:ab:d0:0b:
db:58:01:12:ad:58:00:67:9a:22:44:26:b7:32:10:
46:01:4b:6d:f9:b9:93:49:a4:23:fc:1b:43:cf:4e:
05:2a:70:71:e0:a6:ac:15:ba:8e:a9:7c:a1:59:08:
6f:10:e4:1c:9e:2d:71:36:5e:2d:1d:1c:db:bb:eb:
90:72:23:be:32:d6:63:b5:eb:d0:01:9e:b5:c8:af:
e5:3b:97:90:cc:e2:cc:de:54:fe:bc:9e:b3:7a:20:
83:db:2d:c1:42:f5:ab:7c:63:76:db:8e:73:81:e2:
b1:2a:70:03:f1:a9:f7:4e:d9:87:f8:a0:29:43:c8:
00:ec:3a:30:8c:5f:63:b2:a4:a7:f6:30:41:a9:60:
c7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:3E:3C:76:B2:94:5B:F4:ED:E3:E6:68:AB:F3:53:65:1A:31:67:F1
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/264F1000BC4511EFB8D01632C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:8020::/48
Signature Algorithm: sha256WithRSAEncryption
06:8e:93:de:99:7c:04:27:c9:81:1a:77:f2:04:04:f6:cd:e3:
68:e6:81:80:f5:06:ea:bc:6c:7c:4f:24:92:67:d2:a1:e5:c6:
e8:e9:2e:ef:3a:3b:7f:79:6b:a2:e5:a3:7b:5a:45:a4:a1:78:
9e:76:2e:9f:2d:a0:33:44:20:39:21:c1:19:9b:55:6c:ec:50:
c5:41:8a:59:43:78:ed:4e:32:a3:98:fc:ab:f8:4d:42:26:a8:
25:3a:e3:7b:99:97:26:01:2e:7f:70:4a:ab:9f:3b:2b:e5:ba:
f1:a3:04:eb:25:95:a6:55:3c:96:f4:6c:28:e2:76:13:08:a5:
e2:6d:a9:07:33:2b:a5:e3:0f:6f:cf:f6:87:79:12:b1:9a:95:
9e:6b:13:74:ab:ba:8c:71:74:09:96:d3:4a:67:c7:3d:a5:37:
21:c5:dd:cf:63:19:1e:18:a7:da:13:58:8d:db:9b:85:27:42:
bb:bd:4c:cc:2b:e2:f0:7d:fe:f4:0c:15:36:b3:75:58:17:d2:
6a:18:03:66:d7:05:e4:f1:11:a8:21:f8:a7:85:eb:37:9a:58:
ae:fd:4d:eb:03:f9:4c:dc:f8:b3:fc:ee:5f:15:9b:31:0b:1e:
77:b2:43:f3:19:a5:fa:48:d8:89:45:d1:fc:47:c9:6e:d5:15:
19:18:59:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:27:52 2025 by rpki-client