Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/37F88500B23311EF8B03B736C4F9AE02.roa
File: 37F88500B23311EF8B03B736C4F9AE02.roa (raw, json)
Hash identifier: R2Y44LYhCVndx2EiYdjpPkSriZtzFSnbF0BeTHA4RTo=
Subject key identifier: F9:38:87:B2:9F:47:46:66:1E:CF:A1:C5:3E:1D:29:2C:A0:5C:1D:7B
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 48EC
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/37F88500B23311EF8B03B736C4F9AE02.roa
Signing time: Mon 23 Dec 2024 08:04:43 +0000
ROA not before: Mon 23 Dec 2024 08:04:43 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 150859
IP address blocks: 2001:df3:e8c0::/48 maxlen: 48
2001:df4:1cc0::/48 maxlen: 48
2401:9320::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18668 (0x48ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A
Validity
Not Before: Dec 23 08:04:43 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=6769199b-19f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e0:e4:19:5d:b2:c1:03:0e:ab:27:3b:89:2d:
cc:a5:11:78:7d:c6:45:b6:32:78:b8:c0:7b:41:6d:
50:5c:2d:61:5d:3c:78:17:a2:fa:14:39:bc:79:c6:
e9:1b:4a:b5:86:15:ef:7c:64:26:92:d7:1a:35:15:
a2:c7:cd:7d:d2:89:58:70:80:58:81:bf:2e:8a:53:
65:0c:5f:c3:b0:95:44:0b:ee:aa:4e:7c:7f:09:52:
bf:87:e5:a2:6f:3f:03:8f:fc:12:2c:11:c4:c6:1b:
32:4f:c6:a1:8d:e5:22:5c:7f:ef:27:5d:ef:82:bd:
8d:ab:07:da:63:1c:ee:76:d2:94:ab:99:b0:3d:1a:
86:8a:0e:f8:98:5f:60:82:1a:40:ab:f0:55:6d:d8:
53:2b:d9:7e:06:83:67:bb:bd:51:35:fe:8a:fd:d7:
d9:38:f6:26:a1:f5:b5:14:32:8b:86:dd:6d:04:2d:
ff:78:6f:e0:bd:6c:5a:67:a3:11:02:65:07:fb:34:
ba:0f:21:cd:3c:4e:88:76:d8:d1:40:3c:e5:cc:53:
12:76:9e:fb:41:a8:06:1b:72:3a:6f:1a:21:e2:4d:
e3:de:76:44:66:47:2f:55:da:04:f1:b1:24:87:47:
6c:11:a4:a6:df:2b:ef:eb:a1:6e:d6:5e:b1:e5:24:
28:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:38:87:B2:9F:47:46:66:1E:CF:A1:C5:3E:1D:29:2C:A0:5C:1D:7B
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/37F88500B23311EF8B03B736C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:e8c0::/48
2001:df4:1cc0::/48
2401:9320::/48
Signature Algorithm: sha256WithRSAEncryption
5b:d1:b0:5c:96:fb:7d:db:dc:53:f9:d6:26:dd:fa:46:1d:38:
28:7a:2e:36:c0:b4:5d:eb:a2:d0:59:0f:51:37:19:da:bf:91:
81:66:3c:81:9f:ac:76:48:0e:55:38:69:11:25:6b:6e:3b:c4:
7e:2a:78:3b:a0:b8:57:a6:d4:44:3e:fb:bc:40:10:d7:ee:06:
21:a7:df:1a:ea:59:2e:03:96:a0:3e:e2:ee:78:8f:e6:16:d3:
94:db:98:fd:0c:b6:0a:34:ba:20:f1:4b:6e:b6:8d:24:6c:9a:
48:dd:58:c1:f8:2e:8e:f9:98:01:ff:66:61:a5:d5:4a:26:42:
c0:51:47:bb:8d:d4:ea:80:f6:6b:3d:20:9e:c0:cf:cd:df:43:
04:dd:c5:e3:54:92:ef:fb:86:39:3e:e8:bb:db:8b:36:5f:44:
42:a8:f1:03:a8:4c:7d:f1:6a:e2:31:c0:b3:a3:7c:7d:e7:24:
e6:ac:7b:7b:14:44:1e:55:1a:27:74:af:4f:6c:7e:b2:87:32:
0f:d2:21:02:1e:b9:15:86:96:a4:d7:28:26:49:7c:22:6d:8d:
3d:06:9b:25:f9:69:fa:16:d3:a0:a6:6a:c9:b2:3f:f6:58:88:
db:aa:0e:5f:3f:c9:3b:6e:4d:80:34:3f:b2:ce:5c:6b:4a:43:
69:f5:70:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:51:20 2025 by rpki-client