Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/6FFAF082B5E411EF98A07C1CC4F9AE02.roa
File: 6FFAF082B5E411EF98A07C1CC4F9AE02.roa (raw, json)
Hash identifier: gDx4WcOHmv6+3EzPIIF5tKo5JM14rlT+r7rkFn4t+3A=
Subject key identifier: E1:31:99:ED:18:5A:52:56:3F:24:88:DE:53:A1:86:94:97:1A:9E:CA
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 48AC
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/6FFAF082B5E411EF98A07C1CC4F9AE02.roa
Signing time: Mon 09 Dec 2024 04:17:02 +0000
ROA not before: Mon 09 Dec 2024 04:17:02 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 153439
IP address blocks: 2001:df4:b3c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18604 (0x48ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A
Validity
Not Before: Dec 9 04:17:02 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=67566f3d-f5a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:3d:45:3d:c9:2b:98:3e:a9:1f:39:f3:b9:ee:
73:3f:07:da:64:44:04:52:da:2f:13:41:53:1d:01:
72:59:c6:5e:ba:60:73:1c:0a:87:55:06:d5:b4:41:
83:2f:4f:43:3e:ce:6b:6c:08:83:26:db:29:88:be:
2a:b3:df:fc:67:2c:95:df:51:34:17:00:c3:fe:8b:
6d:83:0f:e6:64:8e:2f:3e:c7:f7:ad:25:20:0f:00:
7a:aa:69:d0:8a:c1:a4:58:12:0a:9b:e4:2d:43:44:
1c:7d:40:6d:59:12:07:6f:d5:46:fd:c5:65:21:f6:
30:62:db:e7:a9:c9:79:6e:21:84:f6:08:f5:95:e0:
dd:32:7b:3c:f1:c9:d9:cc:9d:04:f0:ea:d8:52:49:
a6:49:f1:8d:66:f0:e8:e1:f3:35:5c:3b:44:3c:83:
13:b0:e5:f9:67:f6:f7:47:d8:fb:e9:c9:ea:3c:21:
60:db:aa:6c:ee:00:86:f2:4b:ca:69:35:23:ea:68:
97:75:b5:79:28:89:21:b3:4c:72:db:ac:bb:59:cc:
e2:fe:af:21:56:f1:57:23:38:dc:9f:f0:28:08:8c:
c3:3a:88:e8:ad:df:29:bc:3a:4a:b3:37:cd:e4:c2:
e9:8f:79:65:40:04:af:43:9e:17:4f:24:0a:ad:cc:
24:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:31:99:ED:18:5A:52:56:3F:24:88:DE:53:A1:86:94:97:1A:9E:CA
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/6FFAF082B5E411EF98A07C1CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:b3c0::/48
Signature Algorithm: sha256WithRSAEncryption
33:98:7a:1d:95:14:db:e7:ae:3f:1c:0b:6f:c2:81:25:fa:61:
2d:a3:c8:b4:4c:8d:9b:b3:23:09:03:fb:6e:fc:16:d7:c2:2a:
1c:11:8f:4f:01:ce:95:3e:56:af:fb:c1:d3:37:ff:f0:5f:6d:
d0:f1:d3:0b:78:75:8b:3f:64:46:56:5a:78:c7:e0:14:d9:79:
89:12:f1:90:70:df:5f:b4:98:e0:c3:fc:d8:56:b9:08:de:9e:
12:df:24:8c:ad:a3:57:02:df:f1:93:cd:2f:e5:40:be:9a:72:
98:61:5a:b8:76:9e:02:c9:35:c3:d6:d2:08:83:c3:88:7c:5d:
3c:30:65:74:8c:bd:90:3b:a6:3a:4e:3d:8d:73:aa:36:55:ee:
5d:ec:e0:c1:00:30:40:fc:77:18:3c:88:e3:a8:96:05:5a:48:
fc:58:99:b0:5b:f5:12:b6:e0:6d:89:e7:47:e4:be:a6:8a:68:
01:ee:be:ea:d1:a7:bd:d3:01:6d:03:b3:44:73:03:a2:3a:bb:
a7:0b:39:5b:40:89:bb:e6:68:2e:10:6a:16:50:1f:04:cf:41:
93:f0:f6:79:17:4a:95:ad:1d:63:c0:73:19:6b:41:96:bc:d1:
13:7f:f0:c6:7c:fd:f6:96:9b:ba:40:41:34:7b:3c:eb:59:3c:
a7:c1:b8:20
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgICSKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjQxMjA5MDQxNzAyWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzU2NmYzZC1mNWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6j1FPckrmD6pHznzue5zPwfaZEQEUtovE0FTHQFyWcZeumBzHAqHVQbVtEGD
L09DPs5rbAiDJtspiL4qs9/8ZyyV31E0FwDD/ottgw/mZI4vPsf3rSUgDwB6qmnQ
isGkWBIKm+QtQ0QcfUBtWRIHb9VG/cVlIfYwYtvnqcl5biGE9gj1leDdMns88cnZ
zJ0E8OrYUkmmSfGNZvDo4fM1XDtEPIMTsOX5Z/b3R9j76cnqPCFg26ps7gCG8kvK
aTUj6miXdbV5KIkhs0xy26y7Wczi/q8hVvFXIzjcn/AoCIzDOojord8pvDpKszfN
5MLpj3llQASvQ54XTyQKrcwkxwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFOExme0Y
WlJWPySI3lOhhpSXGp7KMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvNkZGQUYwODJC
NUU0MTFFRjk4QTA3QzFDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwAgAQ30s8AwDQYJKoZIhvcNAQELBQADggEBADOYeh2VFNvn
rj8cC2/CgSX6YS2jyLRMjZuzIwkD+278FtfCKhwRj08BzpU+Vq/7wdM3//BfbdDx
0wt4dYs/ZEZWWnjH4BTZeYkS8ZBw31+0mODD/NhWuQjenhLfJIyto1cC3/GTzS/l
QL6acphhWrh2ngLJNcPW0giDw4h8XTwwZXSMvZA7pjpOPY1zqjZV7l3s4MEAMED8
dxg8iOOolgVaSPxYmbBb9RK24G2J50fkvqaKaAHuvurRp73TAW0Ds0RzA6I6u6cL
OVtAibvmaC4QahZQHwTPQZPw9nkXSpWtHWPAcxlrQZa80RN/8MZ8/faWm7pAQTR7
POtZPKfBuCA=
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:17:00 2025 by rpki-client