Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/82EC4B80EB4D11EE811A330FC4F9AE02.roa
File: 82EC4B80EB4D11EE811A330FC4F9AE02.roa (raw, json)
Hash identifier: GxxeePnikLE74oqkjOFZMETzKOoCAM512m2a7J5ebIs=
Subject key identifier: 1E:B4:79:74:34:FF:DC:15:5F:B2:1F:91:9D:3C:82:BF:40:DD:CE:5B
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 4626
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/82EC4B80EB4D11EE811A330FC4F9AE02.roa
Signing time: Thu 05 Sep 2024 03:35:19 +0000
ROA not before: Thu 05 Sep 2024 03:35:19 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 151884
IP address blocks: 2001:df3:4cc0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17958 (0x4626)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A
Validity
Not Before: Sep 5 03:35:19 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66d926f7-6a8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:55:49:09:61:c9:b6:03:f1:c9:2a:1d:cf:fa:
b4:2e:e0:40:f8:c2:73:46:d0:cf:ba:7f:b5:c2:b9:
ab:f4:53:da:59:fb:44:ee:8d:78:f9:69:ee:cf:f5:
bf:9e:eb:64:64:e9:29:2b:9c:76:6b:c4:e9:e0:60:
e4:0d:1f:7b:3c:e2:ff:94:9c:26:ea:21:c0:52:21:
c4:0b:49:11:85:57:6c:44:b2:6f:a8:2f:3a:b9:51:
c6:53:00:4a:ae:ae:a3:58:27:cc:16:92:c5:24:9a:
da:87:8e:be:82:e3:65:8f:c9:91:6f:7a:33:14:c7:
60:49:16:ac:87:26:0d:2e:99:9b:01:f5:16:21:7a:
0c:79:96:99:3b:e1:2a:75:47:b7:0c:6f:85:8c:e8:
87:4a:ab:91:9b:3a:26:a0:cb:73:37:2c:c9:32:f4:
80:f1:dc:24:18:b0:4d:f7:ba:46:76:7e:c1:c7:3e:
3d:3c:a9:a4:0a:5a:67:7b:5b:9d:44:d8:ba:13:2e:
84:64:80:c2:84:f5:de:7b:33:55:95:34:28:69:dd:
4d:d6:2a:a2:09:c5:c1:db:04:6d:23:55:2b:11:79:
93:41:ce:49:a6:da:2c:74:52:37:d2:dd:cf:e2:ae:
15:98:ad:e2:4b:14:9d:f2:1e:d9:14:e1:3d:ea:36:
4e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B4:79:74:34:FF:DC:15:5F:B2:1F:91:9D:3C:82:BF:40:DD:CE:5B
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/82EC4B80EB4D11EE811A330FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:4cc0::/48
Signature Algorithm: sha256WithRSAEncryption
b7:51:86:ad:27:2a:c1:b2:8f:6c:57:82:0a:36:ff:1b:04:7f:
9a:ad:42:c2:0a:cf:f8:f8:12:04:af:f4:ca:58:0a:27:d4:fd:
1e:65:c0:6f:b0:e0:d8:4f:8e:f6:83:9d:96:4f:f6:d4:a5:66:
35:2d:c0:fb:66:91:74:a6:31:4b:69:5f:b2:a3:19:da:04:2a:
ef:a7:bd:22:2b:2d:a9:20:db:1f:75:ed:a1:b8:6a:ad:54:ec:
eb:69:18:e5:48:75:48:16:62:7c:73:e1:4c:17:55:f6:07:d4:
92:07:36:60:30:81:10:ff:5b:aa:6c:34:77:ce:16:3a:9f:8e:
28:d8:0a:7b:f0:90:b9:0e:7c:11:59:8b:b9:9c:59:9b:ed:78:
55:b0:98:7a:34:fc:ac:5e:8a:6b:2c:e5:0d:02:f2:a7:7b:4f:
0f:c2:12:99:82:c4:dc:ec:9e:93:a7:74:ab:d6:70:2c:21:5a:
50:ea:31:a0:22:42:3e:76:b1:5a:a8:fa:07:2a:44:7e:97:1c:
5e:9a:4b:46:5c:ba:f9:6d:13:84:e3:d3:e3:c2:81:0d:ca:5e:
15:e1:40:95:a1:21:9d:a5:20:1d:1f:fb:73:a5:db:09:20:e2:
2e:24:9e:4e:e2:20:87:24:80:8a:fc:e0:4a:4c:45:8c:e0:10:
bf:c2:7a:8d
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgICRiYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjQwOTA1MDMzNTE5WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmQ5MjZmNy02YThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxlVJCWHJtgPxySodz/q0LuBA+MJzRtDPun+1wrmr9FPaWftE7o14+Wnuz/W/
nutkZOkpK5x2a8Tp4GDkDR97POL/lJwm6iHAUiHEC0kRhVdsRLJvqC86uVHGUwBK
rq6jWCfMFpLFJJrah46+guNlj8mRb3ozFMdgSRashyYNLpmbAfUWIXoMeZaZO+Eq
dUe3DG+FjOiHSquRmzomoMtzNyzJMvSA8dwkGLBN97pGdn7Bxz49PKmkClpne1ud
RNi6Ey6EZIDChPXeezNVlTQoad1N1iqiCcXB2wRtI1UrEXmTQc5JptosdFI30t3P
4q4VmK3iSxSd8h7ZFOE96jZOkwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFB60eXQ0
/9wVX7IfkZ08gr9A3c5bMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvODJFQzRCODBF
QjREMTFFRTgxMUEzMzBGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwAgAQ3zTMAwDQYJKoZIhvcNAQELBQADggEBALdRhq0nKsGy
j2xXggo2/xsEf5qtQsIKz/j4EgSv9MpYCifU/R5lwG+w4NhPjvaDnZZP9tSlZjUt
wPtmkXSmMUtpX7KjGdoEKu+nvSIrLakg2x917aG4aq1U7OtpGOVIdUgWYnxz4UwX
VfYH1JIHNmAwgRD/W6psNHfOFjqfjijYCnvwkLkOfBFZi7mcWZvteFWwmHo0/Kxe
imss5Q0C8qd7Tw/CEpmCxNzsnpOndKvWcCwhWlDqMaAiQj52sVqo+gcqRH6XHF6a
S0ZcuvltE4Tj0+PCgQ3KXhXhQJWhIZ2lIB0f+3Ol2wkg4i4knk7iIIckgIr84EpM
RYzgEL/Ceo0=
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:25:03 2025 by rpki-client