Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9BACC40A717C11EF9BE6B668C4F9AE02.roa
File: 9BACC40A717C11EF9BE6B668C4F9AE02.roa (raw, json)
Hash identifier: CoTaRtB40ffDCvczE0RL8VwrEWh28HCxVL7khCx9hi0=
Subject key identifier: 1B:92:04:17:6F:BD:76:C0:3C:BE:BF:E3:E1:B9:F0:43:C9:DA:DB:B5
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 46C0
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9BACC40A717C11EF9BE6B668C4F9AE02.roa
Signing time: Fri 13 Sep 2024 03:02:27 +0000
ROA not before: Fri 13 Sep 2024 03:02:27 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 152974
IP address blocks: 2001:df4:2bc0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18112 (0x46c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A
Validity
Not Before: Sep 13 03:02:27 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66e3ab43-0957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:9a:e5:b1:1f:34:3c:04:b2:39:f9:d5:24:74:
58:60:b1:7b:7f:ab:0c:7a:1b:e6:18:3d:47:b9:b5:
ad:85:b8:a6:bc:f8:88:e4:f8:b1:62:b8:c8:06:2b:
72:fb:df:b7:76:32:20:d0:1e:7a:bc:3f:68:01:ce:
8e:1f:14:01:37:16:63:8a:85:5d:01:30:c4:15:af:
58:e1:28:cb:6a:fb:10:dc:39:94:49:29:89:bf:63:
b6:d2:4d:e9:f8:37:fe:c9:d9:a5:03:63:b9:72:76:
29:43:f4:2d:8d:1b:2f:cc:39:7a:a2:4c:ff:0c:5b:
de:c5:d2:57:8c:40:83:d3:6d:ae:37:4f:b0:ea:d2:
4d:14:22:6a:42:2f:93:39:6d:61:26:9a:7f:30:48:
8a:94:b6:2f:c8:5a:13:d5:49:43:9c:e5:be:39:c2:
7a:87:41:4d:bf:ce:a8:19:24:32:5e:0b:ec:40:99:
af:27:d9:48:b1:05:33:90:96:f7:87:a5:8c:df:df:
34:f1:4b:74:f4:35:2b:90:e7:a7:74:d8:1f:99:df:
8a:98:be:f2:7e:6b:03:d9:2a:83:37:f8:2c:5a:83:
89:49:a8:50:3b:40:41:6f:4b:b6:94:41:76:48:63:
ae:c4:18:46:80:53:66:9c:25:cd:ba:15:50:4e:6b:
c0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:92:04:17:6F:BD:76:C0:3C:BE:BF:E3:E1:B9:F0:43:C9:DA:DB:B5
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9BACC40A717C11EF9BE6B668C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:2bc0::/48
Signature Algorithm: sha256WithRSAEncryption
b1:99:83:f0:b7:05:57:f3:ca:d3:bb:18:39:af:43:41:0b:21:
15:1e:6b:e9:26:f7:d8:97:6b:71:2d:99:5f:21:4c:8e:94:97:
58:44:a4:c1:d0:48:ff:26:9c:87:a8:ba:ec:b8:e6:a3:27:c8:
2e:72:4d:75:bd:75:a6:54:31:2f:5e:bf:28:f0:00:70:34:c1:
b1:e0:b0:ec:57:1a:dd:87:66:57:22:cc:20:92:25:5f:f1:a0:
ea:81:79:84:b2:57:49:77:1d:c7:18:e3:a0:aa:e9:f6:fe:32:
2d:73:b1:47:43:46:17:53:ae:2d:4a:47:07:49:c6:d2:3f:93:
85:98:ac:b6:78:20:77:a4:c3:9c:0d:13:bc:e6:e0:96:c8:a5:
14:b5:42:38:6b:8e:9b:0f:35:d7:db:d9:d5:55:bf:99:08:01:
61:16:bd:28:bd:f7:34:e8:ac:08:d3:3f:7b:0d:b9:35:2e:b1:
f8:b7:bf:f1:7d:b0:b7:ac:1b:95:d8:d0:1f:30:37:87:1c:d6:
38:57:82:3a:04:cd:3a:d0:66:c5:4a:c9:3f:d4:9b:84:91:cf:
bd:3a:4e:6a:ed:34:87:5e:8b:d2:39:9a:23:e4:6c:54:4b:d9:
22:ea:db:77:c8:0b:10:bc:df:14:f4:c8:d3:eb:0f:94:b9:61:
8a:d6:fa:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:56:29 2025 by rpki-client