Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A6F151ACDB2E11EF9695A34BC4F9AE02.roa
File: A6F151ACDB2E11EF9695A34BC4F9AE02.roa (raw, json)
Hash identifier: pVvpIu3n3hvwABdzbyHipraOKp363EDhIc6D/qqKQko=
Subject key identifier: 50:2F:D7:2B:9B:28:54:4A:56:45:18:4B:1D:24:76:9A:B8:81:5C:04
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 4975
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A6F151ACDB2E11EF9695A34BC4F9AE02.roa
Signing time: Sat 25 Jan 2025 15:11:29 +0000
ROA not before: Sat 25 Jan 2025 15:11:29 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 153539
IP address blocks: 2001:df4:e7c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18805 (0x4975)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A
Validity
Not Before: Jan 25 15:11:29 2025 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=6794ff21-7695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3c:c9:5e:97:2e:aa:e4:9a:f2:52:f6:f3:f9:
60:59:bc:2e:5f:49:f8:1a:9b:bd:cd:53:47:2d:c6:
31:58:46:3f:ce:85:75:14:ed:c9:92:f6:d5:3e:18:
a6:bb:d6:24:1c:88:44:44:6b:4d:8c:c6:16:de:d9:
74:63:fa:dd:f5:9e:ec:5f:ff:bb:6f:97:1c:c9:6e:
66:e4:e7:9b:c6:fb:06:2c:38:35:c6:0a:95:77:b6:
7f:06:51:2f:e3:44:2c:89:b4:d3:f0:51:e8:80:95:
bd:4c:4c:bb:3c:22:86:6d:5d:a4:4d:3f:8d:a9:a6:
1c:ad:9c:2f:e4:39:5b:56:82:65:38:be:53:5c:4a:
f7:b6:10:42:5b:87:80:9a:7a:dd:90:89:78:ce:23:
95:c9:f2:ca:65:d8:b9:1f:19:43:3f:e9:c9:13:2d:
53:0d:ce:de:ca:8b:ca:34:e1:5d:de:0b:72:e8:a3:
fd:c7:83:94:77:c9:12:e6:6f:bd:79:47:a1:cb:56:
f0:13:d9:34:2f:58:6e:04:47:03:36:e5:8b:b0:6b:
21:2f:ba:b0:48:6e:fb:a4:b2:d4:2d:9f:fc:70:ba:
b6:0e:cf:99:95:6e:ee:ce:22:7a:24:f7:fe:d5:ff:
47:45:ce:15:bb:2c:0f:24:0d:1f:24:a9:c0:91:53:
e6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:2F:D7:2B:9B:28:54:4A:56:45:18:4B:1D:24:76:9A:B8:81:5C:04
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A6F151ACDB2E11EF9695A34BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:e7c0::/48
Signature Algorithm: sha256WithRSAEncryption
3f:0a:f2:07:a1:ae:3d:a8:07:9c:49:90:e9:25:16:40:da:4d:
c2:76:82:3c:ac:06:2f:92:d9:b0:af:03:2d:0c:a5:25:dc:62:
f9:b8:43:7e:e8:08:f7:fb:b1:08:a2:89:c3:37:eb:f5:73:f4:
0f:f1:64:80:cd:f4:4a:be:e3:d0:a4:d2:20:f4:2c:ae:47:06:
3f:d7:b3:72:6b:d7:96:83:f0:5a:32:31:cf:ad:c8:6d:5c:aa:
a1:c3:15:65:05:a9:54:d8:57:f3:95:0d:34:59:c7:53:c1:b8:
77:a5:30:25:70:91:ca:6c:1d:98:b1:90:2f:c3:ab:ad:ae:a9:
2c:3c:d6:06:5e:2d:eb:ed:aa:26:bb:5b:21:db:be:2a:50:0a:
3e:af:47:32:14:f7:6a:ee:5a:f7:11:97:e9:2f:ed:f3:a1:cd:
0f:ec:2a:d2:28:d1:9b:21:3a:5a:48:5f:ac:c5:27:62:03:07:
a8:9d:13:07:54:3f:4a:1c:f7:21:fd:bf:fc:d4:0f:b0:6f:49:
0d:4a:2d:13:c4:94:2f:1c:3a:7f:62:37:fd:6f:b2:5e:3e:b7:
ca:1d:17:e9:57:2d:97:16:1e:07:f2:13:d8:a9:b6:76:b4:f2:
3b:31:54:d9:6c:96:20:f3:09:c9:fb:1f:30:a7:45:72:9b:8d:
71:57:fd:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:25:03 2025 by rpki-client