Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/ABB23C1AD3C211EF8ACCE481C4F9AE02.roa
File: ABB23C1AD3C211EF8ACCE481C4F9AE02.roa (raw, json)
Hash identifier: 0sQ36zSbRb+viAo82FoqE8IwSHvOXuhrsydurAzjTNs=
Subject key identifier: 4B:93:FD:ED:95:DD:DA:DB:1E:9F:E7:CC:7A:29:F2:54:32:46:A7:28
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 4955
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/ABB23C1AD3C211EF8ACCE481C4F9AE02.roa
Signing time: Thu 16 Jan 2025 04:30:53 +0000
ROA not before: Thu 16 Jan 2025 04:30:53 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 153505
IP address blocks: 2001:df4:de40::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18773 (0x4955)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A
Validity
Not Before: Jan 16 04:30:53 2025 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=67888b7d-5362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ec:c1:05:b7:37:86:a9:42:d2:b2:f6:26:af:
6c:09:26:69:c0:0a:73:ed:b2:e4:c6:49:8b:19:64:
6e:0b:c7:64:34:81:39:b3:db:1b:7d:11:d4:5b:62:
99:79:35:ee:d6:94:64:94:82:cb:8e:b0:55:91:7a:
e7:db:9a:2f:26:46:a4:56:df:90:84:70:83:6f:5d:
e1:6f:7d:a5:3a:a2:87:63:bb:16:33:2c:73:47:c7:
7e:71:7f:62:f1:d0:a7:05:6c:c3:a9:f2:b1:f4:e1:
5c:2a:e3:36:7d:f2:97:b1:68:24:d4:7d:1a:d6:69:
17:b3:d2:0e:0e:fe:bc:78:d9:b0:87:3d:42:26:03:
35:31:02:71:76:2b:13:25:f0:39:60:0b:95:13:92:
f6:c6:5a:dd:ac:74:81:bc:fc:ac:bb:2a:64:03:8e:
80:a6:d9:de:bb:05:0b:9f:cd:1e:40:32:74:ab:5a:
9b:c6:5c:73:d3:7c:3b:46:f9:47:ad:f5:e8:1c:34:
4f:c0:8d:e1:b3:d8:38:f0:ea:e6:13:bf:91:ce:4e:
2d:73:c2:3a:3a:1d:5e:aa:38:15:4c:72:75:5a:5e:
b8:b6:f9:b8:a8:04:7f:43:4f:32:1b:c9:30:ac:69:
f5:64:e5:e1:09:63:4f:33:19:8a:0e:9e:94:ec:f6:
e8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:93:FD:ED:95:DD:DA:DB:1E:9F:E7:CC:7A:29:F2:54:32:46:A7:28
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/ABB23C1AD3C211EF8ACCE481C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:de40::/48
Signature Algorithm: sha256WithRSAEncryption
35:eb:c2:94:df:52:4e:2d:ca:2b:0d:c9:5e:2b:4a:5d:9f:94:
14:7d:20:ec:c7:3a:9b:60:63:88:23:23:12:95:26:65:9b:19:
4c:7c:fa:60:05:bf:96:f5:e7:93:62:20:e7:7b:8c:76:77:f3:
0f:6c:51:53:89:9a:01:ef:1a:69:01:d1:66:5d:b9:7e:f7:05:
bd:c4:d6:b2:9f:91:9a:c9:4e:ff:b5:6b:52:8e:ae:88:2c:db:
d3:a2:ed:3e:d8:ef:a7:98:04:1a:eb:9c:39:92:e6:fd:88:20:
d1:3f:b8:4f:df:85:d5:c1:f7:12:45:4e:7f:e9:ca:91:02:5e:
48:8f:9e:09:7c:e3:18:a8:21:c3:b2:ae:d2:f9:09:4f:61:bd:
a6:61:d4:c0:9f:4c:08:03:ae:e2:26:76:c9:94:67:cd:92:3e:
03:69:9f:40:7d:10:25:67:fb:32:5f:cb:a0:94:d2:4f:b6:a9:
51:65:2c:96:4e:4a:a0:c6:ea:d9:60:77:a1:c5:d2:bd:4c:9d:
b1:67:bb:2e:6a:6c:5c:a2:b0:4a:62:28:e4:d7:38:25:53:89:
30:2a:2d:e5:62:d5:66:3d:c6:92:86:c7:eb:b8:4d:41:20:77:
90:22:a2:91:48:2c:28:a2:02:37:38:98:fb:f1:52:f8:4a:97:
ea:28:d0:6a
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgICSVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjUwMTE2MDQzMDUzWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02Nzg4OGI3ZC01MzYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6+zBBbc3hqlC0rL2Jq9sCSZpwApz7bLkxkmLGWRuC8dkNIE5s9sbfRHUW2KZ
eTXu1pRklILLjrBVkXrn25ovJkakVt+QhHCDb13hb32lOqKHY7sWMyxzR8d+cX9i
8dCnBWzDqfKx9OFcKuM2ffKXsWgk1H0a1mkXs9IODv68eNmwhz1CJgM1MQJxdisT
JfA5YAuVE5L2xlrdrHSBvPysuypkA46AptneuwULn80eQDJ0q1qbxlxz03w7RvlH
rfXoHDRPwI3hs9g48OrmE7+Rzk4tc8I6Oh1eqjgVTHJ1Wl64tvm4qAR/Q08yG8kw
rGn1ZOXhCWNPMxmKDp6U7PboRQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFEuT/e2V
3drbHp/nzHop8lQyRqcoMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvQUJCMjNDMUFE
M0MyMTFFRjhBQ0NFNDgxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwAgAQ303kAwDQYJKoZIhvcNAQELBQADggEBADXrwpTfUk4t
yisNyV4rSl2flBR9IOzHOptgY4gjIxKVJmWbGUx8+mAFv5b155NiIOd7jHZ38w9s
UVOJmgHvGmkB0WZduX73Bb3E1rKfkZrJTv+1a1KOrogs29Oi7T7Y76eYBBrrnDmS
5v2IINE/uE/fhdXB9xJFTn/pypECXkiPngl84xioIcOyrtL5CU9hvaZh1MCfTAgD
ruImdsmUZ82SPgNpn0B9ECVn+zJfy6CU0k+2qVFlLJZOSqDG6tlgd6HF0r1MnbFn
uy5qbFyisEpiKOTXOCVTiTAqLeVi1WY9xpKGx+u4TUEgd5AiopFILCiiAjc4mPvx
UvhKl+oo0Go=
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:25:06 2025 by rpki-client