Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/CF89F560B5E511EFBD3C4A3EC4F9AE02.roa
File: CF89F560B5E511EFBD3C4A3EC4F9AE02.roa (raw, json)
Hash identifier: B32DEZ0wjdrBaf0d9jsmPj4+w9HH9B/1pO+T3YUmmFs=
Subject key identifier: 0A:DE:DA:94:E1:E4:EE:8C:8C:60:0A:4A:7A:50:7C:72:87:49:14:9C
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 48B2
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/CF89F560B5E511EFBD3C4A3EC4F9AE02.roa
Signing time: Mon 09 Dec 2024 04:26:51 +0000
ROA not before: Mon 09 Dec 2024 04:26:51 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 153005
IP address blocks: 2001:df4:5940::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18610 (0x48b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A
Validity
Not Before: Dec 9 04:26:51 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=6756718a-4bac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:71:3d:fd:1c:cd:60:0f:97:36:ae:a2:d9:f1:
33:75:bb:12:6c:df:59:66:ee:72:61:13:92:c6:71:
e7:6c:23:50:19:ed:5c:0c:bd:67:12:86:64:75:9a:
b0:2e:34:32:58:56:f3:50:e9:b3:d5:f9:6a:de:f6:
f0:98:bc:82:14:81:da:67:08:b9:d2:1c:9e:2c:e8:
95:8f:49:29:4e:9a:c4:56:8c:e6:54:56:9d:05:b4:
f1:46:b3:5b:3c:9e:3c:4d:aa:1c:1e:28:40:56:83:
e4:06:d3:57:40:18:e2:2d:2a:7f:72:a9:ca:4d:51:
80:39:95:cb:3e:45:d6:23:d6:c7:d8:e1:3a:8c:62:
07:ae:b5:d1:c6:69:d1:f1:08:a2:d4:79:0f:f1:0d:
aa:99:be:a8:2c:68:b7:47:16:50:fe:c7:0c:a3:fe:
b6:63:9b:d1:81:e2:21:b9:bf:89:7d:b2:ac:30:a3:
ab:c8:f2:a3:23:df:d6:4f:5c:21:d2:10:c1:64:94:
cb:5c:7d:9a:e5:25:80:d9:a8:b7:82:00:ba:e7:ae:
be:c1:68:3d:f6:cf:e0:46:74:88:f6:c7:3e:6a:56:
58:e2:fe:4d:02:ac:b4:f1:e8:e0:28:25:7b:e4:bc:
a5:ed:34:22:aa:5c:e3:be:fb:0d:91:84:58:38:b8:
05:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:DE:DA:94:E1:E4:EE:8C:8C:60:0A:4A:7A:50:7C:72:87:49:14:9C
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/CF89F560B5E511EFBD3C4A3EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:5940::/48
Signature Algorithm: sha256WithRSAEncryption
1c:09:92:1a:c4:cf:62:5e:5d:75:b1:0e:8f:aa:c2:04:19:41:
a0:c4:ac:dc:5e:9a:71:93:22:4b:17:13:13:84:a5:ad:2c:30:
21:21:78:94:1f:2b:5e:b8:e5:d0:e0:74:db:cd:19:85:8c:4e:
83:76:99:17:1c:8f:eb:6e:d7:57:3e:b0:5b:a3:74:c4:5c:0c:
51:07:81:83:e2:4c:7d:f9:22:5c:a3:62:61:a3:94:71:d9:b3:
c4:bc:3c:10:06:f0:6a:53:24:9a:df:73:f9:3f:ee:7c:67:ac:
6c:20:6a:5a:4f:5d:1a:26:01:2b:ce:7a:5d:ea:e5:cd:60:ab:
8a:b3:f1:9f:f7:93:44:46:6f:e1:19:15:b5:20:ef:98:8a:bd:
03:a7:08:9a:29:e8:5f:a3:6f:b6:f5:13:51:10:e4:ff:4d:d6:
c3:3a:cf:7e:95:03:39:12:68:55:8a:62:43:f7:f3:ed:0c:f5:
ce:ee:dd:7d:2d:66:55:3b:26:7b:c5:67:ba:ed:d3:d6:eb:e1:
a6:4f:12:90:a0:5b:49:b8:66:e6:f5:91:58:77:ed:b1:49:6d:
de:9b:0d:b2:02:41:51:8e:32:43:23:c4:30:27:49:6c:99:a0:
8c:60:8b:e8:84:71:84:4b:b5:9c:dc:78:81:10:f1:f5:89:0a:
a7:8e:92:58
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgICSLIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjQxMjA5MDQyNjUxWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzU2NzE4YS00YmFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx3E9/RzNYA+XNq6i2fEzdbsSbN9ZZu5yYROSxnHnbCNQGe1cDL1nEoZkdZqw
LjQyWFbzUOmz1flq3vbwmLyCFIHaZwi50hyeLOiVj0kpTprEVozmVFadBbTxRrNb
PJ48TaocHihAVoPkBtNXQBjiLSp/cqnKTVGAOZXLPkXWI9bH2OE6jGIHrrXRxmnR
8Qii1HkP8Q2qmb6oLGi3RxZQ/scMo/62Y5vRgeIhub+JfbKsMKOryPKjI9/WT1wh
0hDBZJTLXH2a5SWA2ai3ggC6566+wWg99s/gRnSI9sc+alZY4v5NAqy08ejgKCV7
5Lyl7TQiqlzjvvsNkYRYOLgF1QIDAQABo4ICmDCCApQwHQYDVR0OBBYEFAre2pTh
5O6MjGAKSnpQfHKHSRScMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvQ0Y4OUY1NjBC
NUU1MTFFRkJEM0M0QTNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwAgAQ30WUAwDQYJKoZIhvcNAQELBQADggEBABwJkhrEz2Je
XXWxDo+qwgQZQaDErNxemnGTIksXExOEpa0sMCEheJQfK1645dDgdNvNGYWMToN2
mRccj+tu11c+sFujdMRcDFEHgYPiTH35IlyjYmGjlHHZs8S8PBAG8GpTJJrfc/k/
7nxnrGwgalpPXRomASvOel3q5c1gq4qz8Z/3k0RGb+EZFbUg75iKvQOnCJop6F+j
b7b1E1EQ5P9N1sM6z36VAzkSaFWKYkP38+0M9c7u3X0tZlU7JnvFZ7rt09br4aZP
EpCgW0m4Zub1kVh37bFJbd6bDbICQVGOMkMjxDAnSWyZoIxgi+iEcYRLtZzceIEQ
8fWJCqeOklg=
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:11:23 2025 by rpki-client