Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/E69ABF78033911EFBE28FC1FC4F9AE02.roa
File: E69ABF78033911EFBE28FC1FC4F9AE02.roa (raw, json)
Hash identifier: K3rDHWPEAJEer2ozScBARYUC6OZeQAKfAz9YzKjyZUE=
Subject key identifier: B7:F8:A2:63:B1:CE:A5:FF:3E:9A:75:B5:B0:4B:96:A6:23:79:A1:27
Certificate issuer: /CN=A91B1018/serialNumber=AFD0955A7DD7F9B0EC2A44A11D937207C2754A63
Certificate serial: 031A
Authority key identifier: AF:D0:95:5A:7D:D7:F9:B0:EC:2A:44:A1:1D:93:72:07:C2:75:4A:63
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9CVWn3X-bDsKkShHZNyB8J1SmM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/E69ABF78033911EFBE28FC1FC4F9AE02.roa
Signing time: Sat 04 May 2024 13:18:09 +0000
ROA not before: Sat 04 May 2024 13:18:09 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 151951
IP address blocks: 2400:5a60:2::/48 maxlen: 48
2400:5a60:100::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 794 (0x31a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B1018
Validity
Not Before: May 4 13:18:09 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=66363591-ff65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:85:4c:6c:78:84:5e:c5:bb:c5:d0:08:28:a7:
a7:ad:b2:3e:37:02:f8:94:b7:85:08:c2:b7:d7:0f:
bd:90:6b:00:19:fd:2f:86:48:2f:ee:65:8a:a5:29:
af:ed:38:04:dc:2e:9f:9c:28:7e:01:90:9b:c1:66:
ac:c7:b7:7b:82:02:f3:0d:83:aa:8b:54:b7:a5:f2:
92:72:c1:13:ae:e6:a1:32:a1:67:d2:6a:c8:f6:b6:
d0:93:6c:55:b7:61:94:f4:85:bc:9d:af:e5:45:ad:
3f:31:32:18:b9:4e:04:2e:9a:b1:95:d6:bd:f3:5d:
24:3b:ac:bd:c9:39:d6:4c:8a:06:34:09:73:dd:dd:
4b:95:26:5a:6f:26:7a:06:c5:e5:cd:ee:46:89:fb:
7f:a9:09:ba:df:16:ed:e3:ad:71:65:d5:cb:37:a4:
84:15:e9:fb:2e:af:41:19:46:79:61:1a:cc:5d:bf:
50:f6:b1:7d:50:17:3d:cb:1c:68:a9:64:9a:8f:66:
22:09:7e:81:9f:29:bd:a6:93:0d:37:f8:36:8e:5c:
c8:e1:bf:2e:33:c4:7f:fc:28:40:4f:dc:9e:73:af:
88:91:62:d4:6a:75:f3:d7:79:3a:4f:be:f5:d0:bf:
23:c8:4b:4a:a4:4d:1c:d6:70:7a:25:3d:a2:ab:6b:
7c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F8:A2:63:B1:CE:A5:FF:3E:9A:75:B5:B0:4B:96:A6:23:79:A1:27
X509v3 Authority Key Identifier:
keyid:AF:D0:95:5A:7D:D7:F9:B0:EC:2A:44:A1:1D:93:72:07:C2:75:4A:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9CVWn3X-bDsKkShHZNyB8J1SmM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/E69ABF78033911EFBE28FC1FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:5a60:2::/48
2400:5a60:100::/48
Signature Algorithm: sha256WithRSAEncryption
14:b5:6b:1f:2e:ea:8a:9b:c3:be:29:29:50:92:d1:be:28:06:
2a:a8:79:0c:95:b7:ea:fc:20:c0:bc:23:48:23:b5:59:00:df:
2c:26:85:4d:65:10:fd:63:85:e6:24:09:01:31:bf:23:b6:83:
31:da:82:23:b0:c5:7e:35:7b:fb:ff:d0:8f:9e:c2:b8:d3:38:
85:18:65:51:ff:6d:a3:09:3b:4d:ff:ef:17:14:6e:df:68:f1:
12:51:cc:74:98:f7:04:1e:ff:8b:fa:64:0e:af:45:74:48:36:
1b:9d:0c:32:e5:32:05:9c:27:12:2a:90:fc:d8:15:49:2d:b6:
98:a6:cd:5b:4f:e1:b6:71:27:1d:a3:7a:b7:8e:6a:2e:fd:33:
36:e0:1e:0b:42:41:80:d6:fb:6a:23:86:4a:ae:28:0f:1f:e2:
82:97:db:41:a9:8c:19:10:84:2b:8e:f7:67:12:6a:e1:7b:5b:
8d:85:1a:30:b2:72:05:1b:57:88:7e:85:a2:ec:45:1e:96:8b:
f4:13:30:c5:2a:44:64:5a:1f:4e:fb:a0:aa:0b:34:8a:d3:3d:
2c:61:6f:94:10:33:d7:44:42:3d:1e:7e:22:44:50:de:0b:ea:
3d:58:24:44:5b:a9:67:7a:82:59:de:9f:fe:8c:6b:82:d5:d9:
b5:b0:e0:72
-----BEGIN CERTIFICATE-----
MIIFfTCCBGWgAwIBAgICAxowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjEwMTgxMTAvBgNVBAUTKEFGRDA5NTVBN0REN0Y5QjBFQzJBNDRBMTFEOTM3MjA3
QzI3NTRBNjMwHhcNMjQwNTA0MTMxODA5WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02NjM2MzU5MS1mZjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw4VMbHiEXsW7xdAIKKenrbI+NwL4lLeFCMK31w+9kGsAGf0vhkgv7mWKpSmv
7TgE3C6fnCh+AZCbwWasx7d7ggLzDYOqi1S3pfKScsETruahMqFn0mrI9rbQk2xV
t2GU9IW8na/lRa0/MTIYuU4ELpqxlda9810kO6y9yTnWTIoGNAlz3d1LlSZabyZ6
BsXlze5Gift/qQm63xbt461xZdXLN6SEFen7Lq9BGUZ5YRrMXb9Q9rF9UBc9yxxo
qWSaj2YiCX6Bnym9ppMNN/g2jlzI4b8uM8R//ChAT9yec6+IkWLUanXz13k6T771
0L8jyEtKpE0c1nB6JT2iq2t8awIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFLf4omOx
zqX/Ppp1tbBLlqYjeaEnMB8GA1UdIwQYMBaAFK/QlVp91/mw7CpEoR2TcgfCdUpj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTAxOC84ODM2RkE2MDhE
NEMxMUVDOTg4QUU4NURDNEY5QUUwMi9yOUNWV24zWC1iRHNLa1NoSFpOeUI4SjFT
bU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3I5Q1ZXbjNYLWJEc0trU2hIWk55QjhKMVNtTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjEwMTgvODgzNkZBNjA4RDRDMTFFQzk4OEFFODVEQzRGOUFFMDIvRTY5QUJGNzgw
MzM5MTFFRkJFMjhGQzFGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E
HDAaMBgEAgACMBIDBwAkAFpgAAIDBwAkAFpgAQAwDQYJKoZIhvcNAQELBQADggEB
ABS1ax8u6oqbw74pKVCS0b4oBiqoeQyVt+r8IMC8I0gjtVkA3ywmhU1lEP1jheYk
CQExvyO2gzHagiOwxX41e/v/0I+ewrjTOIUYZVH/baMJO03/7xcUbt9o8RJRzHSY
9wQe/4v6ZA6vRXRINhudDDLlMgWcJxIqkPzYFUkttpimzVtP4bZxJx2jereOai79
MzbgHgtCQYDW+2ojhkquKA8f4oKX20GpjBkQhCuO92cSauF7W42FGjCycgUbV4h+
haLsRR6Wi/QTMMUqRGRaH077oKoLNIrTPSxhb5QQM9dEQj0efiJEUN4L6j1YJERb
qWd6glnen/6Ma4LV2bWw4HI=
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:32:21 2025 by rpki-client