Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/1DF22790A4B611EF9CDA1A2CC4F9AE02.roa
File: 1DF22790A4B611EF9CDA1A2CC4F9AE02.roa (raw, json)
Hash identifier: w3wkEl72R5yHh8FDEdSTJXXK4Ra1LhkLOkjK6q8uAIg=
Subject key identifier: AA:46:BB:DC:D1:A6:E8:F9:AD:8E:33:4B:15:D2:FD:05:C3:08:90:BD
Certificate issuer: /CN=A91B165F/serialNumber=F04929EF743C54C08B45E19CFC51BF2AA559DAA1
Certificate serial: 02
Authority key identifier: F0:49:29:EF:74:3C:54:C0:8B:45:E1:9C:FC:51:BF:2A:A5:59:DA:A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/1DF22790A4B611EF9CDA1A2CC4F9AE02.roa
Signing time: Sun 17 Nov 2024 07:32:36 +0000
ROA not before: Sun 17 Nov 2024 07:32:36 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 140219
IP address blocks: 2001:df4:59c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B165F
Validity
Not Before: Nov 17 07:32:36 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=67399c14-c936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a7:7b:13:12:ec:02:ba:a7:72:48:a1:c4:a1:
2f:df:f2:a8:a5:47:58:10:22:b3:47:2b:ea:eb:52:
28:59:a3:ca:70:71:ed:68:90:87:6b:59:3f:3d:17:
8f:16:ee:20:ab:6c:c3:64:99:36:2e:f9:fd:07:be:
b1:36:2a:47:08:84:5f:4d:3e:c9:24:de:b5:c9:aa:
55:05:28:e6:cf:e7:b5:6a:58:ef:bb:df:32:b3:1e:
fd:07:cb:5a:3a:a6:98:95:d8:dc:29:09:dd:b0:76:
fe:e1:7b:a2:67:a1:72:7b:0d:65:b4:bf:63:e4:74:
71:da:13:33:99:23:7f:90:4e:12:bd:39:37:a2:d7:
a8:56:84:06:01:65:da:d7:16:18:7b:7e:92:dc:95:
ce:d6:a0:58:fa:53:88:9b:83:bd:5a:42:6f:1d:b2:
96:2d:6c:83:60:bc:a3:79:89:72:1b:74:8a:6e:bd:
ac:8a:26:8b:99:b8:2a:63:4f:d7:c8:85:2c:52:0e:
76:be:94:3b:04:b5:38:eb:c8:fc:5e:0d:02:ae:f8:
ae:95:5c:07:98:6e:43:f8:f4:09:a4:b1:80:d1:2a:
42:24:c1:a8:37:c8:9c:99:84:82:e7:22:72:0a:67:
e3:84:b4:46:c0:e3:41:ff:4c:6b:2a:13:2e:cc:75:
0d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:46:BB:DC:D1:A6:E8:F9:AD:8E:33:4B:15:D2:FD:05:C3:08:90:BD
X509v3 Authority Key Identifier:
keyid:F0:49:29:EF:74:3C:54:C0:8B:45:E1:9C:FC:51:BF:2A:A5:59:DA:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/1DF22790A4B611EF9CDA1A2CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:59c0::/48
Signature Algorithm: sha256WithRSAEncryption
b0:78:77:df:fb:93:de:4f:7b:cb:06:3c:f6:19:25:ce:87:29:
8c:3d:65:c9:ca:fa:c6:44:cf:d1:2c:0e:a9:19:55:c2:19:34:
18:c9:cc:29:dc:de:b6:eb:50:65:a1:ac:33:9a:4b:5a:78:6b:
36:25:c8:62:fb:6b:85:d4:61:c6:57:c3:b8:fb:fa:02:6f:70:
e6:51:8e:53:5c:71:83:6b:03:87:b0:df:10:65:95:c9:6c:fd:
88:04:43:ae:d2:d5:51:3b:b8:a5:11:d2:19:b3:ca:ec:80:f3:
d2:00:a8:76:eb:24:ae:31:47:00:4b:e2:1d:0d:dc:70:34:a3:
3f:5e:91:16:ed:d3:fc:6a:7e:7e:c9:b1:90:ac:d0:87:09:7c:
20:72:9a:ef:91:c4:d0:5d:e3:cb:a8:fc:7e:9b:95:39:74:06:
a5:ee:b3:1d:f5:aa:4d:ec:88:4f:10:24:6b:9e:aa:42:0e:8e:
dd:04:d3:86:06:47:b4:55:62:4a:69:b9:50:4c:75:27:28:1e:
96:81:8e:04:4d:6c:a0:93:dd:f5:9e:bd:88:8c:1b:80:fb:0c:
f0:93:09:ef:96:75:60:22:b3:d3:9b:23:d6:95:c4:47:f8:e4:
33:a5:9b:59:91:e1:0f:cc:57:85:89:4d:7c:cd:00:bb:df:8b:
d2:44:81:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:35:44 2025 by rpki-client