Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/C13E824AC49F11EBAC936D7AC4F9AE02.roa
File: C13E824AC49F11EBAC936D7AC4F9AE02.roa (raw, json)
Hash identifier: JGXFZsvdAlPkzVwMIVDlhUnyxUdEjpH4xc3F+m/pQB0=
Subject key identifier: 2A:76:70:42:3E:86:9C:A8:B2:31:E1:60:B2:4A:47:CD:5B:60:CF:1A
Certificate issuer: /CN=A91B625F/serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480
Certificate serial: 079C
Authority key identifier: E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/C13E824AC49F11EBAC936D7AC4F9AE02.roa
Signing time: Tue 10 Dec 2024 21:50:49 +0000
ROA not before: Tue 10 Dec 2024 21:50:49 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 141747
IP address blocks: 2406:9dc0:1010::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1948 (0x79c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B625F
Validity
Not Before: Dec 10 21:50:49 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=6758b7b8-8d64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e1:db:64:4e:db:ae:49:29:9c:33:3a:17:79:
91:ac:26:0b:76:2a:a4:67:c3:43:a5:b5:67:e2:1a:
b8:c8:96:91:ee:57:26:d3:30:60:ce:d5:3c:36:2e:
59:e3:e7:05:c6:31:51:26:c9:51:f1:13:56:a8:30:
59:ab:03:e8:b9:ac:9d:83:22:18:64:18:00:ec:55:
24:b9:d6:a5:fa:98:49:9c:22:c7:f9:51:2e:03:c6:
dc:e8:20:a3:89:b9:d0:64:6b:d4:f8:a9:32:dd:ea:
99:d3:bd:01:11:98:6a:f1:aa:78:85:c6:d4:46:bf:
36:1a:19:29:90:3f:19:c4:12:86:42:0b:1b:52:8f:
e8:9a:9f:9b:88:46:7a:c9:23:48:10:5f:61:3f:64:
85:a1:7e:f2:3e:64:0a:1e:f3:65:3d:3f:91:51:1e:
a9:51:5d:c9:86:21:57:0f:d7:46:8c:c1:82:0c:56:
91:83:7e:c6:b6:b8:07:e1:e2:72:5d:01:87:93:28:
f5:d6:e2:83:30:6b:f6:cb:f4:6a:aa:90:ba:72:e6:
4e:f4:08:f5:ea:31:e2:e0:35:26:d0:f2:18:fb:04:
30:90:c1:c1:07:2a:8b:b8:cf:9c:3f:bd:a8:08:f4:
8b:32:49:4e:1a:0b:73:52:c5:78:82:5b:2d:62:55:
80:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:76:70:42:3E:86:9C:A8:B2:31:E1:60:B2:4A:47:CD:5B:60:CF:1A
X509v3 Authority Key Identifier:
keyid:E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/C13E824AC49F11EBAC936D7AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:9dc0:1010::/44
Signature Algorithm: sha256WithRSAEncryption
08:59:f2:4f:8b:5f:37:35:d7:f9:e0:79:8c:f9:31:c6:52:31:
ae:5e:1f:7d:5d:91:64:ec:dd:c5:01:8e:1e:8a:e8:e5:82:97:
90:1b:aa:70:ac:37:b9:09:8a:32:b0:68:b6:5e:be:da:0b:a1:
f1:00:73:04:30:12:4d:97:be:92:0b:0f:01:6d:d4:7a:81:da:
91:b9:bc:39:f3:2a:31:b3:b8:8b:f5:96:c1:1a:ed:49:33:37:
bd:a1:d2:18:16:26:10:f7:5a:00:b5:2d:9e:9f:54:a1:37:d3:
fe:38:0c:3a:d5:3d:6b:cb:c1:69:18:83:d3:f6:a1:92:ce:a7:
a2:db:f8:08:78:93:18:eb:23:17:eb:ab:bb:87:ac:8d:d8:7b:
33:34:bf:21:11:ab:dc:2c:24:0d:74:65:94:82:d0:e7:91:91:
8f:7f:c5:19:c8:1f:bb:17:56:0f:8b:29:6e:dc:4c:84:ac:c3:
77:05:21:2d:1d:8f:72:a0:fe:55:dd:ad:c2:d2:3f:ca:ce:5a:
98:3f:94:0f:6d:cd:8a:48:90:fe:04:a5:7d:09:63:e2:a2:db:
80:5a:a2:54:1c:65:64:db:09:f0:18:70:7e:2e:ea:c5:4c:4b:
ae:b8:8a:4a:7a:5f:5f:4a:87:69:e9:4c:4b:7d:c9:72:e2:10:
c1:83:9e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:58:59 2025 by rpki-client