Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/49E75ECAD66F11EF8C443287C4F9AE02.roa
File: 49E75ECAD66F11EF8C443287C4F9AE02.roa (raw, json)
Hash identifier: a0K/4suOukzalMmGXoAuXRRlPLJmkTGLqgOEswzREmw=
Subject key identifier: 50:1E:CB:F0:CA:8E:9E:0C:EE:8A:FE:27:CD:8A:FF:87:20:AB:B7:3D
Certificate issuer: /CN=A91B7770/serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9
Certificate serial: 0917
Authority key identifier: 7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/49E75ECAD66F11EF8C443287C4F9AE02.roa
Signing time: Sun 19 Jan 2025 14:11:34 +0000
ROA not before: Sun 19 Jan 2025 14:11:34 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 214675
IP address blocks: 2406:7ec0:1006::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2327 (0x917)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7770
Validity
Not Before: Jan 19 14:11:34 2025 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=678d0816-a046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c1:cf:56:03:de:3f:c8:b9:ad:d9:a3:2a:70:
2a:1a:54:7c:b3:76:15:e9:4d:f4:50:e5:31:e5:f3:
9c:ea:11:93:ce:5d:6e:41:2e:01:04:d2:18:2b:28:
07:92:0f:f8:06:c3:d2:d6:33:80:2a:43:c4:42:71:
86:8a:30:e6:17:eb:be:73:23:2e:7c:1f:26:b9:e8:
ed:76:f3:82:5a:22:b1:96:7a:4e:e3:d9:a5:b0:b8:
5f:39:d1:28:20:aa:cd:7e:e0:39:bb:23:ce:67:60:
b7:9c:34:0d:13:77:d8:52:d3:a2:7e:31:b5:0a:d6:
07:de:be:89:c7:17:c7:97:e1:da:83:96:9a:47:25:
1e:56:fb:8e:92:27:c0:fd:3a:77:62:ac:63:b6:03:
03:22:6c:e9:62:ea:76:bf:58:53:d4:30:17:e1:b2:
9e:d1:86:7a:ae:a5:df:78:5c:b0:94:15:1f:1e:5a:
e4:3b:c3:9e:dc:22:d2:f8:39:1d:48:e5:74:2e:67:
7b:fb:38:0d:02:91:0e:2a:42:d4:20:9c:56:b6:b6:
24:3a:1d:8f:47:d8:86:a5:49:44:70:14:7e:f8:fc:
91:5c:b1:1b:01:0f:90:92:4e:e9:fc:8f:2a:9a:5a:
62:43:4f:4d:54:e2:a0:6f:20:4b:a8:ce:c3:83:97:
b3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:1E:CB:F0:CA:8E:9E:0C:EE:8A:FE:27:CD:8A:FF:87:20:AB:B7:3D
X509v3 Authority Key Identifier:
keyid:7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/49E75ECAD66F11EF8C443287C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:7ec0:1006::/48
Signature Algorithm: sha256WithRSAEncryption
08:3d:5c:33:0f:69:22:8c:9f:a7:e5:2e:3c:78:6c:37:44:28:
b7:74:f0:b3:fb:0d:48:7f:72:e3:82:fc:a5:7f:55:27:aa:85:
82:c1:94:b5:25:52:b5:25:9d:da:76:56:50:35:a3:8d:ed:10:
22:b3:96:21:42:b1:45:35:7b:36:f8:88:8a:e6:22:ac:68:ed:
3f:f8:a3:f8:62:38:d8:37:24:b3:67:d2:34:5d:8b:00:a1:02:
7a:02:cc:c0:b3:9f:52:59:09:fd:b6:42:3e:28:2d:44:2b:7b:
36:dc:c6:f3:e3:86:b1:1e:8f:70:ad:d3:db:df:96:9b:de:d2:
3a:ff:ee:1f:ce:8d:ae:63:0e:61:58:48:4c:f4:c6:13:f4:e3:
cc:d8:45:9f:df:2b:b4:84:7a:97:dd:88:4c:24:ab:f0:ac:2d:
3c:82:56:57:d1:72:91:e4:76:5a:b9:20:5e:f4:08:c3:23:5f:
88:d1:05:0f:30:58:5c:19:2d:3c:48:33:b2:2f:b6:82:c3:13:
ce:6e:8a:f9:63:c5:20:60:e1:b3:fa:a2:44:e5:fd:16:6d:62:
74:b6:e9:59:29:cf:41:d2:89:74:e5:0c:46:4b:56:34:7e:dd:
6b:8a:c0:d0:de:7e:a2:92:49:52:79:9f:64:e0:46:1b:5a:e5:
80:70:fe:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:08:28 2025 by rpki-client