Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDA0E/BF94AB6C0AD711E7AD6FE621C4F9AE02/129BCA9CF65611E78F225A3AC4F9AE02.roa
File: 129BCA9CF65611E78F225A3AC4F9AE02.roa (raw, json)
Hash identifier: zY29lFW4K/tMuhnYOJCZeKD2wYbUkzplU4uA2qamAmA=
Subject key identifier: B1:4E:A7:BB:A8:BE:15:F9:7B:AD:0A:63:66:8E:14:FF:05:4E:E4:9D
Certificate issuer: /CN=A91BDA0E/serialNumber=18B879EB8186F34920686ACE8BDB8F3C143C8501
Certificate serial: 1A98
Authority key identifier: 18:B8:79:EB:81:86:F3:49:20:68:6A:CE:8B:DB:8F:3C:14:3C:85:01
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GLh564GG80kgaGrOi9uPPBQ8hQE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BDA0E/BF94AB6C0AD711E7AD6FE621C4F9AE02/129BCA9CF65611E78F225A3AC4F9AE02.roa
Signing time: Wed 06 Dec 2023 16:43:50 +0000
ROA not before: Wed 06 Dec 2023 16:43:50 +0000
ROA not after: Fri 31 Jan 2025 00:00:00 +0000
asID: 45920
IP address blocks: 2403:780:fec0::/42 maxlen: 42
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6808 (0x1a98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDA0E
Validity
Not Before: Dec 6 16:43:50 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=6570a4c5-3994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4c:37:24:5d:0e:40:77:08:aa:ed:62:d7:3c:
13:70:3e:3a:64:61:43:7e:cc:5e:cb:1c:3f:67:74:
e2:20:3a:b1:07:d1:6a:01:d5:34:2f:96:82:30:8a:
ed:7e:fb:c9:71:67:60:54:16:08:c8:a0:f1:f1:06:
16:e0:35:72:e9:95:5f:d1:f4:d1:22:59:62:ff:79:
94:9a:7e:46:cd:3c:ef:68:24:70:ff:0e:6e:42:37:
fa:0b:12:93:38:3c:64:18:06:c3:56:e7:0d:24:4f:
5d:50:95:19:93:9c:f8:b4:24:74:77:a1:ca:c5:aa:
65:ec:0e:a7:49:3e:e8:b0:5c:cc:45:6e:85:c2:9a:
7d:03:2b:3c:1e:49:2a:82:99:42:2d:f1:cd:74:bd:
ca:95:e5:99:83:d7:60:e3:04:e2:95:d3:89:12:36:
cf:06:bb:9a:81:49:5e:4c:ec:ce:b5:5b:83:bf:27:
ca:14:c1:6f:46:27:04:cb:4f:f7:cf:e6:e9:6f:65:
93:56:a5:a5:33:25:f6:bd:ed:a1:9c:09:b6:e3:1f:
13:38:8b:33:fe:10:c6:ce:75:bd:fe:d8:09:17:29:
13:61:46:70:e4:21:05:ff:09:ae:fc:7c:03:26:c1:
5c:11:f6:80:81:4f:f5:ac:34:f3:05:f0:76:ac:36:
7f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:4E:A7:BB:A8:BE:15:F9:7B:AD:0A:63:66:8E:14:FF:05:4E:E4:9D
X509v3 Authority Key Identifier:
keyid:18:B8:79:EB:81:86:F3:49:20:68:6A:CE:8B:DB:8F:3C:14:3C:85:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BDA0E/BF94AB6C0AD711E7AD6FE621C4F9AE02/GLh564GG80kgaGrOi9uPPBQ8hQE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GLh564GG80kgaGrOi9uPPBQ8hQE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDA0E/BF94AB6C0AD711E7AD6FE621C4F9AE02/129BCA9CF65611E78F225A3AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:780:fec0::/42
Signature Algorithm: sha256WithRSAEncryption
b0:3c:48:34:56:da:5b:4a:ee:28:7e:7e:03:88:6d:88:d1:73:
e4:b6:be:85:a7:f3:70:6d:6b:28:a2:a8:93:75:64:d2:1e:ce:
71:60:d8:ba:b5:7f:4b:63:70:13:fc:0c:c3:7a:47:3e:f4:6d:
41:93:ca:cd:aa:e7:28:a3:84:53:a4:50:20:22:5e:3f:8e:37:
c3:56:be:da:cb:f2:68:69:da:26:6c:af:a9:93:5c:94:f3:20:
bc:50:bb:a7:fb:a3:4d:1c:be:ad:1a:8b:6f:e9:f2:6e:73:82:
cf:05:db:66:ab:13:43:81:cc:ee:6e:f2:8c:ed:89:6c:02:01:
ea:9c:8e:62:6d:25:d4:89:cc:b4:9e:4a:92:03:c0:9f:cd:eb:
c9:e8:8b:74:76:ff:e6:b5:5d:4f:82:62:8c:0c:74:a3:28:45:
1a:7d:be:25:1f:ad:38:0d:79:2c:d0:2d:04:0d:45:4d:f0:8c:
b7:d5:70:17:76:23:cd:6c:85:2c:f0:27:a5:53:c1:72:89:5a:
e7:27:b3:f7:48:5a:8f:4e:64:99:0a:a4:16:3b:d2:57:bc:83:
d1:c6:6a:d6:53:f8:61:06:8d:af:c0:9b:3d:b1:82:a0:fd:a1:
29:5a:ce:47:df:c7:33:41:b5:9c:e3:65:c9:f8:2a:e6:b1:55:
ca:2c:d1:da
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgICGpgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkRBMEUxMTAvBgNVBAUTKDE4Qjg3OUVCODE4NkYzNDkyMDY4NkFDRThCREI4RjND
MTQzQzg1MDEwHhcNMjMxMjA2MTY0MzUwWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTcwYTRjNS0zOTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAukw3JF0OQHcIqu1i1zwTcD46ZGFDfsxeyxw/Z3TiIDqxB9FqAdU0L5aCMIrt
fvvJcWdgVBYIyKDx8QYW4DVy6ZVf0fTRIlli/3mUmn5GzTzvaCRw/w5uQjf6CxKT
ODxkGAbDVucNJE9dUJUZk5z4tCR0d6HKxapl7A6nST7osFzMRW6Fwpp9Ays8Hkkq
gplCLfHNdL3KleWZg9dg4wTildOJEjbPBruagUleTOzOtVuDvyfKFMFvRicEy0/3
z+bpb2WTVqWlMyX2ve2hnAm24x8TOIsz/hDGznW9/tgJFykTYUZw5CEF/wmu/HwD
JsFcEfaAgU/1rDTzBfB2rDZ/XQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFLFOp7uo
vhX5e60KY2aOFP8FTuSdMB8GA1UdIwQYMBaAFBi4eeuBhvNJIGhqzovbjzwUPIUB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREEwRS9CRjk0QUI2QzBB
RDcxMUU3QUQ2RkU2MjFDNEY5QUUwMi9HTGg1NjRHRzgwa2dhR3JPaTl1UFBCUTho
UUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dMaDU2NEdHODBrZ2FHck9pOXVQUEJROGhRRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QkRBMEUvQkY5NEFCNkMwQUQ3MTFFN0FENkZFNjIxQzRGOUFFMDIvMTI5QkNBOUNG
NjU2MTFFNzhGMjI1QTNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwYkAweA/sAwDQYJKoZIhvcNAQELBQADggEBALA8SDRW2ltK
7ih+fgOIbYjRc+S2voWn83BtayiiqJN1ZNIeznFg2Lq1f0tjcBP8DMN6Rz70bUGT
ys2q5yijhFOkUCAiXj+ON8NWvtrL8mhp2iZsr6mTXJTzILxQu6f7o00cvq0ai2/p
8m5zgs8F22arE0OBzO5u8oztiWwCAeqcjmJtJdSJzLSeSpIDwJ/N68noi3R2/+a1
XU+CYowMdKMoRRp9viUfrTgNeSzQLQQNRU3wjLfVcBd2I81shSzwJ6VTwXKJWucn
s/dIWo9OZJkKpBY70le8g9HGatZT+GEGja/Amz2xgqD9oSlazkffxzNBtZzjZcn4
KuaxVcos0do=
-----END CERTIFICATE-----
Generated at Wed Apr 9 17:37:03 2025 by rpki-client