Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/FB648B80F9DD11EC85C44880C4F9AE02.roa
File: FB648B80F9DD11EC85C44880C4F9AE02.roa (raw, json)
Hash identifier: Sq5YLnrI6niWLMeWLjro3RFtUrBz6mhWVJH2BrDvMPI=
Subject key identifier: 61:F4:C9:CC:B1:00:BF:0C:15:F8:4E:85:98:79:CA:33:85:DD:43:F8
Certificate issuer: /CN=A91C46FC/serialNumber=6DA137029C1E1A06AE0FA8F75BB88F2CA578F85A
Certificate serial: 0A5D
Authority key identifier: 6D:A1:37:02:9C:1E:1A:06:AE:0F:A8:F7:5B:B8:8F:2C:A5:78:F8:5A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/FB648B80F9DD11EC85C44880C4F9AE02.roa
Signing time: Fri 28 Mar 2025 20:02:13 +0000
ROA not before: Fri 28 Mar 2025 20:02:13 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 136945
IP address blocks: 2001:df3:1780::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2653 (0xa5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C46FC
Validity
Not Before: Mar 28 20:02:13 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67e70044-86e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:32:79:74:14:af:a8:fb:d1:f1:d5:1a:ef:96:
e7:44:3e:c4:7b:4d:3e:61:6f:23:b4:d6:b7:57:18:
84:7f:7b:8a:18:3d:f0:5b:61:99:d8:3a:da:ae:87:
e1:94:22:91:51:57:4c:37:25:2e:57:45:be:24:35:
23:d0:56:bb:8d:bf:87:44:5d:e4:de:50:4d:f2:5b:
70:7a:ee:1f:c6:20:ae:cf:4f:66:2e:57:b5:08:31:
31:ff:bd:f2:68:df:88:63:40:04:77:d5:7d:67:a0:
e4:57:d0:42:1d:ad:bd:2c:c6:bf:a6:84:77:4b:7e:
77:20:2b:b2:98:72:b2:68:80:b4:8b:24:25:b9:81:
67:f5:d0:93:fa:20:d4:f9:12:4a:85:c0:56:31:f4:
51:7a:0d:a1:33:9f:03:bc:46:a4:80:72:ed:8f:6f:
93:bf:e8:1b:61:9b:be:50:94:70:69:c3:37:c3:aa:
27:9f:30:99:2a:83:a9:0f:3b:04:e4:48:5e:03:ab:
7a:15:7c:79:cd:33:8f:c4:aa:33:4b:10:fa:b3:99:
5e:2c:56:1c:d2:d9:ba:e8:e3:87:ae:86:41:3e:21:
3a:59:0c:9e:85:ed:30:be:7e:4d:ef:d7:20:83:b4:
5d:36:dd:94:1d:c3:3c:80:bc:62:d1:07:93:de:5b:
89:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F4:C9:CC:B1:00:BF:0C:15:F8:4E:85:98:79:CA:33:85:DD:43:F8
X509v3 Authority Key Identifier:
keyid:6D:A1:37:02:9C:1E:1A:06:AE:0F:A8:F7:5B:B8:8F:2C:A5:78:F8:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/FB648B80F9DD11EC85C44880C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:1780::/48
Signature Algorithm: sha256WithRSAEncryption
d1:02:34:fb:51:2e:e6:8c:7b:62:21:0c:a2:6c:89:f0:05:78:
db:e8:01:c9:6a:f9:c7:00:19:28:0d:48:58:7f:9a:57:56:3d:
73:ed:31:35:0b:65:36:45:c9:e7:67:8f:0b:20:74:32:1c:fc:
0b:63:13:90:9f:f7:f8:09:3a:f4:84:65:23:37:c9:ca:d3:f2:
e9:98:53:bc:4a:4d:69:50:af:d3:88:2c:48:e7:2e:6e:58:33:
80:34:49:c2:5e:34:10:b9:93:38:b2:aa:9e:55:d0:a2:77:54:
14:08:07:95:57:68:a7:1e:5f:b5:63:5d:bb:5a:32:d4:b3:4c:
2b:6b:88:df:9b:a1:f6:c9:3e:db:e4:ff:ce:38:93:0c:7b:b3:
f5:2a:a9:f7:e5:3e:90:46:42:2d:c8:dc:8d:8a:86:aa:48:b1:
6a:78:56:53:d2:8c:a7:1d:6c:95:e3:1e:8e:79:83:07:97:cc:
8b:74:3c:24:91:7d:9b:91:31:c0:7a:62:29:40:23:fd:86:b6:
27:d5:fb:12:c5:f4:bc:92:db:a1:a4:14:81:49:f4:55:ee:c9:
12:be:7e:85:16:2c:09:a4:52:08:4a:e1:04:53:11:4a:9d:df:
44:8c:40:90:d3:c5:89:94:cd:32:b2:6d:0b:a2:72:dd:d0:d9:
a2:b7:f2:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:34:31 2025 by rpki-client