Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/5500DE161CB711EF865A8A66C4F9AE02.roa
File: 5500DE161CB711EF865A8A66C4F9AE02.roa (raw, json)
Hash identifier: bE9TZ3KFMkEX5C4mzL3f6K6AeBT6EY6Mdwh7TN4CO1U=
Subject key identifier: 00:A3:53:93:23:38:5F:89:3A:BA:04:C9:68:CE:1A:BF:DD:06:54:30
Certificate issuer: /CN=A91CEAE0/serialNumber=843247C0AC181FC36666A443721AF21D9DA650DA
Certificate serial: 08
Authority key identifier: 84:32:47:C0:AC:18:1F:C3:66:66:A4:43:72:1A:F2:1D:9D:A6:50:DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hDJHwKwYH8NmZqRDchryHZ2mUNo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/5500DE161CB711EF865A8A66C4F9AE02.roa
Signing time: Tue 28 May 2024 05:58:40 +0000
ROA not before: Tue 28 May 2024 05:58:40 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 216178
IP address blocks: 2001:df3:d9c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CEAE0
Validity
Not Before: May 28 05:58:40 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=66557290-0086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1c:50:10:52:44:ef:78:d1:3d:7e:9b:e4:1c:
69:3e:e0:86:74:f3:fd:29:c5:ac:dd:0e:00:9e:df:
1d:03:fc:30:30:2e:7e:e6:74:1d:2f:70:bf:98:ed:
29:85:89:c0:18:3d:09:5e:b5:bc:b5:82:14:62:0d:
f8:38:fd:ac:18:c9:2f:7c:89:7f:a2:e2:f8:e7:62:
17:dc:4e:00:24:b1:1f:bd:fe:d2:da:be:04:04:ca:
24:a2:0e:f1:ce:a3:4d:5b:5e:2f:d5:45:f1:98:ad:
e8:d7:8b:e3:b2:dd:16:b3:92:3b:5c:d5:a8:b0:51:
45:94:57:a1:fb:f5:ba:9d:0d:2a:3e:43:c2:89:1e:
dd:e4:66:0e:f3:ba:53:1f:2b:d3:c2:fd:8d:a6:db:
c8:a2:dd:87:8d:32:38:d6:aa:48:61:38:4d:fc:91:
e5:43:d2:89:66:3b:bd:c0:cf:9d:8a:da:d4:3b:05:
9f:71:9b:5f:4b:f3:23:81:c2:44:4b:74:d0:b0:3e:
a5:ed:e2:c9:58:bd:54:83:fb:52:e6:71:33:f4:98:
8d:0d:8b:86:96:2f:6c:dd:74:d7:81:1e:6b:2f:8f:
f1:c5:8a:e7:60:d5:51:92:d6:27:d9:29:91:b4:b9:
8f:c0:d2:ec:4e:74:d7:a9:9d:bd:65:10:d3:95:eb:
7c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A3:53:93:23:38:5F:89:3A:BA:04:C9:68:CE:1A:BF:DD:06:54:30
X509v3 Authority Key Identifier:
keyid:84:32:47:C0:AC:18:1F:C3:66:66:A4:43:72:1A:F2:1D:9D:A6:50:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/hDJHwKwYH8NmZqRDchryHZ2mUNo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hDJHwKwYH8NmZqRDchryHZ2mUNo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/5500DE161CB711EF865A8A66C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:d9c0::/48
Signature Algorithm: sha256WithRSAEncryption
59:fb:ac:7e:e4:6f:d2:5e:b3:51:ce:c1:0c:0a:b7:38:f0:43:
3c:fb:67:c4:2f:4b:45:dc:2c:48:3b:ba:a4:14:3a:a7:ea:be:
99:a6:93:5b:9f:66:d6:77:74:d6:6c:a6:b2:b2:93:ce:48:f1:
01:92:22:a6:2e:cf:f7:fc:9b:31:51:8d:cf:08:87:10:b1:82:
a8:94:71:52:6c:5b:41:fc:d2:86:06:99:34:8e:03:32:10:ed:
24:00:df:0a:f8:51:22:49:84:e0:57:eb:aa:39:05:ac:c6:94:
e2:4d:e2:b8:3f:0a:88:a4:b6:9a:c5:bd:f5:cd:0b:8b:81:97:
b9:33:06:82:31:f8:23:42:fa:ad:ba:77:2d:d5:49:1c:b4:76:
fe:fa:46:49:03:96:ad:3c:0c:13:33:27:3f:61:8e:47:da:8e:
02:5f:a2:b0:59:67:ad:9a:52:4c:ca:3d:77:31:d7:05:02:92:
73:2a:09:83:b1:a5:0b:66:19:b3:49:65:97:17:77:15:ea:ab:
85:14:0f:55:3e:36:a9:cb:9b:ce:21:55:47:c0:3f:e5:84:99:
de:9a:ea:b8:d6:c5:97:f9:b3:be:58:f8:23:4c:14:3b:4d:e8:
bd:0a:32:fd:1b:46:03:66:17:91:76:ad:79:53:a7:7a:8e:7b:
31:9a:9d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:20:17 2025 by rpki-client