Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/6F8A81CCF30C11ED94750772C4F9AE02.roa
File: 6F8A81CCF30C11ED94750772C4F9AE02.roa (raw, json)
Hash identifier: QNRRPIEXpBXbzOjvogyb/5EofzlDIH5pOqmalYkDTHw=
Subject key identifier: 9F:80:44:52:33:D5:9A:FC:08:5E:15:24:7D:B4:3A:AB:77:CF:CB:5F
Certificate issuer: /CN=A91D51A0/serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539
Certificate serial: 0400
Authority key identifier: C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/6F8A81CCF30C11ED94750772C4F9AE02.roa
Signing time: Fri 07 Mar 2025 00:46:05 +0000
ROA not before: Fri 07 Mar 2025 00:46:05 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 208690
IP address blocks: 2400:54a0:2a00::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1024 (0x400)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D51A0
Validity
Not Before: Mar 7 00:46:05 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67ca41cd-7369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5d:f3:c6:08:38:44:3b:63:fe:31:ad:12:d8:
8a:83:78:ca:41:e9:32:70:fd:b0:de:9e:7a:e5:91:
6a:fd:4b:a1:f7:5d:f2:fd:6b:ec:d2:5d:eb:c8:62:
47:3d:1c:cd:40:d4:32:fa:86:e8:36:b8:81:b8:df:
a9:a8:ca:63:9b:4c:d9:26:93:b1:c1:3a:44:b4:e4:
13:fd:08:7d:5c:65:44:1e:04:c0:97:fa:53:99:f1:
a3:d0:33:47:5c:3d:7c:1d:56:25:b3:62:f2:dd:61:
23:ba:a0:af:d8:f2:19:c0:03:e8:04:61:74:02:f0:
d0:f0:15:45:4f:3a:b7:b4:9d:1a:3f:2e:fd:c5:8b:
98:f4:06:8e:83:61:1a:fe:bf:b5:00:2d:41:48:1c:
7e:4e:8c:e6:19:91:42:5e:7d:23:41:9f:3c:5a:1c:
06:b8:ed:4c:f0:16:ec:c6:da:35:a3:66:f4:5c:90:
4e:6c:76:11:6f:aa:7f:4b:22:5f:74:18:0d:a5:68:
24:9c:77:3b:57:b5:52:31:a5:88:a8:f2:f5:96:84:
53:00:cf:7b:6a:4e:c6:3e:9f:95:d6:17:6e:00:b6:
60:41:c0:71:e1:40:ef:88:b7:2b:a3:d2:a5:eb:43:
1b:89:e5:2c:fd:4d:e6:49:fb:e2:72:9f:b3:97:fa:
99:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:80:44:52:33:D5:9A:FC:08:5E:15:24:7D:B4:3A:AB:77:CF:CB:5F
X509v3 Authority Key Identifier:
keyid:C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/6F8A81CCF30C11ED94750772C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:54a0:2a00::/44
Signature Algorithm: sha256WithRSAEncryption
41:2d:70:ae:77:0e:23:6e:3d:67:bf:14:31:40:04:6a:5b:5d:
28:df:4e:06:f3:79:43:91:0a:04:ad:09:b2:14:33:a3:f9:66:
bf:ae:36:ba:0d:5c:6f:22:82:59:2f:0c:db:0a:f7:61:c1:8f:
df:0d:7c:51:29:f0:61:d0:46:9d:77:cd:9e:27:f3:b3:ba:be:
01:cd:b0:1d:5d:0e:94:ed:40:1f:43:ea:65:fe:50:c8:17:f7:
9e:30:a4:82:bb:c6:47:d9:1b:02:67:36:77:29:53:3c:6a:e2:
ff:1d:28:13:b6:dd:4e:8b:8d:dd:65:eb:fd:54:22:f8:66:63:
e0:e9:8b:12:e0:65:e9:8b:de:b2:77:e6:b1:65:de:15:b1:ea:
04:ba:4b:a9:fe:0b:8e:46:01:83:a4:25:68:3b:60:c5:53:66:
eb:36:26:22:8c:62:00:12:3d:8b:d2:24:2d:58:35:54:64:b6:
98:42:08:da:e3:80:85:fb:4b:88:03:4d:ca:dd:ec:eb:e0:c9:
82:a7:ae:22:38:e4:87:17:6b:19:c7:36:d5:56:be:fb:54:01:
3d:6a:67:e0:7e:8a:61:12:65:a1:88:c4:27:c4:01:6d:f9:46:
60:4f:3e:c8:fa:4a:ef:9a:99:54:15:f1:4c:63:09:21:f7:48:
24:33:2c:d8
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgICBAAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDUxQTAxMTAvBgNVBAUTKEM2RUFCRUI5M0UxRDA2RTJDMzJFMUM0Q0JFMTQ3Q0ZC
Mzk5OTI1MzkwHhcNMjUwMzA3MDA0NjA1WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2NhNDFjZC03MzY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsl3zxgg4RDtj/jGtEtiKg3jKQekycP2w3p565ZFq/Uuh913y/Wvs0l3ryGJH
PRzNQNQy+oboNriBuN+pqMpjm0zZJpOxwTpEtOQT/Qh9XGVEHgTAl/pTmfGj0DNH
XD18HVYls2Ly3WEjuqCv2PIZwAPoBGF0AvDQ8BVFTzq3tJ0aPy79xYuY9AaOg2Ea
/r+1AC1BSBx+TozmGZFCXn0jQZ88WhwGuO1M8Bbsxto1o2b0XJBObHYRb6p/SyJf
dBgNpWgknHc7V7VSMaWIqPL1loRTAM97ak7GPp+V1hduALZgQcBx4UDviLcro9Kl
60MbieUs/U3mSfvicp+zl/qZ6wIDAQABo4ICmDCCApQwHQYDVR0OBBYEFJ+ARFIz
1Zr8CF4VJH20Oqt3z8tfMB8GA1UdIwQYMBaAFMbqvrk+HQbiwy4cTL4UfPs5mSU5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTFBMC83QzUzOTEwQzdG
ODQxMUVDODA1MThFNTFDNEY5QUUwMi94dXEtdVQ0ZEJ1TERMaHhNdmhSOC16bVpK
VGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3h1cS11VDRkQnVMRExoeE12aFI4LXptWkpUay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDUxQTAvN0M1MzkxMEM3Rjg0MTFFQzgwNTE4RTUxQzRGOUFFMDIvNkY4QTgxQ0NG
MzBDMTFFRDk0NzUwNzcyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwQkAFSgKgAwDQYJKoZIhvcNAQELBQADggEBAEEtcK53DiNu
PWe/FDFABGpbXSjfTgbzeUORCgStCbIUM6P5Zr+uNroNXG8iglkvDNsK92HBj98N
fFEp8GHQRp13zZ4n87O6vgHNsB1dDpTtQB9D6mX+UMgX954wpIK7xkfZGwJnNncp
Uzxq4v8dKBO23U6Ljd1l6/1UIvhmY+DpixLgZemL3rJ35rFl3hWx6gS6S6n+C45G
AYOkJWg7YMVTZus2JiKMYgASPYvSJC1YNVRktphCCNrjgIX7S4gDTcrd7OvgyYKn
riI45IcXaxnHNtVWvvtUAT1qZ+B+imESZaGIxCfEAW35RmBPPsj6Su+amVQV8Uxj
CSH3SCQzLNg=
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:22:26 2025 by rpki-client