Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9B89/4367C20E6C1811EFAB6B690CC4F9AE02/2025BD6C6C3311EF99E0EF34C4F9AE02.roa
File: 2025BD6C6C3311EF99E0EF34C4F9AE02.roa (raw, json)
Hash identifier: v8gSdO2Oyevi0udRA9oSIzZPAk2F5XphTGY0llKdCYI=
Subject key identifier: 72:46:35:2B:18:D9:7D:44:2C:36:6C:B3:6B:EA:EA:60:B1:DD:04:08
Certificate issuer: /CN=A91E9B89/serialNumber=29037BBF92F2B0F4C330A1CDD4A76256CD7A5422
Certificate serial: 03
Authority key identifier: 29:03:7B:BF:92:F2:B0:F4:C3:30:A1:CD:D4:A7:62:56:CD:7A:54:22
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQN7v5LysPTDMKHN1KdiVs16VCI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9B89/4367C20E6C1811EFAB6B690CC4F9AE02/2025BD6C6C3311EF99E0EF34C4F9AE02.roa
Signing time: Fri 06 Sep 2024 09:33:51 +0000
ROA not before: Fri 06 Sep 2024 09:33:51 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 153320
IP address blocks: 2401:c120::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9B89
Validity
Not Before: Sep 6 09:33:51 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=66dacc7f-992a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:65:7a:4b:31:1c:e0:a9:a3:37:d1:65:d1:6d:
d7:80:e5:93:80:78:d5:0f:9d:f6:fe:77:66:3f:d0:
d8:8a:bb:0a:2b:2e:4e:0f:27:76:5a:92:03:14:b9:
66:25:1e:51:08:29:0c:68:2a:cd:66:e0:0d:4e:1e:
52:4d:6d:52:fb:f6:f0:b5:8c:96:29:c5:1e:54:cd:
9a:b3:9f:58:b3:f8:dc:d7:8d:a6:9f:70:b6:b9:f6:
0b:61:c5:15:6c:f2:ff:e9:fd:ed:20:73:2d:5f:d4:
98:8d:2d:ec:8b:d1:c6:7b:f8:99:b0:06:da:01:e1:
15:c4:42:4a:42:35:30:b7:b6:f8:df:fc:94:81:20:
0c:bc:b1:e2:3e:04:11:95:50:dd:6f:ef:c2:2f:a7:
e7:1a:d2:4f:60:96:d1:69:16:e3:9b:8b:e2:33:bc:
18:fa:35:74:9a:fb:0b:31:1a:3b:db:81:3a:e1:c8:
3e:13:da:30:de:1e:22:a6:df:96:e5:c9:cc:e1:1c:
71:39:75:ef:a9:7b:90:94:84:d0:ed:88:6f:90:58:
e9:71:58:88:11:db:e5:ff:80:f1:18:79:40:04:55:
f9:8a:dc:45:55:c2:31:00:a5:e5:4d:43:1c:ff:f3:
78:ac:3c:c2:43:53:04:4c:95:5b:3c:bc:8d:8a:01:
4a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:46:35:2B:18:D9:7D:44:2C:36:6C:B3:6B:EA:EA:60:B1:DD:04:08
X509v3 Authority Key Identifier:
keyid:29:03:7B:BF:92:F2:B0:F4:C3:30:A1:CD:D4:A7:62:56:CD:7A:54:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9B89/4367C20E6C1811EFAB6B690CC4F9AE02/KQN7v5LysPTDMKHN1KdiVs16VCI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQN7v5LysPTDMKHN1KdiVs16VCI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9B89/4367C20E6C1811EFAB6B690CC4F9AE02/2025BD6C6C3311EF99E0EF34C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:c120::/32
Signature Algorithm: sha256WithRSAEncryption
6d:4a:83:bc:14:4a:f8:2a:5a:b8:8c:b6:4b:3c:4b:d6:78:4e:
61:cd:e3:32:35:b9:10:9f:4a:db:ab:e8:1a:ce:2d:f2:da:40:
b3:f2:f0:ef:07:d7:e6:b2:ec:10:fa:79:0b:66:96:70:0c:0b:
b2:93:d0:9c:09:69:29:6e:ef:10:c2:ab:5c:fb:31:5c:ce:13:
83:fe:ed:d7:1a:2d:84:4c:a3:73:09:82:94:89:33:d1:bc:98:
70:e0:73:84:dc:d3:b1:f6:98:69:01:67:00:b7:c3:fa:1e:71:
a1:a2:84:8a:1d:3c:42:6e:03:31:5e:a8:8f:42:be:cf:39:62:
e6:05:56:ec:a1:eb:06:88:16:39:d6:78:f4:80:08:b0:f4:05:
40:6a:5f:8a:46:dd:91:f5:e4:ac:ae:e2:d1:cc:75:bb:de:a5:
a8:4c:07:49:19:37:72:aa:86:b6:31:62:a9:90:c2:c3:ed:89:
b6:8b:c4:8e:32:27:f4:43:8f:57:88:c3:8b:e8:79:8b:e9:26:
84:da:2a:5b:57:d0:3a:26:af:06:44:ca:9b:6f:52:68:a9:ff:
61:50:38:34:f4:0f:39:cb:5c:77:ce:4b:6f:05:9e:c3:f6:8d:
76:b4:43:da:a0:f8:ff:12:f4:23:f9:2b:8f:37:c4:a1:c0:b2:
31:aa:41:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:57:19 2025 by rpki-client