Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/D347187A7E9511ECA9132A0BC4F9AE02.roa
File: D347187A7E9511ECA9132A0BC4F9AE02.roa (raw, json)
Hash identifier: 4i/7LdEU/T1ZHgOr95PKDKNxvTm/ZtFlmP55xUeSbB0=
Subject key identifier: 6D:01:62:E6:BE:11:8B:46:7C:FC:5B:68:AA:8C:DA:D9:8F:0A:E9:26
Certificate issuer: /CN=A91EA958/serialNumber=FD1607186373E81F44D137B2A0E96957E62AB8A1
Certificate serial: 342A
Authority key identifier: FD:16:07:18:63:73:E8:1F:44:D1:37:B2:A0:E9:69:57:E6:2A:B8:A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_RYHGGNz6B9E0TeyoOlpV-YquKE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/D347187A7E9511ECA9132A0BC4F9AE02.roa
Signing time: Fri 02 Aug 2024 15:30:59 +0000
ROA not before: Fri 02 Aug 2024 15:30:59 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 15133
IP address blocks: 2404:b300:33:1::/64 maxlen: 64
2404:b300:34::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13354 (0x342a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA958
Validity
Not Before: Aug 2 15:30:59 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66acfbb3-8057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6c:62:bb:ec:12:bb:61:cc:26:76:87:2b:4d:
1f:3d:42:ae:e5:13:9f:a3:5f:fa:fc:de:b7:ca:a6:
05:2e:ab:a2:c4:7e:6d:a0:1b:c7:b7:67:07:4e:9d:
b1:f8:c5:86:71:a2:a3:ec:da:74:a0:2d:b5:6e:2b:
95:f2:45:11:90:06:a9:8c:2a:1d:2b:99:18:1d:02:
03:2d:ae:77:a4:0e:3b:dd:8d:71:e7:d5:3f:75:f2:
b8:88:9a:57:d6:09:19:62:fb:bf:d6:76:d3:6d:84:
d4:99:76:67:ff:42:f9:66:7c:13:01:66:cc:18:46:
36:9a:7c:7f:e0:78:82:7e:c5:3f:9f:57:48:56:25:
68:e8:77:15:16:a8:bf:3d:6c:6b:62:af:c5:9c:ca:
fc:de:de:7c:e3:38:97:84:47:47:07:34:58:c2:d6:
81:5e:87:b6:31:95:54:3d:ee:1d:0a:82:27:7e:3d:
f7:e0:cb:55:f4:fd:f9:16:6d:82:81:12:08:4a:b3:
d1:ff:60:00:eb:b5:e8:19:09:95:f7:f4:77:2c:18:
6a:7a:7e:9e:1d:cf:f6:74:dd:f6:55:2a:4d:1d:a7:
33:f8:38:80:fa:41:43:9d:71:f1:48:4c:c2:76:63:
9c:d9:5e:bb:0d:66:27:41:f0:c1:f1:e2:98:67:ec:
4c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:01:62:E6:BE:11:8B:46:7C:FC:5B:68:AA:8C:DA:D9:8F:0A:E9:26
X509v3 Authority Key Identifier:
keyid:FD:16:07:18:63:73:E8:1F:44:D1:37:B2:A0:E9:69:57:E6:2A:B8:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_RYHGGNz6B9E0TeyoOlpV-YquKE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/D347187A7E9511ECA9132A0BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:b300:33:1::/64
2404:b300:34::/48
Signature Algorithm: sha256WithRSAEncryption
3b:2d:3f:00:d2:21:69:71:de:47:9a:da:24:f4:31:25:35:3d:
34:27:4f:f9:f1:92:34:f8:cd:6f:d1:1a:06:7f:30:fb:c5:41:
c9:d3:19:b7:fc:60:a5:3c:11:a9:6a:8b:d0:8c:9a:58:ce:d1:
3b:22:ca:51:e0:5b:ad:96:4d:55:a9:4f:8c:de:2b:6c:60:17:
d6:46:96:51:da:08:fe:03:6d:56:2f:b9:79:c5:33:c5:10:90:
62:5e:7b:2a:f9:44:df:6e:ce:bc:9f:13:0e:10:fc:42:ae:2c:
25:4f:07:4b:ad:8d:43:42:14:5c:a4:6e:a8:21:8d:45:85:8b:
b4:55:90:c2:ad:c4:98:4f:58:96:78:29:bd:92:3b:2a:d8:d2:
5e:1a:e6:44:05:0b:f8:ee:d8:1a:ef:75:67:5d:59:70:b9:1e:
79:62:0d:1d:90:a3:6f:e4:c9:d7:74:82:29:21:74:3d:bb:6d:
81:1d:a3:ee:d7:11:c8:30:08:d5:09:c6:fe:ce:5e:e4:3b:80:
25:1c:7f:0f:b5:a1:53:6c:63:14:22:26:d7:fc:f8:4b:4d:e4:
5e:83:7a:cf:03:bb:a2:d0:6f:58:d9:a7:e0:07:5e:49:93:6d:
07:30:30:88:3c:bc:71:90:ac:62:54:4a:a4:f4:4c:50:fd:5f:
b2:48:a7:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:20:29 2025 by rpki-client