Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/D734CCEA1E0A11EF87335F33C4F9AE02.roa
File: D734CCEA1E0A11EF87335F33C4F9AE02.roa (raw, json)
Hash identifier: eXiNprSP3Xqa5jUVIP50uCJTJWbuKph0+8u++H0ltD8=
Subject key identifier: D2:D6:A1:3A:65:23:7A:C9:27:9E:FD:D8:83:DC:78:95:07:FC:7A:DD
Certificate issuer: /CN=A91FE75F/serialNumber=4D14E1AF22F53B22F56DEF02EB72EA5DD6BE77E2
Certificate serial: 01E4
Authority key identifier: 4D:14:E1:AF:22:F5:3B:22:F5:6D:EF:02:EB:72:EA:5D:D6:BE:77:E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRThryL1OyL1be8C63LqXda-d-I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/D734CCEA1E0A11EF87335F33C4F9AE02.roa
Signing time: Wed 29 May 2024 22:28:58 +0000
ROA not before: Wed 29 May 2024 22:28:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 142000
IP address blocks: 2001:df6:3580::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 484 (0x1e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE75F
Validity
Not Before: May 29 22:28:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6657ac2a-7606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8d:ef:eb:2b:5a:f8:0c:c5:47:3d:ec:2b:e4:
ba:b8:59:e9:1f:74:0f:67:d6:cf:6e:ae:10:74:db:
4d:51:8b:f3:35:9d:91:91:2f:83:8f:3b:b0:c5:89:
84:12:a9:90:ea:ab:18:17:8f:fc:6a:c0:3b:61:27:
44:f2:9d:59:99:21:7a:09:9e:9d:8b:bd:c0:bd:41:
8f:e2:99:38:79:4c:df:b6:0f:7b:91:0f:b2:db:5c:
9e:ad:e1:e6:ce:94:df:91:b4:56:00:57:2f:72:0e:
7f:7b:9b:02:ca:21:72:70:90:bf:2c:53:b9:e7:6e:
30:14:7f:ba:b4:a8:73:07:58:db:3d:bb:49:3b:3b:
68:98:fb:5b:5b:d9:ef:00:90:95:cf:6f:19:7a:9f:
6a:a8:5b:5a:ea:5f:32:52:e2:b1:fe:07:96:00:7c:
be:c7:0d:d8:23:20:cb:65:0a:be:e1:7a:6d:7e:17:
60:62:48:41:b8:4b:86:37:0e:0c:09:56:21:28:4f:
54:8f:de:56:81:e3:83:a9:48:f3:1d:46:67:90:99:
60:c4:d7:e4:b6:95:fb:40:91:49:f4:17:37:3f:e3:
1e:5b:d4:d8:70:9b:e8:80:ea:f3:50:23:97:05:81:
44:d2:1b:d1:85:09:03:42:5e:e1:25:42:b8:43:2e:
13:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:D6:A1:3A:65:23:7A:C9:27:9E:FD:D8:83:DC:78:95:07:FC:7A:DD
X509v3 Authority Key Identifier:
keyid:4D:14:E1:AF:22:F5:3B:22:F5:6D:EF:02:EB:72:EA:5D:D6:BE:77:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRThryL1OyL1be8C63LqXda-d-I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/D734CCEA1E0A11EF87335F33C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:3580::/48
Signature Algorithm: sha256WithRSAEncryption
4c:f4:ea:88:34:09:3e:71:90:59:fa:5b:be:73:e9:ea:e0:9e:
41:25:3c:8c:83:3a:a4:8c:62:b2:1b:50:bf:cc:c6:0e:fe:2d:
37:70:a0:09:56:7c:cb:dd:2a:f8:cc:e4:61:6d:7d:c0:41:62:
c7:e5:05:b8:20:90:4b:2b:7b:3a:61:bc:45:c0:d5:68:18:5e:
8d:3c:d3:e1:d5:02:a7:76:93:6b:40:49:d6:ec:5e:7e:e9:85:
4b:26:04:ff:94:f9:17:1a:37:3f:03:5d:51:6d:b3:82:4d:7e:
ee:ce:fb:79:d2:4d:b4:bf:8f:5e:47:6e:a2:26:f2:9d:f0:11:
16:a0:43:48:f2:59:5a:3f:11:30:49:e4:6b:61:10:84:c0:8b:
63:36:52:7f:b7:8a:0d:da:8f:e2:a6:94:e9:7a:9a:a0:d0:1a:
9c:0a:77:38:3b:41:7a:9c:a6:c1:18:b0:1e:13:75:c6:79:13:
2b:ff:96:e9:2a:59:37:e9:b5:94:a8:19:dd:df:1b:79:82:56:
17:14:fc:2c:7c:32:80:ab:d4:37:cd:45:26:02:b6:ed:44:b8:
f4:e7:98:73:97:62:51:e5:4a:13:e4:20:f9:c3:0b:84:e4:ea:
16:ec:3c:7b:80:ec:f8:21:f1:10:9b:37:85:42:65:18:1c:9e:
45:8d:c2:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:58:46 2025 by rpki-client