Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/9E8803A0EB0D11EF99575976C4F9AE02.roa
File: 9E8803A0EB0D11EF99575976C4F9AE02.roa (raw, json)
Hash identifier: yaPteE4hejSxLkmWmY4xK2B059SLePJYwcPEvAeEGQM=
Subject key identifier: 66:A8:15:32:E8:90:C1:81:09:97:5F:49:29:55:1B:16:E4:CE:02:03
Certificate issuer: /CN=A918C287/serialNumber=D8B1E2389BA591FD79B9A504AF5A44DAE0A6E828
Certificate serial: 6D
Authority key identifier: D8:B1:E2:38:9B:A5:91:FD:79:B9:A5:04:AF:5A:44:DA:E0:A6:E8:28
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2LHiOJulkf15uaUEr1pE2uCm6Cg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/9E8803A0EB0D11EF99575976C4F9AE02.roa
Signing time: Fri 14 Feb 2025 19:55:20 +0000
ROA not before: Fri 14 Feb 2025 19:55:20 +0000
ROA not after: Sat 01 May 2038 00:00:00 +0000
asID: 399970
IP address blocks: 2401:4600:0:9::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109 (0x6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C287
Validity
Not Before: Feb 14 19:55:20 2025 GMT
Not After : May 1 00:00:00 2038 GMT
Subject: CN=67af9fa8-dc73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:70:bc:6c:a4:f9:ab:f4:9d:d5:d5:84:04:45:
2a:af:d1:5b:8c:d9:8f:d5:6f:44:2a:df:b8:59:25:
b4:d2:2b:5b:9a:b5:92:8e:0e:5c:d1:02:a2:d3:fc:
fd:cf:e3:fd:dc:d2:f9:0f:a4:e7:b4:6a:b9:0a:fc:
0b:64:91:3f:31:55:ea:d2:b0:33:1d:36:79:8e:b6:
09:c6:a8:0a:94:f1:9c:8e:2e:9a:47:46:00:9a:05:
25:eb:cf:a1:72:b6:cf:7f:1f:cc:60:c9:cb:9e:ad:
81:6a:2d:07:6e:93:8b:c9:d6:63:83:7e:2a:f8:26:
56:95:97:72:75:4f:dd:eb:ef:9b:fc:9f:6c:17:0d:
05:75:17:32:ac:2d:ef:8c:24:c0:cf:f1:e8:91:77:
d8:a9:fd:a3:5b:1f:13:3f:a6:fb:64:c5:5a:85:a3:
82:73:2f:58:d1:7b:dc:10:34:13:95:ff:64:3f:26:
a5:c1:32:d8:e2:4f:c4:b9:5e:0d:cc:63:fb:d3:5a:
19:66:82:68:c6:56:ac:1b:56:0d:10:d7:e4:b7:0c:
73:57:9e:43:94:11:fb:d5:34:97:ae:80:c7:e2:f2:
17:93:46:5c:81:83:f6:e8:be:73:9b:37:fc:dc:78:
f5:30:d4:5a:ff:f3:20:13:80:08:9d:f5:2c:1e:72:
9d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:A8:15:32:E8:90:C1:81:09:97:5F:49:29:55:1B:16:E4:CE:02:03
X509v3 Authority Key Identifier:
keyid:D8:B1:E2:38:9B:A5:91:FD:79:B9:A5:04:AF:5A:44:DA:E0:A6:E8:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/2LHiOJulkf15uaUEr1pE2uCm6Cg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2LHiOJulkf15uaUEr1pE2uCm6Cg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/9E8803A0EB0D11EF99575976C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:4600:0:9::/64
Signature Algorithm: sha256WithRSAEncryption
b7:62:91:ad:bf:a2:f9:1f:d2:1b:1a:50:fa:b8:57:40:7d:c7:
df:28:90:a5:f6:84:82:63:d8:b9:af:8c:88:b2:0c:90:d0:72:
33:ef:8c:a7:8e:e5:fe:6c:67:b0:69:af:48:11:90:c4:7c:fc:
ca:d3:68:bb:cd:32:a9:a2:57:9c:e9:d8:5d:97:c9:1d:69:b2:
54:3e:33:8b:56:1f:3b:a2:e4:3a:bb:95:64:47:89:4f:a8:d7:
18:af:bd:6f:80:67:3d:d9:48:05:ff:95:f6:a5:e5:56:a8:45:
26:a5:45:8e:70:1e:24:59:f2:a8:74:91:61:36:4c:64:c3:39:
84:9e:06:7f:95:b7:68:3c:71:5a:3a:24:82:23:fe:ca:d7:cb:
e8:56:cf:ca:47:5a:80:3e:1f:6c:bd:75:be:14:fb:2a:48:8e:
8e:f2:d8:50:0c:53:f1:15:cc:bc:68:bd:04:48:d2:f5:21:ca:
45:c6:bb:ae:f7:59:bc:8b:5a:e1:b7:22:d2:fe:73:4f:9b:f3:
2a:7c:74:ae:33:cf:20:be:eb:35:8c:9c:ab:86:60:05:b3:70:
84:d8:14:1f:62:81:cc:6f:22:d2:a3:f3:30:96:10:17:fa:f0:
c7:7c:17:1e:fc:62:85:b1:ed:8b:46:86:03:86:df:d6:f7:ec:
8d:05:49:61
-----BEGIN CERTIFICATE-----
MIIFdTCCBF2gAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
QzI4NzExMC8GA1UEBRMoRDhCMUUyMzg5QkE1OTFGRDc5QjlBNTA0QUY1QTQ0REFF
MEE2RTgyODAeFw0yNTAyMTQxOTU1MjBaFw0zODA1MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY3YWY5ZmE4LWRjNzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCxcLxspPmr9J3V1YQERSqv0VuM2Y/Vb0Qq37hZJbTSK1uatZKODlzRAqLT/P3P
4/3c0vkPpOe0arkK/AtkkT8xVerSsDMdNnmOtgnGqAqU8ZyOLppHRgCaBSXrz6Fy
ts9/H8xgycuerYFqLQduk4vJ1mODfir4JlaVl3J1T93r75v8n2wXDQV1FzKsLe+M
JMDP8eiRd9ip/aNbHxM/pvtkxVqFo4JzL1jRe9wQNBOV/2Q/JqXBMtjiT8S5Xg3M
Y/vTWhlmgmjGVqwbVg0Q1+S3DHNXnkOUEfvVNJeugMfi8heTRlyBg/bovnObN/zc
ePUw1Fr/8yATgAid9Swecp0jAgMBAAGjggKaMIICljAdBgNVHQ4EFgQUZqgVMuiQ
wYEJl19JKVUbFuTOAgMwHwYDVR0jBBgwFoAU2LHiOJulkf15uaUEr1pE2uCm6Cgw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThDMjg3LzMwN0NGRjFFQjM3
NzExRUZCOTE4NEQ3QUM0RjlBRTAyLzJMSGlPSnVsa2YxNXVhVUVyMXBFMnVDbTZD
Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvMkxIaU9KdWxrZjE1dWFVRXIxcEUydUNtNkNnLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QzI4Ny8zMDdDRkYxRUIzNzcxMUVGQjkxODREN0FDNEY5QUUwMi85RTg4MDNBMEVC
MEQxMUVGOTk1NzU5NzZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAkBggrBgEFBQcBBwEB/wQV
MBMwEQQCAAIwCwMJACQBRgAAAAAJMA0GCSqGSIb3DQEBCwUAA4IBAQC3YpGtv6L5
H9IbGlD6uFdAfcffKJCl9oSCY9i5r4yIsgyQ0HIz74ynjuX+bGewaa9IEZDEfPzK
02i7zTKpolec6dhdl8kdabJUPjOLVh87ouQ6u5VkR4lPqNcYr71vgGc92UgF/5X2
peVWqEUmpUWOcB4kWfKodJFhNkxkwzmEngZ/lbdoPHFaOiSCI/7K18voVs/KR1qA
Ph9svXW+FPsqSI6O8thQDFPxFcy8aL0ESNL1IcpFxruu91m8i1rhtyLS/nNPm/Mq
fHSuM88gvus1jJyrhmAFs3CE2BQfYoHMbyLSo/MwlhAX+vDHfBce/GKFse2LRoYD
ht/W9+yNBUlh
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:34:57 2025 by rpki-client