Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91972B6/08243C8C132B11E9AE77AD7BC4F9AE02/2837843AA3E811EAB397F675C4F9AE02.roa
File: 2837843AA3E811EAB397F675C4F9AE02.roa (raw, json)
Hash identifier: y9Ue7Mqnzr2Y9oHbpxdCKjDeFirsk0PRqFHYUCwvvtk=
Subject key identifier: 80:F5:55:41:E2:42:3C:05:CD:BC:3B:D7:3E:3C:37:43:FD:04:D2:FA
Certificate issuer: /CN=A91972B6/serialNumber=95EAAFC24B5AF4B172B58BB01A701CFE196DA199
Certificate serial: 10EC
Authority key identifier: 95:EA:AF:C2:4B:5A:F4:B1:72:B5:8B:B0:1A:70:1C:FE:19:6D:A1:99
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/leqvwkta9LFytYuwGnAc_hltoZk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91972B6/08243C8C132B11E9AE77AD7BC4F9AE02/2837843AA3E811EAB397F675C4F9AE02.roa
Signing time: Thu 06 Mar 2025 17:35:28 +0000
ROA not before: Thu 06 Mar 2025 17:35:28 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:7fa:0:1::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4332 (0x10ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91972B6
Validity
Not Before: Mar 6 17:35:28 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67c9dce0-7915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:60:bd:db:a1:40:fd:7a:bc:c4:74:52:a3:91:
e2:83:07:c8:f7:ce:0d:84:6c:f2:34:ba:06:de:4a:
99:f2:cb:a8:98:f7:4d:5b:41:c3:e2:02:4c:6a:1a:
b7:77:20:e0:af:cf:58:a5:b7:11:46:1e:7b:7a:15:
06:32:c8:ab:97:18:17:c6:36:1b:94:de:3e:20:7c:
b3:4d:ba:10:4b:b6:a9:f4:d8:08:5f:fd:21:6a:72:
b6:9e:80:37:6b:6b:89:68:e5:96:7a:2e:ed:17:fd:
ec:89:84:4f:29:f5:4f:03:14:d3:79:98:e4:db:56:
10:53:bd:2e:cb:fa:33:26:24:0c:eb:df:2d:26:66:
e5:5e:13:e1:7a:87:4f:24:c4:8b:54:7d:b4:2e:bc:
d5:e2:d2:22:91:30:23:ea:55:44:c9:b5:fa:a4:27:
ed:1c:e0:1c:20:fa:6d:da:71:f1:19:1f:3b:14:8f:
28:ee:2e:90:9a:09:c8:43:00:b8:a0:27:db:c7:65:
12:e8:a1:aa:1a:29:89:e0:64:58:dd:9e:43:ea:ff:
af:dc:f6:f4:9e:de:70:38:ae:5b:7f:dc:3f:2c:5b:
a7:4b:84:2f:4f:97:75:47:78:5d:14:64:10:0f:b3:
b7:7c:2e:72:b4:0b:7f:65:44:78:15:e3:cf:82:c6:
78:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:F5:55:41:E2:42:3C:05:CD:BC:3B:D7:3E:3C:37:43:FD:04:D2:FA
X509v3 Authority Key Identifier:
keyid:95:EA:AF:C2:4B:5A:F4:B1:72:B5:8B:B0:1A:70:1C:FE:19:6D:A1:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91972B6/08243C8C132B11E9AE77AD7BC4F9AE02/leqvwkta9LFytYuwGnAc_hltoZk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/leqvwkta9LFytYuwGnAc_hltoZk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91972B6/08243C8C132B11E9AE77AD7BC4F9AE02/2837843AA3E811EAB397F675C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:7fa:0:1::/64
Signature Algorithm: sha256WithRSAEncryption
0a:5b:90:a3:f5:b1:1a:b2:ff:9a:34:62:87:5b:d9:de:b1:d1:
ed:73:4b:dc:ab:93:6e:98:d4:40:24:d3:1c:55:1b:69:30:f5:
49:15:0a:f8:c8:d1:c3:73:6a:2c:59:df:17:a5:79:ec:25:71:
06:44:9d:e1:e7:e9:7d:a5:a4:ba:f8:85:40:d5:fa:4b:df:9b:
c5:a4:07:d8:ac:81:e0:d6:c3:ea:78:21:1c:b5:a2:73:75:18:
7a:9f:1f:e4:bf:d8:62:26:b8:a0:4d:9e:fc:4e:55:0f:9b:6f:
e7:e1:a1:87:bf:e0:cc:26:f8:0b:f9:63:c2:9d:df:ca:ec:c3:
37:a5:fb:18:29:d9:8a:19:24:7b:eb:9b:51:bc:31:58:bc:e1:
bc:50:31:4a:0b:53:7d:f9:a8:c6:60:ef:f5:37:53:04:d3:13:
0e:39:f1:ca:e2:6d:32:d2:83:d6:07:5a:f8:02:d4:f9:af:32:
80:59:ab:76:7a:4e:44:01:0a:2c:0a:a7:ff:30:30:1e:e4:2c:
5d:86:9a:65:16:7b:ce:1a:d7:e4:c9:35:27:36:9d:74:b6:c1:
1b:1d:ec:06:38:ae:29:ab:59:93:b6:4f:cd:87:8a:b4:4b:cd:
fa:95:71:b4:ce:4d:d3:af:d0:2b:75:35:34:15:08:07:1a:96:
66:dd:58:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:22:57 2025 by rpki-client