Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/48243250E78D11EF98760355C4F9AE02.roa
File: 48243250E78D11EF98760355C4F9AE02.roa (raw, json)
Hash identifier: H/VqLJG3It+odLKG96H1sbVkDmzdKmTeoPCyOU9UZ8o=
Subject key identifier: 88:59:2F:FF:12:23:0A:4A:66:EA:D4:1D:E8:C3:91:4B:A9:E6:1B:2A
Certificate issuer: /CN=A91AD34B/serialNumber=64CB6EA7D7D0E51F4D42B2D6847274ABB0736598
Certificate serial: 1A
Authority key identifier: 64:CB:6E:A7:D7:D0:E5:1F:4D:42:B2:D6:84:72:74:AB:B0:73:65:98
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/48243250E78D11EF98760355C4F9AE02.roa
Signing time: Mon 10 Feb 2025 08:59:07 +0000
ROA not before: Mon 10 Feb 2025 08:59:07 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 153568
IP address blocks: 2001:df5:6c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26 (0x1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AD34B
Validity
Not Before: Feb 10 08:59:07 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67a9bfda-63d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e6:e5:8c:13:c5:84:fd:3d:5d:23:97:dc:1f:
d6:0f:a2:ec:da:6a:65:8e:6c:9b:56:35:34:4c:cf:
6f:80:ea:b0:9c:83:c8:98:c7:cd:da:52:8c:89:72:
f5:8c:01:85:94:ce:70:ca:12:0e:58:48:23:7b:82:
3a:72:88:ac:50:c1:25:97:69:1e:e8:26:7c:af:72:
14:68:dd:f3:fa:95:7f:3b:ae:06:7b:51:63:b1:e2:
04:59:9a:a8:64:20:60:e9:8b:bc:d0:26:c3:06:27:
ed:51:f4:89:d1:db:34:d4:cf:78:5a:94:1a:e4:f7:
d3:ba:2d:0e:13:e1:73:cc:38:2d:19:60:e5:20:e4:
db:8b:f0:39:56:09:a3:1d:c3:7a:9b:91:4c:0d:7a:
04:b9:d3:6b:f3:00:f3:b8:58:05:c5:e7:25:70:03:
03:e2:b3:aa:8b:de:29:c5:88:37:f4:df:3b:69:3d:
c1:21:7e:71:c9:36:6d:f4:73:03:cf:0c:6f:f1:e4:
77:f5:62:7b:1e:d0:b0:3e:d1:56:b2:5b:95:14:bd:
7a:48:a1:b9:5e:a0:dc:e4:fd:ec:27:33:3b:b9:93:
30:5c:f7:db:29:31:78:1b:43:98:61:15:8d:f1:10:
94:0d:5c:4e:9e:51:bb:f2:53:ca:96:55:5e:b1:25:
57:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:59:2F:FF:12:23:0A:4A:66:EA:D4:1D:E8:C3:91:4B:A9:E6:1B:2A
X509v3 Authority Key Identifier:
keyid:64:CB:6E:A7:D7:D0:E5:1F:4D:42:B2:D6:84:72:74:AB:B0:73:65:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/48243250E78D11EF98760355C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df5:6c0::/48
Signature Algorithm: sha256WithRSAEncryption
81:9b:64:15:c9:d8:5d:c2:88:ce:e6:22:ee:08:4b:72:ad:65:
e4:41:59:71:41:2a:f0:9c:09:d8:aa:42:86:e6:9f:a5:5e:38:
98:f2:f4:ff:37:bc:bc:94:de:b3:5b:98:e3:3f:2e:08:70:ac:
4a:6b:b0:27:aa:14:67:06:9e:5f:7a:16:cc:4a:85:ba:b0:05:
54:f2:99:86:b6:6f:e9:1f:01:4a:cb:03:46:5b:6b:74:51:29:
5d:34:2c:19:bc:db:dc:f5:d4:99:92:76:a3:92:38:56:13:d2:
95:41:a0:1a:fe:f1:c9:82:cd:c9:a6:f4:90:fa:ce:45:5d:55:
a8:7a:e1:0e:18:7c:b8:d5:5d:0d:29:58:57:30:50:d5:f8:d2:
f4:56:2e:0c:2f:f2:37:f9:16:9b:18:9f:62:81:76:44:bc:d9:
3e:f2:48:4b:95:3b:cc:4e:a0:66:a3:ed:db:92:ac:dc:13:27:
89:0b:aa:f7:d3:36:18:bb:27:c5:37:1f:57:39:ed:95:57:08:
ed:e0:6e:7b:03:ed:61:90:46:51:22:77:d8:b8:d8:cf:53:f2:
79:7f:7d:b9:24:65:29:a5:7a:59:16:74:be:ab:b6:6d:a0:33:
1e:78:b0:44:38:33:d6:2c:c8:99:0b:34:66:5d:8e:18:22:46:
90:ef:24:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:54:00 2025 by rpki-client