Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/6CD78FE8B69B11EFAECD660BC4F9AE02.roa
File: 6CD78FE8B69B11EFAECD660BC4F9AE02.roa (raw, json)
Hash identifier: bbD/CkiY8PoLpDlyreN0bTO0yQS0iLZL1KAfcB5xBxE=
Subject key identifier: 5F:A5:30:E8:0E:00:6B:F4:2E:01:06:1D:E8:69:91:DD:E4:5E:1E:CE
Certificate issuer: /CN=A911020B/serialNumber=A2D8E4E476C5569CC02DF3CDA5F38328996F53FE
Certificate serial: 0782
Authority key identifier: A2:D8:E4:E4:76:C5:56:9C:C0:2D:F3:CD:A5:F3:83:28:99:6F:53:FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otjk5HbFVpzALfPNpfODKJlvU_4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/6CD78FE8B69B11EFAECD660BC4F9AE02.roa
Signing time: Tue 10 Dec 2024 02:06:54 +0000
ROA not before: Tue 10 Dec 2024 02:06:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 132198
IP address blocks: 2405:2900::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1922 (0x782)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911020B/serialNumber=A2D8E4E476C5569CC02DF3CDA5F38328996F53FE
Validity
Not Before: Dec 10 02:06:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6757a23d-1c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0c:2b:2f:25:35:46:a4:1f:0d:ba:1b:5b:bc:
b8:9d:bd:3f:10:2c:82:31:67:64:02:b8:52:04:a6:
b5:7d:6b:1e:71:55:85:cb:b7:46:0d:4a:95:5f:82:
ac:28:b6:32:3c:2c:ee:74:d0:8c:5b:23:37:a1:7a:
ea:c6:08:21:43:52:ec:af:25:d7:83:e3:4f:8f:ee:
73:61:92:10:68:f8:b2:55:7c:23:3b:7f:c7:c1:d5:
99:4b:54:17:e5:6e:df:e3:81:b3:5d:a6:4a:21:14:
c5:e2:7f:f8:24:b9:f7:85:51:0f:e9:23:d7:84:92:
f2:8f:53:32:cf:28:8e:00:35:f4:81:77:3f:fe:c5:
37:61:b6:d2:01:f4:60:ad:0e:af:5e:36:80:54:ad:
83:d5:37:53:ba:0a:ba:e4:a5:20:91:5f:2a:87:e4:
6a:1c:d8:b7:85:5f:5d:a6:b9:3c:30:c6:8e:79:ad:
86:57:99:99:64:1a:3a:60:10:29:23:88:66:b7:69:
57:d5:08:a8:18:e5:e3:08:12:b1:ec:cd:41:67:0b:
76:06:a2:1c:ac:da:56:c4:bc:74:9a:a5:ae:33:be:
9d:18:fb:0c:d0:5c:74:d5:f5:9a:1e:8c:fa:4c:47:
89:dd:4c:b4:cf:22:55:58:c8:4b:33:9f:c6:97:ac:
85:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A5:30:E8:0E:00:6B:F4:2E:01:06:1D:E8:69:91:DD:E4:5E:1E:CE
X509v3 Authority Key Identifier:
keyid:A2:D8:E4:E4:76:C5:56:9C:C0:2D:F3:CD:A5:F3:83:28:99:6F:53:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otjk5HbFVpzALfPNpfODKJlvU_4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/6CD78FE8B69B11EFAECD660BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2405:2900::/36
Signature Algorithm: sha256WithRSAEncryption
85:77:b8:26:7b:75:dd:fe:2c:f4:bc:a4:b8:ca:d3:3f:fa:1f:
3a:bd:71:36:c3:89:bd:5c:b5:5d:32:46:87:bd:c1:69:76:c9:
87:9d:d7:b2:f7:a5:46:7f:55:03:46:b1:df:24:e2:d0:10:39:
ad:dc:40:a3:3e:75:1d:e5:4a:d0:46:c3:df:c1:5a:3c:de:5e:
4c:14:f2:14:23:a3:f3:90:fa:f2:a3:43:15:f0:24:a6:93:6b:
9f:ff:2d:f3:32:3b:96:b8:fc:d8:6f:c9:7f:78:e6:d2:81:87:
bc:3a:ed:5d:76:cc:35:c9:d0:e9:29:0b:65:8a:35:7f:71:97:
67:70:be:9a:6c:d2:bd:58:44:a6:f0:7f:fe:46:fa:5a:62:ab:
bf:a0:d3:95:cd:52:a5:ed:71:44:82:37:fc:d6:b3:b8:95:e1:
fd:65:ce:b2:96:e3:f7:0f:8e:7a:c1:d3:3c:01:09:f6:10:f5:
83:33:bd:fe:7f:f5:85:67:9d:92:be:25:66:b3:5d:55:00:bb:
b2:25:63:72:b6:e9:00:ee:d8:a7:d6:c3:bb:b2:5f:7a:0e:28:
17:c5:ac:99:c0:8d:6e:39:3b:31:16:12:a4:c0:bb:b3:74:7b:
48:79:46:7e:8f:c5:a2:4c:b2:ee:6d:c6:46:8e:1a:1b:99:6a:
ba:05:1c:79
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgICB4IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTAyMEIxMTAvBgNVBAUTKEEyRDhFNEU0NzZDNTU2OUNDMDJERjNDREE1RjM4MzI4
OTk2RjUzRkUwHhcNMjQxMjEwMDIwNjU0WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzU3YTIzZC0xYzI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyAwrLyU1RqQfDbobW7y4nb0/ECyCMWdkArhSBKa1fWsecVWFy7dGDUqVX4Ks
KLYyPCzudNCMWyM3oXrqxgghQ1LsryXXg+NPj+5zYZIQaPiyVXwjO3/HwdWZS1QX
5W7f44GzXaZKIRTF4n/4JLn3hVEP6SPXhJLyj1MyzyiOADX0gXc//sU3YbbSAfRg
rQ6vXjaAVK2D1TdTugq65KUgkV8qh+RqHNi3hV9dprk8MMaOea2GV5mZZBo6YBAp
I4hmt2lX1QioGOXjCBKx7M1BZwt2BqIcrNpWxLx0mqWuM76dGPsM0Fx01fWaHoz6
TEeJ3Uy0zyJVWMhLM5/Gl6yFOwIDAQABo4IClzCCApMwHQYDVR0OBBYEFF+lMOgO
AGv0LgEGHehpkd3kXh7OMB8GA1UdIwQYMBaAFKLY5OR2xVacwC3zzaXzgyiZb1P+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDIwQi8zMERFNDMwQUYx
OEUxMUVBQjRBQjFFNDdDNEY5QUUwMi9vdGprNUhiRlZwekFMZlBOcGZPREtKbHZV
XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL290ams1SGJGVnB6QUxmUE5wZk9ES0psdlVfNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTAyMEIvMzBERTQzMEFGMThFMTFFQUI0QUIxRTQ3QzRGOUFFMDIvNkNENzhGRThC
NjlCMTFFRkFFQ0Q2NjBCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8E
EjAQMA4EAgACMAgDBgQkBSkAADANBgkqhkiG9w0BAQsFAAOCAQEAhXe4Jnt13f4s
9LykuMrTP/ofOr1xNsOJvVy1XTJGh73BaXbJh53XsvelRn9VA0ax3yTi0BA5rdxA
oz51HeVK0EbD38FaPN5eTBTyFCOj85D68qNDFfAkppNrn/8t8zI7lrj82G/Jf3jm
0oGHvDrtXXbMNcnQ6SkLZYo1f3GXZ3C+mmzSvVhEpvB//kb6WmKrv6DTlc1Spe1x
RII3/NazuJXh/WXOspbj9w+OesHTPAEJ9hD1gzO9/n/1hWedkr4lZrNdVQC7siVj
crbpAO7Yp9bDu7Jfeg4oF8WsmcCNbjk7MRYSpMC7s3R7SHlGfo/Fokyy7m3GRo4a
G5lqugUceQ==
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:49:10 2025 by rpki-client