Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/E0FF171A440411EF85685B0DC4F9AE02.roa
File: E0FF171A440411EF85685B0DC4F9AE02.roa (raw, json)
Hash identifier: KnSSA1Qq59sJxgKVj3jP8KkbnpUbCwhj2IXQBg8sTYM=
Subject key identifier: 01:77:37:63:D5:98:DE:B6:99:0B:6F:95:C1:EA:0A:D7:9C:65:42:32
Certificate issuer: /CN=A911678C/serialNumber=93879B00E4B7FBC01260707B76D5D120F45B535B
Certificate serial: EC
Authority key identifier: 93:87:9B:00:E4:B7:FB:C0:12:60:70:7B:76:D5:D1:20:F4:5B:53:5B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k4ebAOS3-8ASYHB7dtXRIPRbU1s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/E0FF171A440411EF85685B0DC4F9AE02.roa
Signing time: Sun 27 Oct 2024 04:15:23 +0000
ROA not before: Sun 27 Oct 2024 04:15:23 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 152111
IP address blocks: 2401:3620:2200::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 236 (0xec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911678C/serialNumber=93879B00E4B7FBC01260707B76D5D120F45B535B
Validity
Not Before: Oct 27 04:15:23 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=671dbe5b-e256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:99:b9:ea:11:d6:57:a5:17:f7:fb:4e:a2:a1:
c3:e8:fd:2d:dc:ac:39:72:8e:b5:e0:47:d8:0f:99:
96:cc:11:e3:b4:05:3f:3e:f8:8c:23:ac:54:ef:cb:
5f:47:4b:6f:cf:8a:42:1e:81:3f:3b:10:57:b9:7e:
ee:a9:d2:8e:f0:57:5f:53:9f:b3:4f:38:6d:9e:fc:
61:be:01:a6:c1:8e:b6:9d:b1:30:b0:0c:9c:e8:b1:
3b:c5:46:c8:2e:13:db:65:e7:f9:bf:4c:5c:89:95:
db:4f:8a:04:0f:d7:93:01:52:f2:95:f8:5b:d0:95:
39:53:09:ee:be:b9:86:46:f3:18:45:c5:40:2a:19:
42:0e:83:63:8d:14:b5:18:fe:8c:52:e5:9a:f1:a2:
5a:e8:27:96:12:bb:ea:20:2e:62:0f:0a:51:51:4c:
9f:3c:27:33:fb:c3:93:59:6b:c9:cb:1b:d0:ff:49:
c6:cf:ca:8f:cd:75:64:79:86:a9:2c:ac:c1:9d:47:
e5:82:d4:52:fd:e7:15:a3:fa:30:7b:9b:24:17:1e:
58:a2:27:6d:1e:70:65:73:10:07:ba:35:26:97:5b:
e2:6e:28:37:6b:5a:49:c2:0a:3f:06:7e:32:e0:b9:
35:76:8c:80:22:be:80:5f:1b:e0:30:ad:54:df:e3:
fd:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:77:37:63:D5:98:DE:B6:99:0B:6F:95:C1:EA:0A:D7:9C:65:42:32
X509v3 Authority Key Identifier:
keyid:93:87:9B:00:E4:B7:FB:C0:12:60:70:7B:76:D5:D1:20:F4:5B:53:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k4ebAOS3-8ASYHB7dtXRIPRbU1s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/E0FF171A440411EF85685B0DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:3620:2200::/44
Signature Algorithm: sha256WithRSAEncryption
69:04:80:18:87:4d:3e:bc:62:11:08:cd:32:6d:5b:2b:f6:9b:
f4:ca:5b:46:3b:8a:11:5c:8c:d7:d2:62:b7:1f:e2:e5:4e:2c:
b0:09:51:d1:5f:6b:30:f3:67:ca:68:8a:68:04:2a:75:21:2d:
8e:f8:33:ec:c1:53:a7:bd:4f:8f:88:f5:cd:0e:7d:a4:50:76:
64:9f:f3:9a:e4:6c:e1:75:89:72:15:e0:48:40:c2:68:bf:a8:
4b:dd:7c:2d:30:7f:7f:fd:18:f6:69:de:cd:53:a6:8b:7c:29:
ab:54:54:7d:a0:8d:13:ba:e4:20:61:32:43:25:8f:3f:f2:04:
0d:ef:02:8f:c9:6f:57:d8:fa:73:98:69:4e:41:7b:5a:62:01:
85:2c:7b:13:f7:c2:e4:44:fc:38:d7:40:0b:fa:5a:76:97:e8:
1d:e7:15:21:e4:2d:85:95:47:48:d0:2d:9c:71:ce:46:ef:c2:
02:b2:45:9a:ee:05:96:c4:38:36:85:8a:a5:86:bb:e2:e9:46:
3a:53:ab:8e:45:38:cf:a4:bc:a0:2b:64:d6:84:19:89:9a:51:
6e:ed:f3:0c:89:de:0a:4f:5c:ab:dc:2b:e4:08:f3:ed:76:1b:
34:63:e2:e9:39:ed:c7:02:bf:61:bf:f3:21:4a:42:33:0f:68:
87:26:6f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:03:13 2025 by rpki-client