Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B22E/8BE10084379511EF87CFD64BC4F9AE02/164D3C32379711EF9ECC714EC4F9AE02.roa
File: 164D3C32379711EF9ECC714EC4F9AE02.roa (raw, json)
Hash identifier: MwAJLA+u3nsJdB5hxYAQtsiYv2wQXxIJZHkWx14cyEw=
Subject key identifier: CC:DE:B9:1C:B6:5C:0D:C7:97:17:04:39:04:94:91:A8:3A:59:69:49
Certificate issuer: /CN=A911B22E/serialNumber=FACC3352BCE3802853DBF4B040525CFC1E152E60
Certificate serial: 02
Authority key identifier: FA:CC:33:52:BC:E3:80:28:53:DB:F4:B0:40:52:5C:FC:1E:15:2E:60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-swzUrzjgChT2_SwQFJc_B4VLmA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B22E/8BE10084379511EF87CFD64BC4F9AE02/164D3C32379711EF9ECC714EC4F9AE02.roa
Signing time: Mon 01 Jul 2024 10:45:52 +0000
ROA not before: Mon 01 Jul 2024 10:45:52 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 152932
IP address blocks: 2001:df3:f940::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B22E/serialNumber=FACC3352BCE3802853DBF4B040525CFC1E152E60
Validity
Not Before: Jul 1 10:45:52 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=668288e0-f79b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:88:8d:d7:8b:de:69:67:75:dd:d9:95:05:be:
f9:96:08:ef:cd:e4:00:76:b3:f7:41:44:9b:8a:8a:
61:b1:bf:4f:d7:fe:00:1f:8d:3c:ba:75:a3:cb:57:
05:9c:9d:cb:50:69:2b:2c:58:1b:99:ae:74:8a:e7:
a4:4a:15:1c:33:c6:aa:ab:8f:9b:2c:82:a5:65:42:
6e:5d:9e:0a:25:75:9d:fc:39:ba:f9:c9:bc:31:5b:
06:e9:34:b5:da:ab:10:f1:e3:a7:6c:bd:67:9d:c0:
7b:aa:d3:8b:8b:44:82:ca:a9:8e:1e:b6:af:2c:cf:
74:e8:98:0a:77:44:b0:f1:ab:27:de:99:c5:a6:06:
24:18:e9:54:5a:52:b9:eb:77:3b:80:41:f0:8e:7c:
71:73:a2:11:8f:21:90:ce:d3:a9:cd:28:ab:d2:cc:
77:62:c2:06:7d:0d:d0:04:7b:5b:03:9e:9c:eb:b1:
52:c8:2d:de:03:a9:db:c8:d8:cc:0c:50:bf:7b:1f:
7d:e7:86:68:85:00:fe:c3:d5:d1:42:4a:4f:24:21:
85:27:ca:fc:58:bf:68:27:76:a4:4c:0b:13:a5:18:
6f:e8:4b:6c:2b:20:a6:72:66:e3:0a:14:78:c8:f8:
f0:1c:d5:07:41:ab:75:74:f7:fc:18:a5:99:31:bd:
32:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:DE:B9:1C:B6:5C:0D:C7:97:17:04:39:04:94:91:A8:3A:59:69:49
X509v3 Authority Key Identifier:
keyid:FA:CC:33:52:BC:E3:80:28:53:DB:F4:B0:40:52:5C:FC:1E:15:2E:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B22E/8BE10084379511EF87CFD64BC4F9AE02/-swzUrzjgChT2_SwQFJc_B4VLmA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-swzUrzjgChT2_SwQFJc_B4VLmA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B22E/8BE10084379511EF87CFD64BC4F9AE02/164D3C32379711EF9ECC714EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:f940::/48
Signature Algorithm: sha256WithRSAEncryption
94:81:9d:21:7d:71:8c:6b:00:d5:e9:a7:08:8c:03:16:df:bd:
e2:c4:6e:52:1c:e1:6b:d8:39:3c:ad:32:da:41:99:27:7c:f5:
4d:08:47:87:2e:92:76:5b:fa:b5:1f:87:a5:79:85:e4:6a:46:
79:94:77:61:fa:6e:36:b8:d7:ba:01:3f:76:57:db:d8:eb:47:
69:32:02:1c:d3:db:1c:35:86:64:e2:13:ba:e7:d9:91:1a:98:
19:11:21:13:ab:74:a5:74:8a:c0:43:99:6c:c1:db:cb:4a:de:
89:4b:f4:05:2c:fd:8a:1b:a6:aa:b0:7e:5e:a8:e4:7b:01:1b:
4f:e8:f1:1e:9f:dc:45:6e:79:0c:43:c3:d4:4c:1d:c5:6c:e6:
a3:67:dc:3c:29:5b:77:b9:4b:72:35:64:06:c9:52:25:80:75:
ca:11:81:97:30:14:cf:00:f6:41:67:28:0d:27:e1:ba:fc:a7:
55:c4:7e:06:69:c8:64:27:c8:a6:ab:2b:f6:15:ec:3d:d7:51:
7a:e1:c9:14:c0:01:13:7b:9d:f2:33:9d:9a:8d:38:dc:e1:e2:
e8:f3:9f:57:0a:f6:13:4a:e8:69:1c:8c:ec:25:73:d8:ca:c0:
63:c5:9e:fe:2a:21:89:ef:98:92:36:c9:2a:67:a1:fb:4c:c9:
68:93:5a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:40:24 2025 by rpki-client