Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/885DAE383B1C11EEA6DF117AC4F9AE02.roa
File: 885DAE383B1C11EEA6DF117AC4F9AE02.roa (raw, json)
Hash identifier: 0cvbxP20kbDfmHfHGVhiDmzqDHp8ThkRVUA3Ma5jp/o=
Subject key identifier: 12:C8:25:F6:89:97:21:07:03:6F:0C:F7:BF:CA:A7:AC:5F:96:FA:69
Certificate issuer: /CN=A913345B/serialNumber=846AC847DAC6B04209C72ACF464EBEEA16522052
Certificate serial: 0995
Authority key identifier: 84:6A:C8:47:DA:C6:B0:42:09:C7:2A:CF:46:4E:BE:EA:16:52:20:52
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGrIR9rGsEIJxyrPRk6-6hZSIFI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/885DAE383B1C11EEA6DF117AC4F9AE02.roa
Signing time: Tue 20 Feb 2024 20:49:17 +0000
ROA not before: Tue 20 Feb 2024 20:49:17 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 56111
IP address blocks: 2001:df3:f80::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2453 (0x995)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913345B/serialNumber=846AC847DAC6B04209C72ACF464EBEEA16522052
Validity
Not Before: Feb 20 20:49:17 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=65d5104c-e25c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2a:e3:2a:28:26:e9:c0:2f:4c:29:01:40:54:
ad:bf:ab:c4:27:2e:ff:77:3c:d9:25:2c:72:3c:25:
e0:2a:56:f9:b1:3d:36:52:61:de:5e:72:a2:e6:95:
99:ad:d0:bd:d5:c7:36:dc:5d:03:97:81:0d:25:be:
e6:de:17:4a:71:e5:32:7a:48:9e:ce:b1:5c:d8:0b:
fb:2e:98:1e:3f:3b:e6:07:60:84:6a:8d:61:1d:01:
83:c4:89:22:3a:e8:5f:d4:10:29:2f:0e:a1:c4:7b:
14:d6:b7:0c:f8:da:bb:df:bc:01:04:a5:1c:e6:67:
1c:48:76:ec:60:e7:58:c9:25:b0:ef:6e:b2:9b:66:
b6:19:6d:a6:d8:7c:21:91:b9:44:b2:83:ed:6f:65:
32:5b:09:e6:3a:6b:94:f3:81:95:9c:23:f8:ba:b2:
d7:f0:54:7d:23:69:38:92:72:91:9f:31:e6:40:f7:
3a:a5:85:9a:e6:29:02:52:9d:1d:39:e5:71:50:ce:
49:5d:2c:a6:c8:66:a0:d4:ed:34:5e:37:04:82:e2:
cb:28:0b:33:a4:7c:05:f0:81:7d:9d:f7:98:2b:0f:
3f:ba:e8:a9:73:c0:b6:f4:70:3e:ac:e9:aa:08:48:
91:b6:e3:75:5e:12:02:a8:a3:30:31:32:a9:c7:06:
c4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C8:25:F6:89:97:21:07:03:6F:0C:F7:BF:CA:A7:AC:5F:96:FA:69
X509v3 Authority Key Identifier:
keyid:84:6A:C8:47:DA:C6:B0:42:09:C7:2A:CF:46:4E:BE:EA:16:52:20:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGrIR9rGsEIJxyrPRk6-6hZSIFI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/885DAE383B1C11EEA6DF117AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:f80::/48
Signature Algorithm: sha256WithRSAEncryption
90:21:0f:e8:55:9c:2c:c8:eb:74:78:0b:4c:58:8a:f4:a6:c7:
31:34:37:b5:06:04:78:56:45:43:1c:8c:2e:b6:f1:2e:a5:8d:
a0:8e:5e:70:dc:1b:64:aa:17:89:fb:98:39:ae:c8:a1:e8:9f:
0d:c9:e0:51:3f:34:1b:1b:33:5b:cc:70:73:07:ab:20:c4:79:
3b:f3:e2:0d:e2:9a:6e:11:65:00:2d:97:43:53:32:53:c4:20:
ad:e4:fc:26:63:04:3e:22:e1:d2:af:22:b6:32:24:f7:a7:7a:
06:95:cd:fb:3f:a3:95:7c:0a:40:1f:8f:99:3e:94:92:b0:85:
ad:2c:a0:c8:50:d0:50:7a:c2:a8:3a:7a:e8:4e:bd:94:4a:30:
0d:b5:e1:0d:e5:fa:66:fe:5a:37:29:37:51:1c:10:dd:96:f6:
bb:25:ec:d6:e9:df:94:27:3f:68:9e:41:b1:87:54:a4:78:e1:
e2:fc:95:3f:bf:02:46:19:8d:8c:4d:72:a7:0b:34:78:a1:1a:
d8:2e:06:82:46:82:59:4e:b2:49:72:b7:34:bd:37:9d:64:d8:
9d:38:15:09:49:be:55:d2:63:00:f7:7c:eb:df:fc:03:22:25:
c8:d0:79:43:d9:87:fa:7d:eb:b3:46:56:75:0c:17:b7:25:77:
c1:de:35:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:36:05 2025 by rpki-client