Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134B4A/EB393D4E2F8911EFA3D04A6BC4F9AE02/25684F2A2F9211EFBF3A3C2EC4F9AE02.roa
File: 25684F2A2F9211EFBF3A3C2EC4F9AE02.roa (raw, json)
Hash identifier: UkjhSga8NsEcNjgfnBE8MNbwF3np7i4uHZIieF8R0tA=
Subject key identifier: 5D:92:8F:A7:15:A2:D5:A9:D1:06:D5:A4:8E:43:FF:96:DF:04:95:C8
Certificate issuer: /CN=A9134B4A/serialNumber=ACCBF26A19D9E14C31F5F37E1B966D86A504B46B
Certificate serial: 61
Authority key identifier: AC:CB:F2:6A:19:D9:E1:4C:31:F5:F3:7E:1B:96:6D:86:A5:04:B4:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134B4A/EB393D4E2F8911EFA3D04A6BC4F9AE02/25684F2A2F9211EFBF3A3C2EC4F9AE02.roa
Signing time: Thu 19 Dec 2024 07:57:55 +0000
ROA not before: Thu 19 Dec 2024 07:57:55 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 63150
IP address blocks: 2401:a660:200::/40 maxlen: 48
2401:a660:900::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97 (0x61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134B4A/serialNumber=ACCBF26A19D9E14C31F5F37E1B966D86A504B46B
Validity
Not Before: Dec 19 07:57:55 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=6763d202-035d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a6:f4:bc:f0:2b:d4:61:ad:c9:d5:49:88:4c:
33:8f:59:1f:ef:29:ef:be:52:03:e5:66:ad:25:a5:
7f:15:b3:59:70:47:ea:1e:cf:4d:3f:bf:17:ff:a1:
f3:b7:41:ce:7e:03:eb:47:e4:5c:75:6e:37:9f:32:
3a:fe:43:17:c4:61:f8:a4:1d:f4:49:ea:9b:77:bd:
68:16:41:44:2d:bf:cb:2d:26:3b:89:28:04:da:f8:
4f:d8:c7:82:80:82:0d:3d:aa:bf:4c:01:45:d3:5a:
15:74:d8:a5:98:c0:70:50:34:c4:d6:51:6a:17:38:
43:ab:89:c1:40:a2:e0:9c:fb:00:1f:f5:2e:c0:28:
2b:e3:39:15:91:19:22:3e:a2:01:d8:82:5e:ba:b5:
f7:5c:05:08:65:9a:dd:74:92:07:d5:3a:13:3b:bc:
02:38:37:15:fb:b7:11:e2:14:0b:fa:fd:27:ff:80:
1e:0c:f1:73:4b:75:b8:a8:ea:25:cd:75:a4:33:31:
19:7c:31:ee:e9:a5:a5:ba:ff:8c:10:44:32:26:d5:
3b:99:1a:b6:1a:1c:ca:0a:3e:27:5e:3f:d3:50:15:
1d:bc:63:c6:42:5d:1e:53:a7:5f:a5:a5:d6:f9:e4:
1a:6b:16:fb:49:a0:d5:f8:ec:6b:1c:a9:8d:00:61:
97:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:92:8F:A7:15:A2:D5:A9:D1:06:D5:A4:8E:43:FF:96:DF:04:95:C8
X509v3 Authority Key Identifier:
keyid:AC:CB:F2:6A:19:D9:E1:4C:31:F5:F3:7E:1B:96:6D:86:A5:04:B4:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134B4A/EB393D4E2F8911EFA3D04A6BC4F9AE02/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134B4A/EB393D4E2F8911EFA3D04A6BC4F9AE02/25684F2A2F9211EFBF3A3C2EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:a660:200::/40
2401:a660:900::/40
Signature Algorithm: sha256WithRSAEncryption
27:c9:a8:30:0d:50:f0:6b:38:ec:31:a0:ac:d6:d1:db:c9:69:
ae:47:e9:6b:e4:1a:6c:7a:eb:f8:94:a6:19:a5:89:18:11:7d:
fc:99:d1:8d:0f:57:a8:94:aa:29:ed:14:9a:94:f2:4e:62:e5:
18:65:eb:7e:ae:7a:04:38:c6:c8:ee:67:5b:6c:90:fe:8a:1f:
6e:e5:49:fb:35:48:1a:14:7f:15:35:31:da:c9:7c:2b:37:96:
85:35:3c:44:4d:e7:ed:9d:17:25:eb:b1:67:32:ef:cf:24:27:
7c:52:18:03:05:bb:d9:64:f6:fe:06:d3:1a:df:9b:5c:1d:ed:
b1:dc:2d:8b:4f:18:a1:41:41:0e:ef:59:85:84:12:e3:26:98:
e4:39:5d:b1:15:92:55:1a:0c:60:58:87:71:c7:0a:b8:62:22:
4b:dd:c7:b8:ec:b4:01:2c:bc:cd:7b:08:60:ac:1e:4b:ba:cd:
d1:d6:eb:b0:bd:e9:52:d6:82:d6:2b:ff:c0:20:4e:ac:c5:b7:
e8:68:20:31:b6:93:0c:89:3b:6a:27:9c:43:c6:33:6d:60:6a:
39:2a:03:14:06:d9:4a:ce:a1:51:cf:bb:28:05:83:1b:28:f9:
2b:58:87:c2:ab:67:fd:b3:27:3d:f2:54:4d:bc:a2:e0:05:0f:
86:43:f6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:23:50 2025 by rpki-client