Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/E1AB1F92430F11EAA60DB885C4F9AE02.roa
File: E1AB1F92430F11EAA60DB885C4F9AE02.roa (raw, json)
Hash identifier: Y5ilqY3EX1YlNkwmQC54jat5s6RkhEqIyQvx25IhbvA=
Subject key identifier: 28:16:01:2C:F8:7B:63:48:6F:0B:15:14:7F:D7:7A:54:C4:5A:B6:93
Certificate issuer: /CN=A914247C/serialNumber=84FAB0D684FAAF16950AACA38E6D653ACCF258BC
Certificate serial: 0A7D
Authority key identifier: 84:FA:B0:D6:84:FA:AF:16:95:0A:AC:A3:8E:6D:65:3A:CC:F2:58:BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hPqw1oT6rxaVCqyjjm1lOszyWLw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/E1AB1F92430F11EAA60DB885C4F9AE02.roa
Signing time: Fri 30 Aug 2024 20:28:36 +0000
ROA not before: Fri 30 Aug 2024 20:28:36 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 24014
IP address blocks: 2001:df3:c600::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2685 (0xa7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914247C/serialNumber=84FAB0D684FAAF16950AACA38E6D653ACCF258BC
Validity
Not Before: Aug 30 20:28:36 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66d22b74-3a8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:27:78:f8:7a:13:e2:66:ec:08:43:a8:d3:a0:
87:b9:0f:ea:22:4b:83:87:41:23:50:e3:f4:b6:22:
d9:2f:bd:65:92:69:98:64:d1:4e:45:ae:0c:17:c8:
a9:3e:5d:fb:c3:40:97:12:68:d5:88:de:48:10:f2:
6b:f0:0d:10:ec:9a:22:d3:f2:4a:40:e9:27:39:74:
24:9d:7f:82:b6:8e:3a:d0:c5:30:7c:f7:37:aa:91:
8b:eb:24:19:0f:a4:a0:3e:c3:e0:9f:7d:5c:40:cb:
68:4e:0f:e2:ad:8c:f5:a1:13:d1:71:58:66:0f:4f:
e7:b5:03:b7:bb:40:d9:ee:82:4a:af:3a:96:d7:cb:
a8:3b:4e:72:ac:37:0a:78:1b:01:b3:a0:5e:59:ee:
ca:35:37:57:4f:9f:0b:09:16:5c:5e:65:36:4a:cd:
68:fc:17:f8:6a:c8:8d:b2:bf:9c:69:8f:91:47:9f:
e5:44:34:f2:7e:2e:55:e6:71:c8:63:0d:ca:72:b6:
69:86:c0:5d:bf:44:a4:ab:95:ba:79:5d:47:45:6d:
0f:f9:bf:27:06:9b:b2:fc:99:47:c2:ad:e7:36:90:
2e:d9:cb:72:b7:7b:11:4e:61:b8:0d:0a:45:9a:32:
fa:f7:64:92:8e:12:05:f1:36:97:0c:c6:ee:86:79:
ad:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:16:01:2C:F8:7B:63:48:6F:0B:15:14:7F:D7:7A:54:C4:5A:B6:93
X509v3 Authority Key Identifier:
keyid:84:FA:B0:D6:84:FA:AF:16:95:0A:AC:A3:8E:6D:65:3A:CC:F2:58:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hPqw1oT6rxaVCqyjjm1lOszyWLw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/E1AB1F92430F11EAA60DB885C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:c600::/48
Signature Algorithm: sha256WithRSAEncryption
82:36:9b:65:18:93:f3:31:22:3d:07:9c:dd:66:48:cf:02:ec:
b3:dc:ae:08:f2:9e:3b:8a:06:fe:f9:41:cf:b6:3b:5b:b0:8c:
b5:b7:f4:69:4c:e2:1c:17:22:f7:b3:33:2f:4e:b2:92:73:59:
bb:ad:bc:b5:78:08:a7:3e:93:65:63:8f:ee:a8:dd:5b:6c:44:
a7:cc:79:eb:c4:23:d9:18:76:09:6b:fe:44:49:be:f0:b7:1b:
fd:71:25:c2:64:92:ad:32:bc:2b:0e:27:62:ef:bd:42:98:23:
46:87:d8:f8:9d:88:3c:99:b8:3a:b4:cc:86:42:0b:a0:ab:2e:
ca:5e:17:64:06:00:6e:41:a3:1f:a3:7f:85:1d:f2:be:9b:06:
cd:3d:9d:f8:a9:e5:d1:6c:8a:19:b6:c9:dd:e1:29:6e:29:e9:
8b:f0:f7:39:a0:57:04:f6:04:14:05:f1:f2:91:e1:4d:3a:d9:
e7:e2:c4:b1:97:54:56:25:88:a5:4e:58:41:58:18:1d:61:4a:
5e:18:e8:ad:9d:f2:05:99:19:75:74:fb:5d:32:67:20:f1:a1:
c8:5f:a4:e8:07:51:8d:dd:ab:b7:c9:31:38:3a:d5:2b:a8:6b:
26:04:ac:2a:c0:5d:c7:21:02:61:99:20:76:90:0d:0f:26:65:
c2:9b:63:22
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgICCn0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDI0N0MxMTAvBgNVBAUTKDg0RkFCMEQ2ODRGQUFGMTY5NTBBQUNBMzhFNkQ2NTNB
Q0NGMjU4QkMwHhcNMjQwODMwMjAyODM2WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmQyMmI3NC0zYThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAySd4+HoT4mbsCEOo06CHuQ/qIkuDh0EjUOP0tiLZL71lkmmYZNFORa4MF8ip
Pl37w0CXEmjViN5IEPJr8A0Q7Joi0/JKQOknOXQknX+Cto460MUwfPc3qpGL6yQZ
D6SgPsPgn31cQMtoTg/irYz1oRPRcVhmD0/ntQO3u0DZ7oJKrzqW18uoO05yrDcK
eBsBs6BeWe7KNTdXT58LCRZcXmU2Ss1o/Bf4asiNsr+caY+RR5/lRDTyfi5V5nHI
Yw3KcrZphsBdv0Skq5W6eV1HRW0P+b8nBpuy/JlHwq3nNpAu2ctyt3sRTmG4DQpF
mjL692SSjhIF8TaXDMbuhnmtXwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFCgWASz4
e2NIbwsVFH/XelTEWraTMB8GA1UdIwQYMBaAFIT6sNaE+q8WlQqso45tZTrM8li8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjQ3Qy85MEY2MzJEQTQz
MEExMUVBODU4Q0RDNzZDNEY5QUUwMi9oUHF3MW9UNnJ4YVZDcXlqam0xbE9zenlX
THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hQcXcxb1Q2cnhhVkNxeWpqbTFsT3N6eVdMdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDI0N0MvOTBGNjMyREE0MzBBMTFFQTg1OENEQzc2QzRGOUFFMDIvRTFBQjFGOTI0
MzBGMTFFQUE2MERCODg1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwAgAQ3zxgAwDQYJKoZIhvcNAQELBQADggEBAII2m2UYk/Mx
Ij0HnN1mSM8C7LPcrgjynjuKBv75Qc+2O1uwjLW39GlM4hwXIvezMy9OspJzWbut
vLV4CKc+k2Vjj+6o3VtsRKfMeevEI9kYdglr/kRJvvC3G/1xJcJkkq0yvCsOJ2Lv
vUKYI0aH2PidiDyZuDq0zIZCC6CrLspeF2QGAG5Box+jf4Ud8r6bBs09nfip5dFs
ihm2yd3hKW4p6Yvw9zmgVwT2BBQF8fKR4U062efixLGXVFYliKVOWEFYGB1hSl4Y
6K2d8gWZGXV0+10yZyDxochfpOgHUY3dq7fJMTg61SuoayYErCrAXcchAmGZIHaQ
DQ8mZcKbYyI=
-----END CERTIFICATE-----
Generated at Sun Apr 27 13:15:21 2025 by rpki-client