Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/B34C91C4B14311EF8479AA21C4F9AE02.roa
File: B34C91C4B14311EF8479AA21C4F9AE02.roa (raw, json)
Hash identifier: zX8SsdngBGocfr0PjyPYjkXeGxhOELPXVhgI6hsEekQ=
Subject key identifier: 83:1F:47:96:A9:81:2F:10:DD:EF:BA:8A:27:C3:4C:0D:F0:F0:A8:36
Certificate issuer: /CN=A91522E0/serialNumber=4F32ECFF8CD46C3EC03FA75E1008F4AA9A0CF893
Certificate serial: 0AB6
Authority key identifier: 4F:32:EC:FF:8C:D4:6C:3E:C0:3F:A7:5E:10:08:F4:AA:9A:0C:F8:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzLs_4zUbD7AP6deEAj0qpoM-JM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/B34C91C4B14311EF8479AA21C4F9AE02.roa
Signing time: Tue 03 Dec 2024 06:56:20 +0000
ROA not before: Tue 03 Dec 2024 06:56:20 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 131243
IP address blocks: 2001:df3:500::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2742 (0xab6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91522E0/serialNumber=4F32ECFF8CD46C3EC03FA75E1008F4AA9A0CF893
Validity
Not Before: Dec 3 06:56:20 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=674eab94-72e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c7:e1:97:26:aa:a2:4c:62:c1:ba:00:e3:9f:
07:40:b0:6c:84:04:2d:f6:6a:65:1c:c9:b0:65:11:
c7:6e:32:30:a3:0f:5f:bb:a9:8e:b8:3a:92:27:d4:
1b:7a:e4:58:19:7b:95:c8:15:28:bc:4a:80:49:d7:
6c:31:33:7d:09:47:e0:27:38:12:19:66:64:58:94:
b7:a3:f0:0b:f7:d5:4e:d6:34:53:e3:4e:ab:59:74:
3d:d0:f1:2e:16:c9:94:f8:31:6e:3c:8d:ef:6e:43:
54:69:5a:93:4d:6c:90:51:9c:4e:04:11:4f:a7:6c:
f6:09:d1:25:7e:fd:f9:c3:48:ee:b3:ba:49:22:36:
53:07:29:08:3e:1f:7a:3f:be:bc:b8:3a:fe:5a:40:
92:c0:90:5c:02:f4:28:c9:7a:dc:a9:df:02:b1:3f:
10:15:74:52:45:d2:74:cf:d4:5d:b6:13:31:c7:e2:
76:a7:6d:64:f0:82:54:37:ca:77:f9:0f:4f:44:13:
c7:06:ff:03:a0:36:91:6d:2a:25:51:4e:e5:34:3e:
0b:b7:50:db:c1:a2:8c:10:df:1e:79:4d:12:0b:a2:
c1:76:5c:8b:28:13:25:ac:65:80:c4:ba:21:3a:cf:
5a:4c:a8:87:a8:3b:a5:7c:2f:db:09:97:78:e3:8c:
1c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:1F:47:96:A9:81:2F:10:DD:EF:BA:8A:27:C3:4C:0D:F0:F0:A8:36
X509v3 Authority Key Identifier:
keyid:4F:32:EC:FF:8C:D4:6C:3E:C0:3F:A7:5E:10:08:F4:AA:9A:0C:F8:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzLs_4zUbD7AP6deEAj0qpoM-JM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/B34C91C4B14311EF8479AA21C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:500::/48
Signature Algorithm: sha256WithRSAEncryption
b7:fe:8c:35:84:9b:9b:25:32:88:8a:d8:14:59:60:e9:ba:04:
54:7b:95:22:49:18:1f:a8:65:0e:44:ba:86:25:7c:e5:14:0b:
88:75:c5:e5:40:93:2c:12:54:a8:34:8e:e0:25:e8:00:cc:5b:
af:6a:fd:0f:78:c7:a9:96:b1:75:14:e9:29:25:fe:9c:e7:2c:
9c:fb:47:7b:00:74:0b:92:b9:39:15:df:ba:f8:dc:17:99:70:
fd:36:0d:25:5c:91:9d:67:0a:70:59:12:98:fd:82:21:52:ad:
d4:6b:5d:8e:8c:0c:41:2a:64:00:ec:68:fc:07:fd:c3:e6:92:
31:ff:55:4d:9f:36:bc:f7:1c:d0:a7:f3:51:81:94:fd:87:6c:
ac:fd:2e:b1:14:7f:b8:c6:16:00:f6:57:a5:7a:fc:db:3e:1d:
42:c4:8d:cb:04:6a:3d:08:ee:0a:11:00:97:68:0d:fb:92:da:
76:68:eb:06:ce:0b:2a:d7:6c:73:70:d3:24:a5:91:73:ac:3b:
d5:e9:7e:ba:a9:8f:15:4a:8e:69:4d:c0:ca:a4:4d:5d:fc:67:
b2:3d:4c:60:bd:65:43:a4:7b:4e:e1:5e:1e:4c:8f:9e:1b:de:
f5:2e:11:d8:2f:20:ae:d6:d5:72:76:d8:66:b8:44:fe:a7:b4:
50:81:49:18
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgICCrYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTIyRTAxMTAvBgNVBAUTKDRGMzJFQ0ZGOENENDZDM0VDMDNGQTc1RTEwMDhGNEFB
OUEwQ0Y4OTMwHhcNMjQxMjAzMDY1NjIwWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzRlYWI5NC03MmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvcfhlyaqokxiwboA458HQLBshAQt9mplHMmwZRHHbjIwow9fu6mOuDqSJ9Qb
euRYGXuVyBUovEqASddsMTN9CUfgJzgSGWZkWJS3o/AL99VO1jRT406rWXQ90PEu
FsmU+DFuPI3vbkNUaVqTTWyQUZxOBBFPp2z2CdElfv35w0jus7pJIjZTBykIPh96
P768uDr+WkCSwJBcAvQoyXrcqd8CsT8QFXRSRdJ0z9RdthMxx+J2p21k8IJUN8p3
+Q9PRBPHBv8DoDaRbSolUU7lND4Lt1DbwaKMEN8eeU0SC6LBdlyLKBMlrGWAxLoh
Os9aTKiHqDulfC/bCZd444wcaQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFIMfR5ap
gS8Q3e+6iifDTA3w8Kg2MB8GA1UdIwQYMBaAFE8y7P+M1Gw+wD+nXhAI9KqaDPiT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjJFMC9DOUI5MEZGODQ2
ODgxMUVBQUNGMThBMjhDNEY5QUUwMi9UekxzXzR6VWJEN0FQNmRlRUFqMHFwb00t
Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1R6THNfNHpVYkQ3QVA2ZGVFQWowcXBvTS1KTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTIyRTAvQzlCOTBGRjg0Njg4MTFFQUFDRjE4QTI4QzRGOUFFMDIvQjM0QzkxQzRC
MTQzMTFFRjg0NzlBQTIxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwAgAQ3zBQAwDQYJKoZIhvcNAQELBQADggEBALf+jDWEm5sl
MoiK2BRZYOm6BFR7lSJJGB+oZQ5EuoYlfOUUC4h1xeVAkywSVKg0juAl6ADMW69q
/Q94x6mWsXUU6Skl/pznLJz7R3sAdAuSuTkV37r43BeZcP02DSVckZ1nCnBZEpj9
giFSrdRrXY6MDEEqZADsaPwH/cPmkjH/VU2fNrz3HNCn81GBlP2HbKz9LrEUf7jG
FgD2V6V6/Ns+HULEjcsEaj0I7goRAJdoDfuS2nZo6wbOCyrXbHNw0ySlkXOsO9Xp
frqpjxVKjmlNwMqkTV38Z7I9TGC9ZUOke07hXh5Mj54b3vUuEdgvIK7W1XJ22Ga4
RP6ntFCBSRg=
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:35:29 2025 by rpki-client