Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/D292C0D27E1A11EFAE842E12C4F9AE02.roa
File: D292C0D27E1A11EFAE842E12C4F9AE02.roa (raw, json)
Hash identifier: /pzh/4JNMJFd04w0J0X6gL+Cxb0zDVOHsambsb667Rg=
Subject key identifier: BE:A4:2E:14:C3:72:C7:60:7C:4B:50:B2:AA:58:0C:6A:F7:E6:FA:32
Certificate issuer: /CN=A9160A05/serialNumber=25A0B8B0C10415FD406DB203236659C5F163AE43
Certificate serial: 03
Authority key identifier: 25:A0:B8:B0:C1:04:15:FD:40:6D:B2:03:23:66:59:C5:F1:63:AE:43
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/D292C0D27E1A11EFAE842E12C4F9AE02.roa
Signing time: Sun 29 Sep 2024 04:25:14 +0000
ROA not before: Sun 29 Sep 2024 04:25:14 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 150142
IP address blocks: 2001:df4:52c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160A05/serialNumber=25A0B8B0C10415FD406DB203236659C5F163AE43
Validity
Not Before: Sep 29 04:25:14 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=66f8d6aa-7f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:03:8b:f4:be:83:60:61:a7:2d:47:b6:6c:de:
9d:03:8e:f1:ae:be:dd:3f:8e:91:a4:b6:b2:ef:de:
e5:26:4e:c7:c5:6f:92:19:93:a8:e5:03:4c:d3:06:
07:27:94:c0:22:da:77:66:af:0d:79:5d:95:27:9b:
88:04:6a:8e:99:5e:30:d9:05:d7:7a:c9:87:e4:b5:
ce:d0:69:b4:29:91:cf:59:0b:d9:a3:ca:7c:85:62:
f0:38:25:00:c3:70:2f:28:52:87:a9:fd:4c:38:16:
37:ae:d6:b2:f0:8b:46:69:1e:28:07:7f:2a:8b:87:
f8:d7:ef:3c:a7:64:4d:df:f2:a0:f4:9b:88:a9:b9:
a6:8f:4b:9d:16:e6:6d:ee:75:60:7c:9a:98:88:f5:
89:9e:c5:87:e8:ca:2a:22:fa:bc:ce:2e:4a:4b:af:
4a:6f:a2:37:5f:22:aa:df:08:cc:6c:8a:b9:75:bb:
68:e8:ae:42:5d:a8:e4:26:e9:92:fc:3f:35:bb:0c:
3e:aa:dd:02:74:29:0a:2a:b2:33:4a:7f:af:ee:53:
2d:5c:54:4b:7f:b7:5f:74:ff:ef:b0:86:f3:8a:d3:
44:fc:c0:72:0b:54:78:6b:93:5b:d0:15:e1:d4:d2:
82:f7:c6:51:1f:8a:c8:79:a0:cc:70:49:ff:e2:81:
67:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A4:2E:14:C3:72:C7:60:7C:4B:50:B2:AA:58:0C:6A:F7:E6:FA:32
X509v3 Authority Key Identifier:
keyid:25:A0:B8:B0:C1:04:15:FD:40:6D:B2:03:23:66:59:C5:F1:63:AE:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/D292C0D27E1A11EFAE842E12C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:52c0::/48
Signature Algorithm: sha256WithRSAEncryption
ac:9f:2a:04:8d:9c:03:03:9a:fd:73:11:fd:60:45:2c:73:e3:
73:de:c1:67:cb:fe:e4:28:5f:6a:31:53:4a:a6:30:02:73:cb:
c2:4f:3c:0a:06:e5:61:dd:95:84:eb:46:8b:57:8a:b9:d7:97:
a6:21:30:6a:c1:0a:38:5e:c0:29:97:00:c1:e9:67:6d:3c:63:
c0:1f:c8:1b:7e:df:83:34:97:3a:66:1b:94:36:95:ba:d5:a8:
0d:f7:55:fb:6b:18:1f:2b:01:4c:40:71:d7:11:02:40:4b:ae:
53:5c:b0:83:95:6f:c2:2d:0f:4d:2a:a4:8c:0a:d4:82:1d:15:
95:b9:e3:aa:a7:ec:c2:9e:8a:da:c1:6e:bd:f3:17:39:6f:de:
df:07:89:94:f6:a4:c8:b8:14:b8:8f:75:f2:ca:21:39:fa:09:
1b:c0:e6:c1:5e:43:6b:57:92:93:96:d7:6d:4c:98:d7:06:92:
fc:8c:da:55:d8:df:06:0f:0c:69:3f:bf:3c:e2:4c:41:cf:ed:
a3:09:c4:29:d5:2b:0f:cf:ec:9f:d2:69:d7:4b:8d:41:73:71:
96:ed:e3:7a:ec:85:38:c8:81:02:ea:2c:cf:7d:f8:2d:d0:b1:
25:69:05:33:89:47:5a:cd:30:f4:56:72:7a:2b:11:c0:88:8a:
34:43:82:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:01:06 2025 by rpki-client