Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9AC721604BC211EEA7AF2B6FC4F9AE02.roa
File: 9AC721604BC211EEA7AF2B6FC4F9AE02.roa (raw, json)
Hash identifier: d3gLGGrLZBKlh1oeBhh6ERMmVy7ZPGIKYX8M6gYUlBo=
Subject key identifier: B6:A3:66:23:37:FF:AF:CB:E1:FF:43:CF:79:A3:C7:95:69:AE:62:53
Certificate issuer: /CN=A916B837/serialNumber=F5522DE313844E96E3EBF38034ECA09BE2AA0AD5
Certificate serial: 02AE
Authority key identifier: F5:52:2D:E3:13:84:4E:96:E3:EB:F3:80:34:EC:A0:9B:E2:AA:0A:D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9AC721604BC211EEA7AF2B6FC4F9AE02.roa
Signing time: Mon 13 May 2024 04:07:57 +0000
ROA not before: Mon 13 May 2024 04:07:57 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 151338
IP address blocks: 2400:70e0:bab::/48 maxlen: 48
2400:70e0:b000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 686 (0x2ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B837/serialNumber=F5522DE313844E96E3EBF38034ECA09BE2AA0AD5
Validity
Not Before: May 13 04:07:57 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6641921d-8fc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f5:35:9a:5f:51:37:43:53:0e:3e:f6:f2:ad:
a7:ad:b9:69:97:ef:d1:0e:93:29:fd:6b:8f:34:25:
2b:6c:5c:9d:0d:9d:f4:fe:09:c0:46:0d:7d:c8:8d:
69:62:22:bb:5f:97:b3:08:d3:92:03:02:5e:12:00:
e6:d4:a0:99:f7:87:3f:f9:84:16:a7:2f:5c:88:49:
df:44:47:e8:55:c3:06:24:ba:a2:bc:36:29:c4:7c:
1f:47:4f:25:0f:d5:8a:8f:63:c9:d9:e4:10:55:ff:
43:4a:62:c7:0c:fb:2f:d0:76:a9:8a:b4:7a:07:df:
d7:ab:1e:f5:5a:d8:a2:17:d2:49:ea:b1:62:07:33:
4e:7f:8d:c3:f0:78:93:08:24:70:f1:0d:39:c7:6e:
a6:07:fa:5a:4a:6e:f9:eb:4b:f5:18:d3:dd:26:69:
8b:32:b8:b2:98:88:41:c2:b9:be:41:e0:23:22:0d:
16:37:b8:02:a1:f8:8a:ab:47:e7:4d:5e:fc:63:e1:
23:8c:ff:24:4d:74:6e:ef:eb:09:55:f2:fc:8f:07:
b4:d7:c5:3c:39:4d:4f:2e:00:83:89:ca:8e:d6:62:
c1:b8:0e:4f:85:fa:88:22:ef:2e:26:e0:b5:b2:96:
e6:30:7e:b5:39:88:e5:bc:6d:e4:44:67:ea:51:57:
5a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A3:66:23:37:FF:AF:CB:E1:FF:43:CF:79:A3:C7:95:69:AE:62:53
X509v3 Authority Key Identifier:
keyid:F5:52:2D:E3:13:84:4E:96:E3:EB:F3:80:34:EC:A0:9B:E2:AA:0A:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9AC721604BC211EEA7AF2B6FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:70e0:bab::/48
2400:70e0:b000::/48
Signature Algorithm: sha256WithRSAEncryption
87:08:f3:2e:97:bf:76:51:a7:6f:9b:a7:ef:e0:32:48:d7:55:
c5:3e:8f:15:c5:a7:dd:f6:cc:d2:53:19:05:48:ba:81:92:97:
ee:20:2f:f4:eb:2f:2d:13:6a:4d:0a:9a:bb:38:35:2f:4b:a8:
96:8b:6d:91:60:07:ec:81:58:bc:e0:44:b1:d3:cc:e9:fd:08:
75:b0:86:63:e3:04:e3:e3:e2:10:b8:8a:a0:e5:88:0c:fb:00:
7d:47:18:5b:5b:7e:b8:6f:11:da:b0:ec:33:8a:58:16:de:1f:
a7:4a:f1:c2:31:85:2c:48:27:f2:06:77:d9:4a:4f:11:91:26:
49:f1:c1:a3:29:7f:62:1c:49:21:e4:0f:35:ca:ac:34:ac:18:
17:9a:bb:31:69:46:fd:4a:37:8e:85:8a:a3:fa:f2:bd:73:0c:
03:8d:38:09:3a:0a:3e:0e:8c:02:a0:10:69:83:61:06:4d:b9:
0e:1f:02:be:68:32:d5:7f:e6:52:68:74:1c:57:38:b8:2a:e8:
0d:79:19:42:8b:38:f6:2d:08:16:66:89:13:f6:e3:48:3e:4c:
d2:e1:ee:eb:94:1b:82:98:e4:54:d7:f7:cf:d4:29:89:4c:b7:
34:c7:32:17:44:fc:6b:fe:0d:f4:9c:7a:e5:23:5a:60:ee:5d:
09:37:04:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:16:50 2025 by rpki-client