Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/876FDB56D90211EFB7CAB32BC4F9AE02.roa
File: 876FDB56D90211EFB7CAB32BC4F9AE02.roa (raw, json)
Hash identifier: p/kEHMx8f7csUo5NBlHkAvj+aoMN4eX/IkrayOB/b3E=
Subject key identifier: FB:44:DE:5D:37:0E:40:B3:AC:AB:E8:49:49:82:0E:9B:8C:67:AB:B2
Certificate issuer: /CN=A916BDA4/serialNumber=04E6C9249EE348DCF764DF0B9A40D3E854066444
Certificate serial: 1662
Authority key identifier: 04:E6:C9:24:9E:E3:48:DC:F7:64:DF:0B:9A:40:D3:E8:54:06:64:44
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/876FDB56D90211EFB7CAB32BC4F9AE02.roa
Signing time: Wed 22 Jan 2025 20:52:12 +0000
ROA not before: Wed 22 Jan 2025 20:52:12 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 14789
IP address blocks: 2400:cb00:661::/48 maxlen: 48
2400:cb00:c950::/48 maxlen: 48
2400:cb00:c951::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5730 (0x1662)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916BDA4/serialNumber=04E6C9249EE348DCF764DF0B9A40D3E854066444
Validity
Not Before: Jan 22 20:52:12 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67915a7c-9d66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4e:8d:21:a6:98:93:0d:0e:08:4d:b5:c3:31:
bb:75:af:43:b1:d9:3b:16:9f:1f:4a:17:b9:ef:fe:
bb:59:48:1a:53:75:24:97:cc:76:ea:7c:3d:43:6c:
72:ee:eb:ed:7b:f9:12:07:74:31:49:33:1c:a8:74:
70:05:51:0e:45:62:f7:9f:bf:e7:1a:b5:32:41:99:
a8:6a:40:4d:39:68:e1:98:b4:25:b2:f5:5e:e4:19:
ae:55:ca:21:ff:d2:15:6c:dc:16:60:82:e2:b3:d4:
80:1b:ab:db:6a:53:8f:d5:37:02:d8:62:23:ea:41:
f0:d2:15:97:51:f5:fe:4d:97:32:77:0f:73:6c:19:
b4:ca:99:9a:54:1d:9c:0f:0e:66:e6:50:c4:17:ea:
19:c9:f8:da:22:92:5f:ac:d5:54:ef:e6:8e:d1:29:
da:9e:0e:64:ce:c2:0f:c3:46:a7:65:21:30:21:d5:
da:16:a7:49:47:22:a0:07:a4:6e:a1:d2:7e:c9:11:
2f:e6:1d:5a:f8:a0:fc:74:1f:e2:80:5f:b0:bd:7b:
c6:af:30:66:08:38:c3:a8:b5:37:7f:54:ea:87:3f:
46:98:e2:b3:d8:d3:be:9e:7d:e9:cb:e8:3a:76:6e:
cf:1d:5d:35:33:7e:8d:21:89:aa:8e:78:bc:fd:63:
6a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:44:DE:5D:37:0E:40:B3:AC:AB:E8:49:49:82:0E:9B:8C:67:AB:B2
X509v3 Authority Key Identifier:
keyid:04:E6:C9:24:9E:E3:48:DC:F7:64:DF:0B:9A:40:D3:E8:54:06:64:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/876FDB56D90211EFB7CAB32BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:cb00:661::/48
2400:cb00:c950::/47
Signature Algorithm: sha256WithRSAEncryption
2f:b1:1f:0a:54:bc:fc:1e:cd:93:27:68:71:ca:c6:f8:8e:f9:
a8:b3:84:cd:1a:68:50:d8:d8:41:c9:66:24:c0:a0:0b:df:ce:
52:90:22:5c:18:6d:49:c8:01:0c:07:7d:17:e7:90:4f:7f:d3:
58:af:77:17:23:db:3b:84:6f:bb:f3:a2:9a:fd:43:2a:c4:02:
6b:ac:ba:27:ce:c5:3c:fc:02:7e:9c:33:df:2b:32:69:9a:82:
8c:8c:e4:4a:2d:f4:20:4e:18:38:bc:03:45:6d:78:e8:04:20:
17:b0:18:43:4f:f0:8e:05:00:e3:1d:2d:88:cb:12:82:72:03:
0a:fc:44:68:45:49:7b:5d:92:b8:6c:e1:0c:e4:af:ce:c1:b3:
3f:75:35:ac:5e:d3:60:e3:5b:f4:d3:b0:e0:f5:04:7e:96:17:
95:b9:83:f4:c8:2e:92:04:59:2f:8f:b7:89:53:1c:a8:b4:a1:
9a:d2:07:c5:6a:d1:72:33:c4:fd:32:e9:2d:c5:7a:ba:aa:c1:
b2:d0:f8:9e:b0:ee:de:1a:34:e2:df:a6:94:ed:92:86:c5:a2:
f8:90:4e:ff:13:1e:8f:06:8d:17:a3:50:ec:75:04:84:bd:50:
ae:79:9c:2d:c9:fb:fb:5b:e9:93:69:22:88:62:54:34:8d:9c:
a6:d3:6a:73
-----BEGIN CERTIFICATE-----
MIIFfTCCBGWgAwIBAgICFmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkJEQTQxMTAvBgNVBAUTKDA0RTZDOTI0OUVFMzQ4RENGNzY0REYwQjlBNDBEM0U4
NTQwNjY0NDQwHhcNMjUwMTIyMjA1MjEyWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzkxNWE3Yy05ZDY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2E6NIaaYkw0OCE21wzG7da9Dsdk7Fp8fShe57/67WUgaU3Ukl8x26nw9Q2xy
7uvte/kSB3QxSTMcqHRwBVEORWL3n7/nGrUyQZmoakBNOWjhmLQlsvVe5BmuVcoh
/9IVbNwWYILis9SAG6vbalOP1TcC2GIj6kHw0hWXUfX+TZcydw9zbBm0ypmaVB2c
Dw5m5lDEF+oZyfjaIpJfrNVU7+aO0Snang5kzsIPw0anZSEwIdXaFqdJRyKgB6Ru
odJ+yREv5h1a+KD8dB/igF+wvXvGrzBmCDjDqLU3f1Tqhz9GmOKz2NO+nn3py+g6
dm7PHV01M36NIYmqjni8/WNqtQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFPtE3l03
DkCzrKvoSUmCDpuMZ6uyMB8GA1UdIwQYMBaAFATmySSe40jc92TfC5pA0+hUBmRE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkRBNC8xRUM3MDJCQ0Yx
QTcxMUU4OTBGMDY2NTBDNEY5QUUwMi9CT2JKSko3alNOejNaTjhMbWtEVDZGUUda
RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JPYkpKSjdqU056M1pOOExta0RUNkZRR1pFUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkJEQTQvMUVDNzAyQkNGMUE3MTFFODkwRjA2NjUwQzRGOUFFMDIvODc2RkRCNTZE
OTAyMTFFRkI3Q0FCMzJCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E
HDAaMBgEAgACMBIDBwAkAMsABmEDBwEkAMsAyVAwDQYJKoZIhvcNAQELBQADggEB
AC+xHwpUvPwezZMnaHHKxviO+aizhM0aaFDY2EHJZiTAoAvfzlKQIlwYbUnIAQwH
fRfnkE9/01ivdxcj2zuEb7vzopr9QyrEAmusuifOxTz8An6cM98rMmmagoyM5Eot
9CBOGDi8A0VteOgEIBewGENP8I4FAOMdLYjLEoJyAwr8RGhFSXtdkrhs4Qzkr87B
sz91Naxe02DjW/TTsOD1BH6WF5W5g/TILpIEWS+Pt4lTHKi0oZrSB8Vq0XIzxP0y
6S3FerqqwbLQ+J6w7t4aNOLfppTtkobFoviQTv8THo8GjRejUOx1BIS9UK55nC3J
+/tb6ZNpIohiVDSNnKbTanM=
-----END CERTIFICATE-----
Generated at Fri Apr 25 19:23:09 2025 by rpki-client