Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/FB82BBA0A24B11EFA8802F31C4F9AE02.roa
File: FB82BBA0A24B11EFA8802F31C4F9AE02.roa (raw, json)
Hash identifier: FNLMkJsV83Bt0X7SmIILDAhrnYAAJNH2tKMHd6lYZGE=
Subject key identifier: 5F:9F:F4:B9:8D:8B:AB:89:D4:C7:50:48:54:F4:75:23:21:DA:14:B9
Certificate issuer: /CN=A916C4A5/serialNumber=79E923D506957FD30DD26D62793B9B40F8FE8956
Certificate serial: 03
Authority key identifier: 79:E9:23:D5:06:95:7F:D3:0D:D2:6D:62:79:3B:9B:40:F8:FE:89:56
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eekj1QaVf9MN0m1ieTubQPj-iVY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/FB82BBA0A24B11EFA8802F31C4F9AE02.roa
Signing time: Thu 14 Nov 2024 05:47:50 +0000
ROA not before: Thu 14 Nov 2024 05:47:50 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 153355
IP address blocks: 2401:c9a0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C4A5/serialNumber=79E923D506957FD30DD26D62793B9B40F8FE8956
Validity
Not Before: Nov 14 05:47:50 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=67358f06-c492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e4:b9:02:d7:99:e8:fe:7a:2c:a8:74:d7:8c:
7e:4b:12:8d:6e:e4:4a:2a:ff:a3:b2:d0:ac:bd:50:
e3:b5:5b:a2:ad:a5:db:81:28:bf:23:35:5f:01:af:
14:de:0b:ce:6e:e9:d6:21:dd:7b:88:cd:3b:97:19:
ca:33:98:38:0b:1e:2c:80:0e:ed:52:4e:49:c4:08:
0e:75:94:13:80:69:b5:3b:0b:f6:6e:62:e9:72:1f:
a2:19:02:d2:5d:fc:c9:c7:36:4e:a0:16:a3:d1:47:
6a:90:fe:18:17:25:80:1b:68:25:8f:ca:c1:02:aa:
31:fb:4a:19:7b:9b:3a:ee:df:06:2c:f7:22:68:e5:
51:23:e9:a6:4f:35:1a:97:c6:28:64:7c:c5:c7:2c:
76:6f:80:88:bb:0d:c6:04:d2:c6:1d:50:56:65:cd:
58:df:bb:b7:51:4c:70:7e:fd:a2:75:d0:da:e3:84:
93:19:a6:53:77:9f:f2:fd:58:eb:0f:13:35:57:bd:
2f:31:3c:98:88:fd:d3:3d:be:a7:4c:51:74:8a:cc:
3c:77:a1:6c:78:30:55:af:59:b4:37:c3:00:cd:ab:
c3:32:59:fe:dc:b1:08:2d:27:34:f4:8d:9a:bb:2b:
cc:44:ce:d5:50:19:d8:c9:4d:73:66:00:f8:f5:00:
ee:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:9F:F4:B9:8D:8B:AB:89:D4:C7:50:48:54:F4:75:23:21:DA:14:B9
X509v3 Authority Key Identifier:
keyid:79:E9:23:D5:06:95:7F:D3:0D:D2:6D:62:79:3B:9B:40:F8:FE:89:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eekj1QaVf9MN0m1ieTubQPj-iVY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/FB82BBA0A24B11EFA8802F31C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:c9a0::/32
Signature Algorithm: sha256WithRSAEncryption
6b:35:70:96:29:83:a6:c0:a8:e3:3c:38:59:0f:c2:a4:92:74:
4b:d7:d5:ea:31:59:93:43:dd:29:5d:8f:66:5e:e1:8b:6e:8a:
26:3a:19:68:b2:55:e9:93:58:2e:61:22:72:25:a2:50:90:52:
34:8b:ae:d4:e9:71:ea:d6:1b:54:8c:9d:59:8e:17:2a:c4:c2:
04:56:2f:8d:5d:20:d1:2d:51:18:a7:b3:0e:dc:80:34:83:ce:
ec:85:83:11:03:a9:a8:f2:72:b1:57:31:33:fb:cc:0c:c6:3e:
7b:3e:43:e9:1e:67:65:29:7f:b7:9e:82:5d:84:02:00:f3:6c:
be:f7:de:cc:db:51:77:86:73:c3:fd:d3:b1:35:74:6e:12:f1:
26:62:9e:a7:36:2a:ab:68:55:94:04:f5:df:f4:b2:ef:69:43:
18:1d:9b:40:b5:a4:ec:cb:d4:fd:ba:80:4a:5d:0d:0c:da:27:
03:6b:31:58:0f:1f:b1:29:05:f2:3a:21:d9:67:b8:5a:8c:73:
6b:e6:e7:f4:12:4f:fb:9b:67:bc:ea:27:27:0a:14:49:5d:a8:
22:a7:b7:f4:36:21:c6:c4:71:ac:3b:30:4b:f3:2f:8f:cf:3e:
27:05:36:d5:03:a5:cc:b8:7f:a1:57:ab:fe:7f:08:3a:9e:b4:
cd:39:f6:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:29:17 2025 by rpki-client