Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/2C06DFA22C4C11EFB6974530C4F9AE02.roa
File: 2C06DFA22C4C11EFB6974530C4F9AE02.roa (raw, json)
Hash identifier: 2bjXe+meVGHX4gHk9C1BRznvc7Y7yBnbS1+42AwDQvU=
Subject key identifier: 12:B2:32:D1:3F:DC:77:C3:6D:D9:79:42:8D:AD:A1:34:B9:99:C5:43
Certificate issuer: /CN=A916DAC0/serialNumber=54B966AD8B57316416529507F5BCA9C00E1181B9
Certificate serial: 39
Authority key identifier: 54:B9:66:AD:8B:57:31:64:16:52:95:07:F5:BC:A9:C0:0E:11:81:B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VLlmrYtXMWQWUpUH9bypwA4Rgbk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/2C06DFA22C4C11EFB6974530C4F9AE02.roa
Signing time: Wed 19 Jun 2024 13:12:52 +0000
ROA not before: Wed 19 Jun 2024 13:12:52 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 152464
IP address blocks: 2401:a7a0::/36 maxlen: 36
2401:a7a0:1000::/36 maxlen: 36
2401:a7a0:2000::/36 maxlen: 36
2401:a7a0:3000::/36 maxlen: 36
2401:a7a0:4000::/36 maxlen: 36
2401:a7a0:f000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57 (0x39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916DAC0/serialNumber=54B966AD8B57316416529507F5BCA9C00E1181B9
Validity
Not Before: Jun 19 13:12:52 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=6672d954-08c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ef:4d:f0:2c:88:89:17:97:7f:21:27:b9:f3:
e6:a8:2c:6e:2f:e6:56:50:8d:d8:4a:87:1a:fa:4b:
ed:58:44:85:9a:06:ff:91:db:0c:00:28:1b:37:19:
c9:99:18:1b:f9:c3:3b:34:b8:a4:1d:f3:8b:b8:c3:
39:1c:2d:60:5b:bc:1a:c7:eb:68:1b:18:da:b6:f6:
03:7f:3d:78:c6:49:77:3b:b2:9a:86:b8:fc:fc:fd:
18:ad:b1:14:af:58:d8:6d:76:d2:fd:a4:e0:d8:34:
8b:8e:e1:3f:87:a7:0f:3b:7c:42:55:f8:8b:28:68:
bf:e3:ca:26:62:61:aa:14:87:46:8a:15:43:c2:49:
f8:17:b0:7d:0e:17:f1:f7:02:62:e5:5b:82:bd:1d:
01:52:1e:29:fa:89:f7:da:24:79:d1:ed:81:1c:eb:
d7:ab:3f:5e:6e:38:92:c8:e1:e1:d2:d6:97:31:fa:
0e:48:3d:8e:6f:fb:14:70:56:57:09:5a:15:db:ce:
3a:ee:cf:4b:af:ad:1a:69:5f:46:16:12:31:f5:ea:
62:41:72:18:e1:5e:34:76:de:f4:2b:81:cf:47:ec:
7c:ed:8e:20:2b:ae:56:a0:76:33:49:83:b1:77:88:
ba:c4:c5:2f:ba:1b:ce:37:d7:f4:79:76:ed:2d:8e:
53:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:B2:32:D1:3F:DC:77:C3:6D:D9:79:42:8D:AD:A1:34:B9:99:C5:43
X509v3 Authority Key Identifier:
keyid:54:B9:66:AD:8B:57:31:64:16:52:95:07:F5:BC:A9:C0:0E:11:81:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VLlmrYtXMWQWUpUH9bypwA4Rgbk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/2C06DFA22C4C11EFB6974530C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:a7a0::-2401:a7a0:4fff:ffff:ffff:ffff:ffff:ffff
2401:a7a0:f000::/36
Signature Algorithm: sha256WithRSAEncryption
9d:e9:30:7b:79:8b:9b:86:a2:21:5b:2f:31:bc:a8:e5:87:77:
62:e5:63:dd:42:d9:a9:af:e1:97:e8:59:77:94:5e:cf:11:d5:
13:f2:6e:a7:56:9a:40:ec:2c:c5:4f:2a:e6:5d:a1:f8:5e:0b:
e8:9c:70:5a:92:64:4c:00:fa:b5:9e:70:be:60:05:a2:aa:ce:
de:7c:1c:31:6e:dd:d5:18:9e:c3:3e:86:92:5c:ed:9b:f0:09:
68:f3:6a:40:41:ab:c1:68:60:60:48:f3:9c:24:ea:b2:3f:4f:
76:b9:18:b0:ad:f0:6f:1b:8d:20:2f:ab:83:04:07:86:21:f0:
98:b6:ff:a1:87:43:85:6c:31:c4:61:2a:b3:7a:84:2c:1f:1c:
48:22:41:ba:1f:4b:b7:95:33:79:43:b2:a3:93:8a:9b:05:98:
20:59:76:88:54:7e:76:38:05:62:7a:3b:2a:57:a1:17:e5:43:
cf:fa:79:0a:31:a3:70:97:a8:ef:db:21:45:20:e0:3f:9b:06:
22:7b:b8:f2:93:99:63:91:aa:fb:02:1e:6f:ac:a8:23:42:b3:
78:6f:b7:1a:34:ca:9d:67:8e:24:72:81:3c:89:07:44:e3:da:
00:ef:f1:24:6b:94:18:fa:d5:f5:68:05:31:87:8f:1c:b0:61:
9f:bb:79:bd
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
REFDMDExMC8GA1UEBRMoNTRCOTY2QUQ4QjU3MzE2NDE2NTI5NTA3RjVCQ0E5QzAw
RTExODFCOTAeFw0yNDA2MTkxMzEyNTJaFw0yNTA1MjgwMDAwMDBaMBgxFjAUBgNV
BAMTDTY2NzJkOTU0LTA4YzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDH703wLIiJF5d/ISe58+aoLG4v5lZQjdhKhxr6S+1YRIWaBv+R2wwAKBs3GcmZ
GBv5wzs0uKQd84u4wzkcLWBbvBrH62gbGNq29gN/PXjGSXc7spqGuPz8/RitsRSv
WNhtdtL9pODYNIuO4T+Hpw87fEJV+IsoaL/jyiZiYaoUh0aKFUPCSfgXsH0OF/H3
AmLlW4K9HQFSHin6iffaJHnR7YEc69erP15uOJLI4eHS1pcx+g5IPY5v+xRwVlcJ
WhXbzjruz0uvrRppX0YWEjH16mJBchjhXjR23vQrgc9H7HztjiArrlagdjNJg7F3
iLrExS+6G8431/R5du0tjlM9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUErIy0T/c
d8Nt2XlCja2hNLmZxUMwHwYDVR0jBBgwFoAUVLlmrYtXMWQWUpUH9bypwA4Rgbkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZEQUMwL0U3NjNBQThBREU4
ODExRUU5M0Q5QTc0NEM0RjlBRTAyL1ZMbG1yWXRYTVdRV1VwVUg5Ynlwd0E0Umdi
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvVkxsbXJZdFhNV1FXVXBVSDlieXB3QTRSZ2JrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
REFDMC9FNzYzQUE4QURFODgxMUVFOTNEOUE3NDRDNEY5QUUwMi8yQzA2REZBMjJD
NEMxMUVGQjY5NzQ1MzBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAyBggrBgEFBQcBBwEB/wQj
MCEwHwQCAAIwGTAPAwUFJAGnoAMGBCQBp6BAAwYEJAGnoPAwDQYJKoZIhvcNAQEL
BQADggEBAJ3pMHt5i5uGoiFbLzG8qOWHd2LlY91C2amv4ZfoWXeUXs8R1RPybqdW
mkDsLMVPKuZdofheC+iccFqSZEwA+rWecL5gBaKqzt58HDFu3dUYnsM+hpJc7Zvw
CWjzakBBq8FoYGBI85wk6rI/T3a5GLCt8G8bjSAvq4MEB4Yh8Ji2/6GHQ4VsMcRh
KrN6hCwfHEgiQbofS7eVM3lDsqOTipsFmCBZdohUfnY4BWJ6OypXoRflQ8/6eQox
o3CXqO/bIUUg4D+bBiJ7uPKTmWORqvsCHm+sqCNCs3hvtxo0yp1njiRygTyJB0Tj
2gDv8SRrlBj61fVoBTGHjxywYZ+7eb0=
-----END CERTIFICATE-----
Generated at Sat Apr 26 01:51:41 2025 by rpki-client