Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/443241A0321B11EA83044473C4F9AE02.roa
File: 443241A0321B11EA83044473C4F9AE02.roa (raw, json)
Hash identifier: n0sRanfJ+3KhBJUHh6jH9cwbJaaTZCbfJ+87aODuzgM=
Subject key identifier: 2F:0E:2D:A9:99:AC:12:7F:3E:0C:76:CA:C0:91:3E:BC:FF:70:24:51
Certificate issuer: /CN=A91771E3/serialNumber=1596C4BBE732DA85CB83E8A770873EA3413701A5
Certificate serial: 1300
Authority key identifier: 15:96:C4:BB:E7:32:DA:85:CB:83:E8:A7:70:87:3E:A3:41:37:01:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZbEu-cy2oXLg-incIc-o0E3AaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/443241A0321B11EA83044473C4F9AE02.roa
Signing time: Tue 10 Dec 2024 17:15:13 +0000
ROA not before: Tue 10 Dec 2024 17:15:13 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 24474
IP address blocks: 2001:dd8:24::/47 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4864 (0x1300)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91771E3/serialNumber=1596C4BBE732DA85CB83E8A770873EA3413701A5
Validity
Not Before: Dec 10 17:15:13 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67587721-7b78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b9:3c:fe:b5:0b:b8:d8:c8:3f:63:98:6b:77:
79:fa:63:8c:a3:6a:91:29:13:5e:a5:98:f8:7a:35:
45:95:c3:4a:b9:ad:c6:2c:05:df:9e:58:4f:a3:c0:
2f:ef:ad:ff:b4:76:d3:ad:4e:ce:66:e9:c7:00:4f:
89:8d:d5:0b:33:18:e5:03:15:64:e1:61:60:7a:04:
66:cb:0a:c3:e4:1b:8e:e6:43:b9:75:09:94:43:61:
61:b2:52:4f:97:30:69:44:4b:2f:20:6a:13:b0:67:
83:bc:e7:4f:68:44:c5:49:65:87:75:92:dd:b0:78:
03:0d:de:32:94:08:7d:3e:90:05:42:53:b9:fd:2e:
70:cf:aa:39:cd:c6:d3:b5:1b:4d:cb:61:b5:11:5c:
6c:12:bd:a0:ad:aa:77:3b:ad:28:ee:b8:c1:a2:db:
cc:51:f9:5c:5e:c8:75:c2:fd:c7:b3:60:51:ff:df:
ff:53:a1:57:f7:fa:90:98:c3:fa:61:fc:4b:88:46:
88:d8:72:f0:73:c1:81:6a:14:e8:90:57:b9:8b:af:
40:65:2d:35:e1:cf:5e:25:13:9e:b0:49:ae:0f:c0:
a0:3a:2c:32:b6:d8:3f:c1:c9:ac:5b:54:e5:b9:3a:
c1:89:74:30:47:78:22:04:13:1e:75:a6:14:64:65:
8d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:0E:2D:A9:99:AC:12:7F:3E:0C:76:CA:C0:91:3E:BC:FF:70:24:51
X509v3 Authority Key Identifier:
keyid:15:96:C4:BB:E7:32:DA:85:CB:83:E8:A7:70:87:3E:A3:41:37:01:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZbEu-cy2oXLg-incIc-o0E3AaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/443241A0321B11EA83044473C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:dd8:24::/47
Signature Algorithm: sha256WithRSAEncryption
4b:01:e2:2f:df:31:58:2a:50:2d:5b:27:4a:e5:4e:7a:06:78:
09:6a:8a:86:16:13:28:8e:69:0f:ca:6c:b1:5d:85:8b:28:83:
fa:72:de:7f:cd:78:2f:d3:40:36:77:e7:8a:fa:65:c8:4d:0e:
af:c1:c8:d9:19:30:5b:3c:91:9a:d7:f0:34:32:6e:3e:82:96:
6a:4d:64:70:93:be:0e:a1:3f:1d:6b:16:ed:4d:2f:26:61:b2:
77:f9:b9:6d:0b:84:51:eb:67:40:72:be:6e:0b:97:3c:b7:c9:
96:60:71:5f:e7:0f:1a:36:bf:d6:26:6a:64:a5:88:8a:1e:8b:
70:bb:42:15:e6:3f:cb:c1:85:86:1c:24:8c:68:22:da:a3:5c:
88:ff:be:d1:2e:84:36:62:89:00:7f:0d:62:ee:d2:10:1f:94:
92:76:ec:30:c4:da:60:9e:eb:00:82:6e:27:80:6f:00:74:83:
18:e6:5e:bb:a1:4f:a9:8d:92:a4:ff:4a:22:7c:86:c9:55:0b:
f3:fc:ba:0a:ab:b0:f3:a2:88:d7:44:a2:b3:94:97:02:5c:9e:
bd:6a:88:47:d6:f4:33:e7:78:0d:9d:7a:04:be:4e:84:08:ce:
5b:cd:1f:79:c0:bf:18:44:c5:33:e6:66:de:e5:37:c5:b2:50:
8e:02:a6:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:40:39 2025 by rpki-client