Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/74C6D504AAED11EC87200C63C4F9AE02.roa
File: 74C6D504AAED11EC87200C63C4F9AE02.roa (raw, json)
Hash identifier: w1vPKWtxQcUbPpGWYBU4b2LyBVNcD/PkLrGoDfxuiXk=
Subject key identifier: 4A:51:F2:48:BD:64:4A:58:E6:EB:2C:8E:34:94:59:20:42:B1:D5:C7
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 0CA4
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/74C6D504AAED11EC87200C63C4F9AE02.roa
Signing time: Sun 26 May 2024 21:32:46 +0000
ROA not before: Sun 26 May 2024 21:32:46 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 210041
IP address blocks: 2406:840:9000::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3236 (0xca4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: May 26 21:32:46 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6653aa7e-de9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:74:43:4c:7d:4c:2b:40:ad:b4:61:6c:46:95:
2f:be:7a:83:25:ea:8e:d3:ba:2d:0d:fc:7f:7a:bb:
8d:22:7f:32:e6:f2:36:64:5c:7d:7b:3d:71:8b:01:
3c:7f:03:c7:8f:56:9a:8e:9f:73:cb:3c:e2:51:5a:
75:f6:0b:fc:17:11:7e:77:1b:83:73:2a:9a:84:7c:
67:e0:c1:e0:17:ed:e4:a0:d8:91:e3:91:98:5b:15:
dc:78:5e:44:cc:27:0e:49:33:74:4d:51:cf:3a:0d:
d0:20:3c:9b:dd:96:e5:e2:72:fd:24:47:e2:2e:16:
fd:4c:fc:0f:29:45:76:6f:b4:8a:ce:fa:1a:d6:44:
d4:2a:90:eb:90:3c:f9:cd:a0:ba:0a:75:fe:15:cb:
2d:3e:7f:33:45:ba:d2:80:9d:ef:4d:71:4d:f3:b7:
05:e1:c8:0e:61:62:6f:88:0e:d7:19:ab:df:3a:a6:
65:07:82:f1:20:a6:2f:ba:3d:ba:2b:ed:8c:c8:58:
dc:f0:50:d1:41:f6:88:44:7d:6f:ce:3f:2a:45:42:
43:20:d3:b7:12:96:bc:15:a1:92:01:18:b3:63:c1:
e5:c0:5b:7b:bb:28:3d:02:52:b2:4c:0c:d8:06:c9:
90:c3:2f:10:86:5a:f4:fd:ed:52:54:0e:a7:14:23:
34:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:51:F2:48:BD:64:4A:58:E6:EB:2C:8E:34:94:59:20:42:B1:D5:C7
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/74C6D504AAED11EC87200C63C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:840:9000::/44
Signature Algorithm: sha256WithRSAEncryption
7c:87:d5:cf:ea:c7:d4:bf:21:b7:8e:f4:84:7b:92:e7:ed:a5:
14:c1:0b:63:26:3f:bf:8d:e6:fe:19:8a:a4:f4:18:3b:10:d9:
02:06:a5:6a:27:57:58:29:a2:85:89:3e:b9:42:13:c7:4b:df:
82:36:13:66:0f:48:23:43:87:eb:43:66:dd:0e:41:09:3a:6b:
8c:ff:e8:bb:0c:e8:4c:31:85:fb:62:d4:3b:92:77:55:64:5a:
74:9f:40:0d:dd:e3:c7:ff:fb:3b:08:67:f1:fb:b6:7a:2b:be:
44:16:af:ca:c9:b0:ee:a2:2b:49:6e:db:e6:68:65:8e:6e:ab:
9a:bb:cd:33:54:1a:9b:1f:3f:c5:32:bf:72:ad:63:3b:53:e0:
b0:ac:16:37:c5:7d:97:70:84:25:06:5f:4a:22:ed:8e:f5:d4:
b8:5d:92:ff:b0:d5:72:a7:3c:d7:d6:15:40:f0:46:67:e6:e0:
bb:56:55:19:a9:4b:21:29:7d:23:72:2a:77:0b:a6:7c:a7:2b:
6c:0e:c7:fa:7b:80:8b:cd:0d:23:12:24:00:74:30:f1:d0:04:
68:2b:07:14:2b:10:84:c7:6a:73:e4:7e:fc:83:13:e5:63:e9:
27:08:ba:c2:de:66:a8:24:7b:e2:b3:6c:13:1c:28:83:eb:24:
96:d1:ab:2f
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgICDKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE
RTExQ0ExQTUwHhcNMjQwNTI2MjEzMjQ2WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjUzYWE3ZS1kZTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvXRDTH1MK0CttGFsRpUvvnqDJeqO07otDfx/eruNIn8y5vI2ZFx9ez1xiwE8
fwPHj1aajp9zyzziUVp19gv8FxF+dxuDcyqahHxn4MHgF+3koNiR45GYWxXceF5E
zCcOSTN0TVHPOg3QIDyb3Zbl4nL9JEfiLhb9TPwPKUV2b7SKzvoa1kTUKpDrkDz5
zaC6CnX+FcstPn8zRbrSgJ3vTXFN87cF4cgOYWJviA7XGavfOqZlB4LxIKYvuj26
K+2MyFjc8FDRQfaIRH1vzj8qRUJDINO3Epa8FaGSARizY8HlwFt7uyg9AlKyTAzY
BsmQwy8Qhlr0/e1SVA6nFCM0SwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFEpR8ki9
ZEpY5ussjjSUWSBCsdXHMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2
MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv
YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvNzRDNkQ1MDRB
QUVEMTFFQzg3MjAwQzYzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwQkBghAkAAwDQYJKoZIhvcNAQELBQADggEBAHyH1c/qx9S/
IbeO9IR7kuftpRTBC2MmP7+N5v4ZiqT0GDsQ2QIGpWonV1gpooWJPrlCE8dL34I2
E2YPSCNDh+tDZt0OQQk6a4z/6LsM6Ewxhfti1DuSd1VkWnSfQA3d48f/+zsIZ/H7
tnorvkQWr8rJsO6iK0lu2+ZoZY5uq5q7zTNUGpsfP8Uyv3KtYztT4LCsFjfFfZdw
hCUGX0oi7Y711Lhdkv+w1XKnPNfWFUDwRmfm4LtWVRmpSyEpfSNyKncLpnynK2wO
x/p7gIvNDSMSJAB0MPHQBGgrBxQrEITHanPkfvyDE+Vj6ScIusLeZqgke+KzbBMc
KIPrJJbRqy8=
-----END CERTIFICATE-----
Generated at Sun Apr 27 06:23:52 2025 by rpki-client