Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/71043990C4D811EA88E6B21FC4F9AE02.roa
File: 71043990C4D811EA88E6B21FC4F9AE02.roa (raw, json)
Hash identifier: 9vj0wFDRg2m924YSQRU+53hKJgFYHI/k3yYJ69FV68c=
Subject key identifier: 4F:AE:87:B8:73:71:02:E0:08:67:F0:8C:B1:D7:6C:B3:3F:B2:0A:5A
Certificate issuer: /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Certificate serial: 107D
Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/71043990C4D811EA88E6B21FC4F9AE02.roa
Signing time: Fri 16 Aug 2024 18:16:34 +0000
ROA not before: Fri 16 Aug 2024 18:16:34 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 22944
IP address blocks: 2404:f4c0:1009::/48 maxlen: 48
2404:f4c0:10b8::/45 maxlen: 48
2404:f4c0:10c0::/42 maxlen: 48
2404:f4c0:10c2::/47 maxlen: 48
2404:f4c0:10c4::/46 maxlen: 48
2404:f4c0:10c8::/45 maxlen: 47
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4221 (0x107d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Validity
Not Before: Aug 16 18:16:34 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66bf9782-7496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:82:26:a3:03:5e:9b:1a:1d:6e:7a:66:2a:c1:
b9:74:b9:4a:f5:80:30:cd:8f:20:bf:9d:1e:66:d9:
01:44:c6:4a:86:e9:f8:71:db:71:95:8f:c8:d1:fb:
9e:72:65:da:e9:5e:47:79:ba:b8:9f:88:53:23:7c:
e4:99:0b:ba:24:c4:4e:58:49:69:16:f2:1f:1e:6c:
8e:76:40:6d:24:62:0d:a8:40:3d:63:52:93:db:c0:
43:cd:64:53:ec:b7:cd:00:5b:9c:4a:59:ea:d4:e1:
88:b3:4f:e1:73:f0:6f:76:ae:fb:4d:36:5d:ed:80:
f3:39:eb:fe:d5:57:c3:36:c4:bb:ae:38:d1:53:5e:
76:93:ca:27:32:ed:46:df:d4:ff:4b:10:6d:6a:0a:
c4:32:95:8d:68:59:17:1f:70:7e:c4:bf:57:b3:e6:
12:b1:d5:83:47:2c:2a:0e:0a:97:c7:49:af:ae:36:
0f:eb:04:c7:df:da:6e:e7:02:76:6a:c4:2f:ce:d5:
1b:8e:1f:b4:83:a6:43:0b:fd:84:95:ce:b5:5e:c6:
35:3a:4f:c3:c0:bc:72:b3:1d:ab:b4:cd:fa:50:4c:
b8:92:ee:cd:7d:f5:fd:d8:93:6a:e3:cb:11:53:85:
1e:02:f5:e3:26:5d:2f:b8:a8:90:e8:bb:09:64:f5:
e6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:AE:87:B8:73:71:02:E0:08:67:F0:8C:B1:D7:6C:B3:3F:B2:0A:5A
X509v3 Authority Key Identifier:
keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/71043990C4D811EA88E6B21FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:f4c0:1009::/48
2404:f4c0:10b8::-2404:f4c0:10ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
ba:f7:7b:c9:b5:b0:c1:11:bf:1e:49:1a:7e:3c:40:9f:a9:f9:
ea:c3:3a:a5:92:eb:f6:f4:2b:2d:dd:4b:bf:aa:6c:bc:6b:3c:
75:60:f6:41:2b:e3:28:9f:38:ce:8d:14:79:ac:5e:53:21:68:
ce:04:22:17:10:50:e4:47:d4:c0:86:cc:ea:4b:64:6c:e0:6e:
1a:3f:07:c0:e3:54:2a:a4:46:ad:2d:7c:88:0e:7b:60:a5:85:
30:e2:f0:7d:a1:ba:4a:50:77:40:61:ea:01:7b:84:1c:6b:8d:
48:cf:fa:13:90:ae:d4:e7:09:5a:11:f4:e6:8c:87:ea:79:4d:
34:e5:67:60:23:52:35:a6:d1:bd:3f:62:48:27:7f:cb:7f:52:
6a:bc:1b:de:35:3d:8b:d7:0d:c1:d1:8a:b3:2f:eb:23:cd:f9:
4a:12:77:d7:61:69:68:de:30:69:65:9c:e2:77:63:9b:ce:47:
4c:15:ae:41:69:22:45:09:16:c3:10:fe:fe:70:ca:7b:b7:46:
c2:35:f3:66:03:e3:1f:2a:a4:75:15:2d:ec:6b:36:e0:7d:16:
b8:bd:09:78:21:8d:0a:68:6c:42:bf:1e:c6:d7:a1:ec:a1:62:
6a:a8:c0:fb:a8:e0:dd:81:69:f4:76:42:79:b0:2f:b6:49:09:
ed:e1:f2:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:40:39 2025 by rpki-client