Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918497E/C320C226B5D811EE8DA66D85C4F9AE02/D8FEAF6C637611EFB2D9FD47C4F9AE02.roa
File: D8FEAF6C637611EFB2D9FD47C4F9AE02.roa (raw, json)
Hash identifier: rCeTEdWJzDJDdyTFfW5+yJKqhOmfCKimM46piNEKqjM=
Subject key identifier: A6:CE:3A:88:26:26:BC:70:98:C1:9D:55:9B:F9:88:EE:18:AB:65:81
Certificate issuer: /CN=A918497E/serialNumber=8D4BF79A419EEC0FA533E5FCA50FF372A33CB390
Certificate serial: 75
Authority key identifier: 8D:4B:F7:9A:41:9E:EC:0F:A5:33:E5:FC:A5:0F:F3:72:A3:3C:B3:90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918497E/C320C226B5D811EE8DA66D85C4F9AE02/D8FEAF6C637611EFB2D9FD47C4F9AE02.roa
Signing time: Mon 26 Aug 2024 06:45:57 +0000
ROA not before: Mon 26 Aug 2024 06:45:57 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 147006
IP address blocks: 2401:bee0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117 (0x75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918497E/serialNumber=8D4BF79A419EEC0FA533E5FCA50FF372A33CB390
Validity
Not Before: Aug 26 06:45:57 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=66cc24a5-8635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:45:04:1d:e0:a6:56:f3:77:6a:e3:2b:d6:30:
ab:5e:dc:00:1a:19:44:3b:6c:4b:84:8c:d7:49:90:
1d:13:09:54:03:12:cb:89:76:57:a2:f1:25:08:2d:
d2:c9:bc:51:67:18:90:42:de:94:29:ea:ad:71:2b:
f8:93:99:50:31:b8:da:c0:59:9d:f8:7b:84:a2:87:
9a:b6:81:d1:5d:e7:bd:09:4b:f0:0f:73:98:c9:db:
af:06:68:1e:23:55:af:26:7a:d6:06:39:fd:03:63:
94:d6:98:e5:37:8b:22:32:23:33:46:82:9b:ae:88:
7f:2a:38:7e:48:44:00:ae:1a:bf:95:eb:7b:80:a9:
4c:ab:03:a9:e1:75:69:a1:ad:4f:60:37:c6:99:97:
aa:7a:ee:70:13:06:c3:c2:f9:18:f0:36:e7:d0:19:
55:e8:97:79:24:da:de:8e:4c:7f:5d:04:8a:c6:8e:
da:17:b0:1d:85:77:33:c8:2b:b2:3f:32:30:61:05:
bc:bf:28:35:bd:59:eb:9a:24:68:fa:8c:48:a5:06:
56:ac:35:d7:45:23:3d:d1:a0:8b:07:45:7f:d6:44:
cf:2a:58:41:7b:05:27:c9:82:ea:31:b7:ff:96:f7:
17:a0:77:e4:1f:70:a7:cd:4a:79:43:dc:d4:f7:e7:
b2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:CE:3A:88:26:26:BC:70:98:C1:9D:55:9B:F9:88:EE:18:AB:65:81
X509v3 Authority Key Identifier:
keyid:8D:4B:F7:9A:41:9E:EC:0F:A5:33:E5:FC:A5:0F:F3:72:A3:3C:B3:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918497E/C320C226B5D811EE8DA66D85C4F9AE02/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918497E/C320C226B5D811EE8DA66D85C4F9AE02/D8FEAF6C637611EFB2D9FD47C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:bee0::/32
Signature Algorithm: sha256WithRSAEncryption
09:03:03:ea:e8:9c:cd:d5:c6:8d:9d:42:7b:3d:b4:2e:76:4f:
3f:24:17:90:64:a8:8e:4f:e9:28:ad:ec:0d:4d:93:ec:9c:28:
de:fe:75:d9:89:a7:68:94:88:71:87:69:c8:06:35:01:6a:cc:
b8:8a:ea:b0:4d:1d:9b:1e:34:49:a7:f8:96:8f:46:e6:dd:79:
54:5b:1a:90:f8:58:05:23:14:86:da:ad:9c:ab:2a:4e:32:1e:
ea:c3:87:fe:f4:93:5d:4a:5c:86:0d:2c:08:67:74:08:e1:0f:
14:1f:b5:8f:35:88:ac:e2:5b:7a:2a:4f:34:ed:85:5e:21:0a:
a7:ad:fe:f6:a3:99:22:d3:36:8a:92:bf:20:b6:63:22:ed:ae:
1e:56:8f:37:6a:13:8b:54:0e:c4:d2:28:8a:06:b4:ca:44:d5:
1d:a4:d7:5e:81:f6:ed:cb:3c:e7:bc:ac:ed:67:e8:4f:d5:17:
93:f3:75:f6:e3:2f:b3:2c:da:03:be:0d:1e:a1:7e:5b:58:7d:
1d:91:e1:b5:86:32:62:31:0d:67:a8:54:85:74:bd:b2:b3:b1:
a8:64:84:10:f1:05:70:60:9e:09:91:d2:77:be:b9:f5:4f:6e:
b6:aa:6b:35:4d:0e:5b:9b:1e:7c:2f:3e:da:a0:0f:f2:d1:89:
04:3b:5f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:32:15 2025 by rpki-client