Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/E7F6D15AD17411EE87F7325DC4F9AE02.roa
File: E7F6D15AD17411EE87F7325DC4F9AE02.roa (raw, json)
Hash identifier: ytZ0mVr7Q5kbOcbcyXXPGqMfnF/2pBGd1W5uYZdomFo=
Subject key identifier: 32:09:E0:62:98:66:9C:3A:B7:DE:AC:20:78:7D:9D:0A:5B:4A:36:4F
Certificate issuer: /CN=A9186249/serialNumber=ACE28DABE53649637FA6E4E321DE1B63463B83CF
Certificate serial: 05
Authority key identifier: AC:E2:8D:AB:E5:36:49:63:7F:A6:E4:E3:21:DE:1B:63:46:3B:83:CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOKNq-U2SWN_puTjId4bY0Y7g88.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/E7F6D15AD17411EE87F7325DC4F9AE02.roa
Signing time: Thu 22 Feb 2024 11:24:13 +0000
ROA not before: Thu 22 Feb 2024 11:24:13 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 152585
IP address blocks: 2001:df3:7ec0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186249/serialNumber=ACE28DABE53649637FA6E4E321DE1B63463B83CF
Validity
Not Before: Feb 22 11:24:13 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=65d72edd-2b16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f8:07:ee:f0:10:d1:7d:ac:7b:1a:db:c0:68:
71:fa:7c:d3:16:a9:af:3e:bc:73:ef:3a:72:92:e9:
ae:ce:4c:13:02:e1:ae:57:b6:2b:ba:a1:43:6a:d3:
96:4b:50:59:c6:ab:d0:42:b3:59:2b:53:3a:f0:07:
78:f9:35:89:a9:a8:92:a5:d4:a9:34:53:6e:45:c7:
2c:91:6e:1e:35:a2:c7:1a:e5:96:4d:64:c7:6f:d7:
b3:11:38:b2:28:2c:b0:a9:2e:2b:23:a0:1f:d5:e5:
49:1c:f1:79:95:6f:2e:15:53:4e:44:c1:ad:4f:0d:
c7:ac:91:cc:1e:ad:b2:87:6e:dd:02:a8:a0:11:a6:
c9:11:f8:e7:e9:e8:50:47:9b:2e:f5:e0:c8:51:8f:
83:e9:b6:8f:5a:59:d9:7f:34:74:ef:f4:f9:4c:fe:
25:74:4e:4c:82:05:60:41:f1:d0:dc:46:05:19:b4:
3f:f2:a9:87:76:21:f3:ea:06:a8:f8:c1:8a:91:60:
43:87:65:92:2f:9f:c0:81:eb:aa:7f:2c:9a:8d:4d:
98:82:81:b3:e2:b2:61:fe:74:a8:e2:8e:0f:d3:e4:
ec:75:57:70:49:ce:01:c0:e5:7c:a8:d4:c6:60:12:
c5:90:0c:a5:48:86:e8:24:0c:0c:98:e7:e0:99:0b:
fd:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:09:E0:62:98:66:9C:3A:B7:DE:AC:20:78:7D:9D:0A:5B:4A:36:4F
X509v3 Authority Key Identifier:
keyid:AC:E2:8D:AB:E5:36:49:63:7F:A6:E4:E3:21:DE:1B:63:46:3B:83:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOKNq-U2SWN_puTjId4bY0Y7g88.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/E7F6D15AD17411EE87F7325DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:7ec0::/48
Signature Algorithm: sha256WithRSAEncryption
67:0c:06:11:b6:14:c9:2d:02:87:e6:f2:bf:ff:4d:0e:f6:8a:
58:ce:b2:4a:27:72:7f:89:92:42:0b:19:60:03:47:97:69:d0:
2b:f1:30:2f:47:b4:e0:a1:92:3a:16:fe:9a:ae:c8:88:83:43:
28:a3:fa:6e:9b:f6:32:c8:0f:7f:5a:9c:82:79:7a:64:c7:9d:
73:5b:f4:51:7f:01:fd:a8:ea:ff:8a:14:d8:22:d8:b6:4b:f4:
36:f2:02:cc:2e:02:d3:10:f2:27:f8:2b:6b:6e:1f:54:29:ac:
b5:bb:1b:9a:f3:04:db:ec:cd:e6:17:c8:d9:c8:fb:08:f1:4e:
4d:de:ca:69:66:52:72:9f:14:ef:c3:50:23:57:b3:03:aa:b9:
82:56:ec:5b:f4:4d:3c:5d:b4:40:89:ec:1a:bc:74:96:3e:ea:
ed:ef:63:b0:5a:cb:c0:ba:b2:e0:d7:b8:e9:0d:fc:44:0d:d6:
29:ae:4b:ad:ca:36:58:c8:01:e8:d1:23:10:cf:bf:58:c8:bb:
4b:c7:78:e5:43:84:96:b8:4f:af:2d:06:7b:6a:e2:f3:72:37:
40:bc:4d:79:7e:da:f6:84:e1:a0:be:79:34:65:13:6b:eb:e6:
5e:8b:69:9d:d1:b0:60:e0:18:d2:53:cb:dc:3e:b2:01:8b:3f:
7b:0c:a9:dc
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
NjI0OTExMC8GA1UEBRMoQUNFMjhEQUJFNTM2NDk2MzdGQTZFNEUzMjFERTFCNjM0
NjNCODNDRjAeFw0yNDAyMjIxMTI0MTNaFw0yNTA1MjgwMDAwMDBaMBgxFjAUBgNV
BAMTDTY1ZDcyZWRkLTJiMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDd+Afu8BDRfax7GtvAaHH6fNMWqa8+vHPvOnKS6a7OTBMC4a5Xtiu6oUNq05ZL
UFnGq9BCs1krUzrwB3j5NYmpqJKl1Kk0U25FxyyRbh41osca5ZZNZMdv17MROLIo
LLCpLisjoB/V5Ukc8XmVby4VU05Ewa1PDceskcwerbKHbt0CqKARpskR+Ofp6FBH
my714MhRj4Ppto9aWdl/NHTv9PlM/iV0TkyCBWBB8dDcRgUZtD/yqYd2IfPqBqj4
wYqRYEOHZZIvn8CB66p/LJqNTZiCgbPismH+dKjijg/T5Ox1V3BJzgHA5Xyo1MZg
EsWQDKVIhugkDAyY5+CZC/0lAgMBAAGjggKYMIIClDAdBgNVHQ4EFgQUMgngYphm
nDq33qwgeH2dCltKNk8wHwYDVR0jBBgwFoAUrOKNq+U2SWN/puTjId4bY0Y7g88w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg2MjQ5L0ExRjIzNDNDRDE3
MDExRUVBNjE1MUM0REM0RjlBRTAyL3JPS05xLVUyU1dOX3B1VGpJZDRiWTBZN2c4
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvck9LTnEtVTJTV05fcHVUaklkNGJZMFk3Zzg4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NjI0OS9BMUYyMzQzQ0QxNzAxMUVFQTYxNTFDNERDNEY5QUUwMi9FN0Y2RDE1QUQx
NzQxMUVFODdGNzMyNURDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACABDfN+wDANBgkqhkiG9w0BAQsFAAOCAQEAZwwGEbYUyS0C
h+byv/9NDvaKWM6ySidyf4mSQgsZYANHl2nQK/EwL0e04KGSOhb+mq7IiINDKKP6
bpv2MsgPf1qcgnl6ZMedc1v0UX8B/ajq/4oU2CLYtkv0NvICzC4C0xDyJ/gra24f
VCmstbsbmvME2+zN5hfI2cj7CPFOTd7KaWZScp8U78NQI1ezA6q5glbsW/RNPF20
QInsGrx0lj7q7e9jsFrLwLqy4Ne46Q38RA3WKa5Lrco2WMgB6NEjEM+/WMi7S8d4
5UOElrhPry0Ge2ri83I3QLxNeX7a9oThoL55NGUTa+vmXotpndGwYOAY0lPL3D6y
AYs/ewyp3A==
-----END CERTIFICATE-----
Generated at Sat Apr 26 07:03:57 2025 by rpki-client