Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/3524F8BCD75511EF80E68A39C4F9AE02.roa
File: 3524F8BCD75511EF80E68A39C4F9AE02.roa (raw, json)
Hash identifier: atNvogMajVgrPoutiUYnbQeZE/aQ+6Wia9GfoJ31M8o=
Subject key identifier: FB:70:6B:5F:58:45:47:7B:18:8F:4A:1C:6C:51:76:13:D2:72:56:CD
Certificate issuer: /CN=A918BB4D/serialNumber=EF403643EA9820AE6D9D622F9AEFD7A4C9154F24
Certificate serial: 067C
Authority key identifier: EF:40:36:43:EA:98:20:AE:6D:9D:62:2F:9A:EF:D7:A4:C9:15:4F:24
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/3524F8BCD75511EF80E68A39C4F9AE02.roa
Signing time: Mon 20 Jan 2025 17:37:24 +0000
ROA not before: Mon 20 Jan 2025 17:37:24 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 138195
IP address blocks: 2401:e9e0:2000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1660 (0x67c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918BB4D/serialNumber=EF403643EA9820AE6D9D622F9AEFD7A4C9154F24
Validity
Not Before: Jan 20 17:37:24 2025 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=678e89d3-7269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b4:0f:96:18:71:e0:4b:01:f0:9f:8d:66:24:
b3:c9:0f:3e:c0:3e:e3:c0:81:1a:11:08:41:5d:d7:
15:5b:82:d6:0f:1f:f4:58:1b:7c:83:32:a7:6c:78:
a6:48:5c:3a:84:ba:c8:24:88:20:6e:74:70:ec:f5:
58:51:ad:48:47:b4:5b:da:44:0d:bc:bc:ac:7c:2d:
b5:ac:66:fa:c3:56:47:14:f8:f0:57:86:43:d6:09:
e5:9a:f8:4f:e0:5a:27:0c:a2:02:41:5a:a1:42:e7:
31:82:44:e7:3d:50:7b:c6:d9:ad:f8:fa:d0:28:e1:
d9:14:6c:ce:2f:88:c4:dd:58:f8:4c:03:50:f7:f0:
ee:e7:8f:12:17:8e:30:d0:e8:2c:af:15:bc:ca:b6:
cf:7f:da:c7:54:55:63:09:20:9c:47:b6:86:20:09:
62:08:5a:fb:bb:6a:da:eb:a6:7d:af:9c:4d:f9:5c:
86:d3:90:fb:2a:f7:2b:02:75:81:07:0c:cf:45:5b:
f0:a9:22:17:61:64:e3:4d:8b:67:7b:f2:b8:15:c6:
81:73:c8:25:59:2d:8f:03:37:17:4a:ad:20:5e:3c:
5b:51:a8:8e:a9:30:3b:27:f9:a6:38:d3:d0:94:5f:
39:6f:1f:64:8d:92:ab:bc:af:60:53:fa:1f:8b:9a:
6b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:70:6B:5F:58:45:47:7B:18:8F:4A:1C:6C:51:76:13:D2:72:56:CD
X509v3 Authority Key Identifier:
keyid:EF:40:36:43:EA:98:20:AE:6D:9D:62:2F:9A:EF:D7:A4:C9:15:4F:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/3524F8BCD75511EF80E68A39C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:e9e0:2000::/36
Signature Algorithm: sha256WithRSAEncryption
19:a6:23:03:9e:10:ac:31:64:45:87:df:53:be:82:8a:96:84:
7e:7a:15:0e:61:3f:b6:a3:0e:ad:e9:19:cb:d5:d0:56:c8:b3:
6a:15:1d:9c:a4:d8:1b:a5:25:60:8f:78:b9:98:b1:34:d6:0b:
ce:41:e5:a9:69:b8:8a:49:79:47:ad:e6:81:3b:da:ad:ca:54:
03:3d:e6:c0:de:12:69:c8:2c:e6:ea:12:52:1a:32:d5:37:b5:
a5:7f:33:cd:7f:d5:21:40:83:52:b4:7d:5f:d5:f7:ff:88:2a:
00:eb:16:44:9d:4d:0e:24:d3:63:42:06:7f:c3:e4:01:b7:dc:
d6:06:fe:f5:a0:c8:de:e2:a9:be:e7:e3:b9:3e:8a:d3:f5:7b:
e3:36:5f:9b:5e:a1:50:f1:c8:08:45:8e:3f:1d:e7:44:ee:a3:
6c:3d:ca:e4:ec:14:4e:aa:71:68:1d:16:96:3d:66:b8:b8:3a:
10:33:ce:4f:3d:ad:c4:19:be:c7:8f:e4:b4:9d:60:bf:6f:0c:
3f:59:d1:2e:4e:af:fd:8b:b0:5c:dd:e7:8b:01:26:ea:00:3b:
37:f1:ee:f4:1c:d6:e0:fe:16:2d:eb:1f:e6:3f:d1:e2:05:75:
0b:1e:9f:26:fc:7c:1a:2f:6b:35:fa:c4:2a:61:b7:a1:1f:bf:
50:29:5d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:12:30 2025 by rpki-client