Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/07FC93D4A54911EE9A3EC84EC4F9AE02.roa
File: 07FC93D4A54911EE9A3EC84EC4F9AE02.roa (raw, json)
Hash identifier: fXCQvzmqcIFTf9DA9c+P1JYXxfFMOZls+hciqTNV2YM=
Subject key identifier: 23:44:AA:05:D5:CD:29:8C:47:5B:82:FC:03:3F:6B:C1:39:64:BC:C4
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8FFB
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/07FC93D4A54911EE9A3EC84EC4F9AE02.roa
Signing time: Thu 30 May 2024 16:26:03 +0000
ROA not before: Thu 30 May 2024 16:26:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 150659
IP address blocks: 2400:daa0::/32 maxlen: 32
2400:daa0::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36859 (0x8ffb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 30 16:26:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a89b-45a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:47:98:03:27:5b:e2:aa:44:6f:00:11:7a:5a:
e3:38:60:a1:dd:1e:be:8a:e2:4c:61:d1:4c:13:02:
5b:c2:02:7a:fe:3a:52:e2:1c:23:d9:c4:c3:92:ce:
c6:b3:0e:08:fb:e8:fb:f5:c7:62:a8:d6:ad:eb:15:
c2:cc:5a:61:71:c7:ff:8b:67:e2:c5:b7:f5:ab:5a:
be:c5:00:96:a0:f3:9b:ff:a6:c7:de:c3:07:93:9f:
37:ff:34:38:97:1b:db:47:50:16:4e:c1:dd:e0:53:
93:0d:f5:1e:36:5c:8b:df:f4:a8:84:c1:5a:6e:c9:
b3:a0:36:bf:17:29:38:ed:9f:83:78:c4:9c:5d:af:
f8:34:21:41:fe:eb:de:74:ea:2f:7a:c4:3c:eb:b9:
f5:cb:75:90:62:e2:f4:84:c9:a2:b9:93:ce:0e:7b:
f0:de:7d:9b:90:53:aa:45:c8:cb:73:e1:85:6f:ca:
1d:15:53:03:3e:1d:d2:82:60:55:0c:2d:b3:02:54:
df:78:4f:83:94:79:ea:45:52:86:33:fb:46:f6:81:
5f:6e:9f:28:64:72:1e:23:f2:f8:aa:b6:b4:9b:d3:
8a:bb:d6:08:e5:06:75:55:ea:46:f1:44:34:28:7b:
bc:be:88:21:55:ec:27:5f:71:d3:b6:e9:49:68:8c:
53:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:44:AA:05:D5:CD:29:8C:47:5B:82:FC:03:3F:6B:C1:39:64:BC:C4
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/07FC93D4A54911EE9A3EC84EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:daa0::/32
Signature Algorithm: sha256WithRSAEncryption
0b:45:a4:f5:1f:fc:22:02:6f:6e:b6:c2:1d:ab:30:de:06:e4:
59:ea:03:f1:fc:2a:81:1b:36:16:dc:ee:5e:fd:cc:ba:6c:f0:
4c:aa:73:3c:df:a9:5e:74:12:fb:53:76:27:f1:e5:b7:25:ac:
5b:97:6e:0b:f3:8f:4c:c3:5c:16:11:70:15:04:27:f8:dd:38:
91:72:6d:6e:bd:14:25:60:71:fd:ca:da:27:a8:96:b9:b7:98:
02:3e:8f:d1:99:05:fd:7d:3c:4a:74:c6:17:aa:46:47:f9:cd:
2e:55:8b:22:d9:88:df:0f:dd:3d:b5:85:1e:aa:81:a7:95:0f:
b1:83:a0:72:d5:38:f0:f0:eb:5d:d4:49:c1:e4:51:58:f6:71:
83:79:3e:6b:4c:f8:94:9e:e7:0a:05:ea:4e:29:d6:4c:6a:37:
26:29:4c:db:cd:21:66:63:e9:74:61:e7:da:67:28:25:4b:c2:
bb:36:da:08:89:68:59:07:cc:6d:ef:a7:9b:8c:60:b6:91:81:
05:91:55:5a:59:60:27:96:5a:0c:73:d9:7f:ff:8b:53:d4:c6:
72:70:21:48:37:16:cf:e8:e6:cd:5c:9d:2e:fc:78:c4:c5:1a:
1e:53:12:17:29:a3:d2:2b:fb:17:15:ea:a8:60:e3:fc:ef:10:
88:2a:8c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:13:20 2025 by rpki-client