Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0B71F7E6B5EE11EABBA2E915C4F9AE02.roa
File: 0B71F7E6B5EE11EABBA2E915C4F9AE02.roa (raw, json)
Hash identifier: BzoBKlgCfbgqhB+9wA6yWgI0my1zQDt47FAUMNfxiOs=
Subject key identifier: B7:63:A5:79:50:78:04:6F:2D:B1:D3:01:C1:07:4A:02:09:A0:85:18
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8863
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0B71F7E6B5EE11EABBA2E915C4F9AE02.roa
Signing time: Thu 30 May 2024 15:54:20 +0000
ROA not before: Thu 30 May 2024 15:54:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 132524
IP address blocks: 2406:f00:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34915 (0x8863)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 30 15:54:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a12c-8fb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f6:1b:8a:46:a2:83:de:73:85:92:b1:18:7e:
a9:54:d0:38:38:ce:9a:f6:3b:2c:3c:e6:23:99:38:
c0:79:ff:d8:4a:b6:f2:4a:17:e4:4a:af:08:c8:a5:
d5:42:70:f6:ae:4a:10:62:65:22:1c:24:c7:54:f2:
2f:85:24:99:47:91:64:ce:72:9d:c2:2d:95:25:a7:
5d:af:fb:d4:5f:16:ee:7b:66:39:76:d9:93:78:3e:
43:bd:6c:51:ac:bc:d5:b2:e9:c8:28:57:2d:28:65:
ba:da:18:c9:9b:ea:4d:b5:fd:63:5f:75:cd:87:ed:
ed:52:58:0b:ac:86:5d:4a:03:37:32:1c:83:2e:0b:
fb:ec:52:b5:e8:d0:65:bb:ee:f6:fb:75:5e:d0:bb:
15:d5:6a:7a:cd:f9:0b:19:e4:d5:68:ee:74:f6:32:
f9:ef:33:7e:f5:3d:ae:be:1e:b1:33:80:b8:19:5a:
f0:b9:fd:cf:43:6e:0d:63:27:f2:7d:80:12:9f:e1:
ac:30:14:03:99:70:88:b3:0d:e5:c5:6d:ab:30:14:
0c:b6:1b:3c:23:21:a6:f7:97:3d:34:b0:e3:15:6b:
8f:2f:7d:23:a1:c4:53:7a:12:9b:98:c4:56:98:32:
8a:4f:b2:87:1e:5b:aa:ff:e8:f3:14:37:40:17:46:
df:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:63:A5:79:50:78:04:6F:2D:B1:D3:01:C1:07:4A:02:09:A0:85:18
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0B71F7E6B5EE11EABBA2E915C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:f00:1::/48
Signature Algorithm: sha256WithRSAEncryption
2b:90:75:0d:1f:a2:7f:9b:42:03:63:92:9e:d2:f7:78:78:d6:
84:40:04:bc:7e:a1:f6:a5:f4:bc:12:49:73:32:f5:e1:b2:5b:
bb:51:3d:3f:4e:f6:f5:ae:24:92:ba:df:be:0b:53:39:98:c5:
8d:f1:e4:21:89:72:c6:4c:4d:f9:4d:fe:a1:71:34:76:aa:8f:
b4:3c:a4:0a:95:3a:be:0d:cd:ad:58:b3:92:e7:03:23:f0:b7:
73:11:69:4f:98:a8:60:25:d5:50:d7:d5:93:1a:ef:dd:da:ff:
96:52:11:5a:9b:dd:d4:a4:be:dc:d0:e3:1d:76:d2:6e:34:38:
59:50:f6:df:14:e1:d4:44:d6:ef:08:23:6a:db:6e:7d:98:a3:
32:1b:f0:b0:bd:53:cf:a2:57:5d:a0:6d:3c:c0:6c:11:81:d6:
a0:a2:ad:3d:91:f5:d8:5f:7b:b6:28:45:97:3b:32:f7:1e:5d:
94:3d:68:bc:68:49:f0:8c:7d:5f:eb:4d:35:a8:9c:b3:af:fd:
df:96:5e:9d:14:12:7d:48:1d:df:78:13:4f:35:1d:f4:35:4a:
e6:c2:9b:a9:20:42:ad:3c:cc:d6:4a:4b:9d:92:2b:76:20:17:
96:2a:7d:20:95:14:d6:60:43:88:0d:44:dc:fe:c1:45:58:ae:
50:c6:73:f2
-----BEGIN CERTIFICATE-----
MIIFdTCCBF2gAwIBAgIDAIhjMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI0MDUzMDE1NTQyMFoXDTI1MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjY1OGExMmMtOGZiMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMD2G4pGooPec4WSsRh+qVTQODjOmvY7LDzmI5k4wHn/2Eq28koX5EqvCMil
1UJw9q5KEGJlIhwkx1TyL4UkmUeRZM5yncItlSWnXa/71F8W7ntmOXbZk3g+Q71s
Uay81bLpyChXLShlutoYyZvqTbX9Y191zYft7VJYC6yGXUoDNzIcgy4L++xStejQ
Zbvu9vt1XtC7FdVqes35Cxnk1WjudPYy+e8zfvU9rr4esTOAuBla8Ln9z0NuDWMn
8n2AEp/hrDAUA5lwiLMN5cVtqzAUDLYbPCMhpveXPTSw4xVrjy99I6HEU3oSm5jE
Vpgyik+yhx5bqv/o8xQ3QBdG39MCAwEAAaOCApgwggKUMB0GA1UdDgQWBBS3Y6V5
UHgEby2x0wHBB0oCCaCFGDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzBCNzFGN0U2
QjVFRTExRUFCQkEyRTkxNUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCIGCCsGAQUFBwEHAQH/
BBMwETAPBAIAAjAJAwcAJAYPAAABMA0GCSqGSIb3DQEBCwUAA4IBAQArkHUNH6J/
m0IDY5Ke0vd4eNaEQAS8fqH2pfS8EklzMvXhslu7UT0/Tvb1riSSut++C1M5mMWN
8eQhiXLGTE35Tf6hcTR2qo+0PKQKlTq+Dc2tWLOS5wMj8LdzEWlPmKhgJdVQ19WT
Gu/d2v+WUhFam93UpL7c0OMddtJuNDhZUPbfFOHURNbvCCNq2259mKMyG/CwvVPP
olddoG08wGwRgdagoq09kfXYX3u2KEWXOzL3Hl2UPWi8aEnwjH1f6001qJyzr/3f
ll6dFBJ9SB3feBNPNR30NUrmwpupIEKtPMzWSkudkit2IBeWKn0glRTWYEOIDUTc
/sFFWK5QxnPy
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:18:12 2025 by rpki-client