Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3000BA6CCC0E11EF940A1C4AC4F9AE02.roa
File: 3000BA6CCC0E11EF940A1C4AC4F9AE02.roa (raw, json)
Hash identifier: 2Ya/X7K5bkM5IsnKdzNmx2b9P7EuVwEmxWKvw6TQjv4=
Subject key identifier: A9:97:6E:38:02:ED:4E:C6:E8:9D:84:70:42:29:15:5A:36:37:C2:4B
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: A192
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3000BA6CCC0E11EF940A1C4AC4F9AE02.roa
Signing time: Mon 06 Jan 2025 09:11:18 +0000
ROA not before: Mon 06 Jan 2025 09:11:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 140127
IP address blocks: 2001:df1:dbc0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41362 (0xa192)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jan 6 09:11:18 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=677b9e36-761a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b5:cb:ef:ac:2e:7c:fb:6e:fa:9e:d9:ad:de:
20:ef:75:5c:4c:9d:ed:ed:3f:e5:3b:bf:4c:e2:b5:
31:b7:ac:28:c3:7d:ef:e6:22:9d:c6:e1:c3:e8:95:
72:36:f6:1b:be:45:9d:43:e3:ff:b9:40:65:a4:3a:
e7:dc:59:5e:d0:ba:a5:76:29:29:2e:95:df:44:06:
3f:a0:e2:57:9a:2f:4d:f4:82:34:55:3e:98:78:d0:
98:0b:10:ec:fe:15:9f:0a:b0:63:77:a7:31:79:6e:
63:e1:e1:a0:f0:eb:cd:12:ac:52:d3:3a:ed:ee:8f:
2f:d9:64:d1:38:cd:e1:9a:37:0c:a5:55:0c:d7:97:
43:ac:43:4e:58:15:e8:0e:1c:22:4a:07:32:6f:df:
86:c1:da:d0:e2:52:39:3b:02:0c:ec:fd:c6:3d:97:
10:73:77:80:d6:e2:7e:51:a3:7c:45:24:ab:85:a6:
55:01:02:08:27:b2:a2:1d:bd:5d:ca:6b:18:a1:f5:
03:43:e9:8f:3b:22:b5:f3:a1:78:4e:32:45:31:24:
59:01:c0:93:5f:0d:f9:56:9d:05:71:d5:b9:01:7d:
09:22:99:5b:ec:7a:36:38:6c:73:a2:12:ba:d6:7f:
d0:b8:81:8d:d1:c3:c6:51:11:69:54:4c:18:b5:d9:
db:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:97:6E:38:02:ED:4E:C6:E8:9D:84:70:42:29:15:5A:36:37:C2:4B
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3000BA6CCC0E11EF940A1C4AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df1:dbc0::/48
Signature Algorithm: sha256WithRSAEncryption
b9:2e:fa:a0:f7:66:d6:dc:67:a2:6d:60:fb:43:bc:28:b9:f6:
0f:e0:28:bd:50:a7:c7:74:20:ed:e7:63:33:92:45:bc:63:0b:
5b:48:ca:ce:ae:4d:79:82:ae:d1:df:b2:ea:22:96:9e:43:58:
d0:06:18:53:21:54:46:ff:35:38:ac:fe:7c:18:0d:5c:fa:aa:
9a:b7:c2:0f:d5:a8:80:81:89:c1:3e:8a:cd:4d:b5:70:48:99:
f9:fd:8c:00:e5:b2:b5:bd:e9:bb:66:66:84:2e:ce:c3:90:4e:
f5:9c:66:bf:38:6a:be:35:d1:8c:1a:8d:20:8a:85:26:9a:cb:
c2:f4:37:27:42:7f:8b:37:e1:c9:66:46:f2:b7:c0:68:28:4f:
d4:d7:1a:0c:89:55:59:20:ea:12:49:94:01:cd:9b:0c:de:6f:
90:5d:72:ed:22:e9:8a:fb:b8:c9:ee:2a:f0:59:56:79:0c:31:
1f:20:65:08:1d:02:d3:b1:1e:8e:d9:2b:82:61:99:2a:eb:53:
30:ae:77:fe:10:c7:1c:64:26:1a:fe:ce:01:88:58:12:51:a8:
ad:c9:17:b3:d7:63:77:a1:79:f8:df:25:03:96:fa:a4:63:ff:
f4:42:b0:c5:14:d5:3a:89:f3:e4:34:2d:d4:89:99:31:08:bc:
7c:87:c2:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:20:14 2025 by rpki-client