Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/415CC3C8604311EF88ACB764C4F9AE02.roa
File: 415CC3C8604311EF88ACB764C4F9AE02.roa (raw, json)
Hash identifier: 6KtayLRWSUzONUeuOfolHFyD0q8vrftx2FhaS35liDM=
Subject key identifier: 2A:96:60:62:C3:7A:83:6D:EF:CE:4E:F6:7A:8F:08:42:94:A7:3D:55
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 9748
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/415CC3C8604311EF88ACB764C4F9AE02.roa
Signing time: Thu 22 Aug 2024 04:59:05 +0000
ROA not before: Thu 22 Aug 2024 04:59:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 152488
IP address blocks: 2001:df3:bfc0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38728 (0x9748)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Aug 22 04:59:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66c6c599-0a42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d7:de:ba:34:e4:a9:b8:a4:39:83:a9:3b:57:
be:38:25:ca:af:a2:18:6d:14:46:69:69:e5:ae:4f:
00:14:f6:9d:14:5b:db:a0:48:a9:f2:41:cf:4b:02:
af:72:d7:ad:c6:9e:c4:3b:b9:c9:96:76:df:f4:98:
f8:a2:c4:11:7b:d2:ee:6a:f9:aa:d8:45:64:76:d6:
0d:66:98:b3:fd:25:2f:a5:b0:23:e0:1d:d4:cb:1f:
16:60:88:f1:4d:8b:71:4d:8b:68:75:cb:85:de:3b:
82:fa:e6:bc:cb:4b:46:c7:6e:52:6a:29:12:17:9b:
10:ae:f5:b3:99:2e:5e:b6:1e:c4:bb:e2:81:e1:a0:
39:64:69:7b:f8:3b:55:23:c6:4b:66:96:cd:98:84:
1d:e5:b7:34:0b:b4:07:96:f5:00:fe:d0:fc:53:8f:
e6:a8:94:bb:bc:97:5d:47:ef:d3:77:7f:7e:09:3a:
67:7e:c8:4d:15:67:58:fc:ab:48:43:e5:c3:09:73:
15:3f:c0:6e:c4:4a:61:df:74:77:f6:fc:5c:e5:74:
9a:94:4d:fa:66:ae:54:f7:3d:f3:00:05:de:c3:0b:
30:df:b3:40:fa:f8:92:d8:10:20:2e:22:f2:e2:e2:
6e:04:28:bd:6d:41:0f:db:27:4c:3f:60:1d:c7:4f:
46:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:96:60:62:C3:7A:83:6D:EF:CE:4E:F6:7A:8F:08:42:94:A7:3D:55
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/415CC3C8604311EF88ACB764C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:bfc0::/48
Signature Algorithm: sha256WithRSAEncryption
6c:d3:e7:7c:61:08:0e:bf:c9:29:07:92:ce:e9:fc:5f:d4:1e:
5c:31:e3:4d:63:1f:ca:16:78:c2:14:84:69:bf:82:3e:3c:2c:
ce:fa:02:9f:ec:c6:31:9c:ec:08:c3:f1:cd:fa:f7:5f:79:61:
7e:a4:0d:a7:c8:50:9f:54:2b:a8:36:0c:4b:4c:89:b9:25:0b:
e3:59:db:89:84:fa:f9:27:11:d9:a7:1d:79:e0:99:28:ae:c3:
2e:eb:f1:bf:0a:89:86:74:8d:51:8e:fb:44:2b:53:a0:bf:a9:
3c:93:f2:80:7d:8f:85:f0:9a:85:ae:17:72:49:21:a2:ca:3d:
38:33:38:13:27:2f:6c:14:ba:3c:f6:b7:c8:ab:17:4c:e2:8e:
47:15:ae:54:01:d0:73:e7:9b:ca:5c:00:54:ae:4a:0f:56:0f:
a6:47:28:70:d8:f0:4e:cb:ef:65:24:cd:08:44:29:4a:be:9b:
7d:d6:de:5c:42:7c:f0:11:6d:79:af:ef:13:92:2a:53:8e:b9:
fd:7c:81:a4:f2:80:28:d0:c0:f9:e1:e3:4f:53:77:bb:5c:81:
b2:2d:97:8c:19:2e:b6:d5:db:a0:ee:1f:89:cc:23:69:e0:1d:
a9:8a:31:d2:09:c2:76:a0:4a:17:67:dd:12:35:6a:f6:a6:3c:
b3:2b:9e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:50:10 2025 by rpki-client