Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9964ACAACBFC11EFB0D4E371C4F9AE02.roa
File: 9964ACAACBFC11EFB0D4E371C4F9AE02.roa (raw, json)
Hash identifier: z0mliktzawmrIMzyEnfbP5dKxIfgy2E5y70TZob+P68=
Subject key identifier: E4:38:FA:B0:47:2F:1F:38:AA:09:3D:01:4F:FC:55:02:4A:8A:5B:BA
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: A190
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9964ACAACBFC11EFB0D4E371C4F9AE02.roa
Signing time: Mon 06 Jan 2025 07:05:24 +0000
ROA not before: Mon 06 Jan 2025 07:05:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 152509
IP address blocks: 2401:b320::/32 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41360 (0xa190)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jan 6 07:05:24 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=677b80b4-bba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4a:9e:3b:61:bd:50:d9:41:9b:b5:77:3f:6d:
47:16:41:0f:e8:12:50:f4:49:a2:57:1a:72:1f:fd:
7a:c4:80:8b:f1:da:e0:62:7a:7b:db:49:cf:ab:ce:
63:0c:29:82:32:d3:a6:81:73:20:45:a5:c2:42:db:
7f:75:d7:2f:b9:99:f3:58:81:51:9f:8e:82:4e:b5:
ef:b9:8c:a5:ec:2f:c0:46:8f:32:d3:0b:02:2a:87:
35:6f:a7:59:84:ec:f1:d3:8c:b3:6a:86:ff:fa:bd:
88:e3:a6:6e:ba:de:28:fc:e2:39:55:70:b6:d2:c3:
48:b5:63:49:f8:5b:70:91:03:3c:26:46:95:d1:55:
49:71:56:3c:ab:45:cd:ae:aa:ef:a9:c2:da:6e:70:
40:48:0a:22:31:e8:77:12:36:da:21:74:b5:ed:62:
82:a5:31:01:7b:24:da:98:0e:42:02:6b:1e:7e:23:
a3:8c:76:7c:b4:76:94:57:3a:9f:7c:3c:88:a9:79:
b5:f0:af:96:88:8d:2c:c2:99:90:32:8a:58:d7:4e:
66:76:91:d4:9b:4d:0f:51:28:b1:dd:00:6d:69:4b:
8c:36:20:bc:92:3d:8d:6e:ac:59:28:15:ca:bb:0e:
70:7a:de:63:be:67:3b:fe:c8:3a:13:19:51:d6:b9:
ec:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:38:FA:B0:47:2F:1F:38:AA:09:3D:01:4F:FC:55:02:4A:8A:5B:BA
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9964ACAACBFC11EFB0D4E371C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:b320::/32
Signature Algorithm: sha256WithRSAEncryption
7b:7e:77:ea:5a:b5:6b:92:72:77:d5:a4:b0:46:c6:43:fe:ea:
fd:d9:e0:b0:f9:e0:e5:98:53:22:b7:d0:63:24:ad:5c:b1:b0:
49:29:b0:b1:cc:f4:c3:f9:17:bb:3f:bc:82:ac:ec:bd:e7:56:
d4:6d:c4:b6:4d:ea:85:fb:41:cd:85:c9:d3:c9:d3:7f:ac:6c:
63:25:b3:44:f9:81:7f:6b:99:ee:e8:20:af:84:d2:bb:4c:9f:
21:ed:af:e3:e0:e6:ac:89:aa:ac:66:e2:39:60:01:c3:75:1b:
32:2b:2f:ae:9a:af:69:8b:09:a1:14:7b:8d:4f:52:f7:01:6e:
1b:94:85:b1:ca:09:d5:dd:84:40:6b:8c:df:5a:6a:51:6b:c8:
73:4f:83:15:05:7c:8c:c1:62:52:48:14:5a:4f:f0:81:74:24:
7f:06:9c:1a:13:3c:6d:bd:37:6a:9e:34:1d:d4:40:59:87:bf:
42:e7:da:8e:66:12:cc:3c:bf:e3:7f:ec:d5:71:dd:74:c6:16:
c6:05:98:80:4e:bb:70:7b:38:e8:3e:57:31:48:85:5f:21:ea:
26:b6:69:44:a6:2f:87:0a:b8:df:51:a4:2a:54:0c:2b:6c:27:
e2:15:6f:3c:5a:39:6d:72:fc:9c:9d:54:5f:76:23:87:8c:0c:
e2:23:d8:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:56:29 2025 by rpki-client