Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D7C533DC5DEF11EF929D3B33C4F9AE02.roa
File: D7C533DC5DEF11EF929D3B33C4F9AE02.roa (raw, json)
Hash identifier: MNyqkIy88mv7j5sUybsgvzEs26dJJvFGlwqfT7Z1ge0=
Subject key identifier: D0:CE:8E:E5:24:C5:BB:48:9E:92:B7:AA:6E:01:51:4E:5D:10:7B:01
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 96EC
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D7C533DC5DEF11EF929D3B33C4F9AE02.roa
Signing time: Mon 19 Aug 2024 05:56:57 +0000
ROA not before: Mon 19 Aug 2024 05:56:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 152549
IP address blocks: 2401:a760::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38636 (0x96ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Aug 19 05:56:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66c2dea9-eb2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8f:fa:ac:78:ab:cf:1b:12:3c:2c:59:58:b4:
66:32:79:95:b9:8c:3e:19:ec:16:e3:d7:d8:6f:76:
18:c0:d3:63:03:65:87:22:72:52:ff:8f:cf:ae:3b:
82:6c:6b:74:13:7d:64:e2:56:2b:04:1d:0f:df:0c:
64:e5:cf:3a:74:ff:e1:08:0a:8a:45:13:2e:f2:2a:
bb:99:82:f3:ff:02:09:64:b6:56:e0:62:6a:b7:fb:
da:17:43:39:1a:78:01:12:11:ed:6f:ed:c1:85:5a:
eb:9c:84:69:4f:5d:29:91:09:b9:0f:d2:0e:c5:0e:
f6:09:98:ce:47:ac:db:8c:5d:a0:95:84:d7:37:f6:
c7:5d:77:8d:6c:04:51:77:8f:76:d5:4a:d5:d8:cc:
cb:22:3a:68:27:84:79:8c:db:38:9c:d9:0d:ab:38:
02:44:44:95:4b:e9:c2:1c:10:9f:8b:41:2e:26:d9:
68:da:00:35:5b:65:49:3b:9a:82:c1:4e:01:fc:92:
1e:da:69:80:61:29:e5:c7:63:81:51:65:93:17:99:
ce:42:a0:13:22:2d:5c:a0:83:5b:94:13:ed:79:70:
33:92:fb:5a:13:b8:ff:8f:ae:bb:32:2a:ab:28:cc:
a6:06:9d:1d:89:b1:8a:a8:93:17:94:11:6f:43:4c:
82:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:CE:8E:E5:24:C5:BB:48:9E:92:B7:AA:6E:01:51:4E:5D:10:7B:01
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D7C533DC5DEF11EF929D3B33C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:a760::/32
Signature Algorithm: sha256WithRSAEncryption
7a:be:41:19:0a:70:66:c1:50:2e:72:dd:14:20:c1:b2:17:4a:
b5:a5:56:74:55:5b:55:38:72:18:80:76:b9:ae:d5:cc:02:b9:
e6:a9:ab:48:7e:2d:e0:11:68:97:ba:bb:9c:6c:f0:07:b1:2d:
ee:81:de:0c:3f:f4:63:61:ec:22:2b:83:4c:7c:3a:76:34:5a:
2c:c3:6f:16:05:3c:fd:2a:55:fb:06:be:e3:47:f1:34:c8:ef:
46:fd:a0:b5:e9:c3:ad:49:78:89:b9:78:24:52:bd:49:3a:5f:
93:a3:d5:6a:fb:fa:c0:bb:13:6b:af:62:58:e5:33:fb:f4:9d:
e8:89:ea:3f:bc:c9:e1:f3:b1:03:d9:cf:53:05:8a:05:54:e0:
b0:cc:a8:7e:b1:79:8c:ad:11:2d:9b:07:a7:41:78:92:3c:69:
a2:24:df:e4:29:68:ea:45:9a:4f:46:7d:d4:bd:eb:ee:d5:5c:
ea:c8:9d:ee:6c:6e:76:d7:ec:f2:d3:82:5b:06:54:25:dd:92:
58:90:42:bc:a7:76:07:27:c3:a0:46:8f:35:92:9b:54:2a:04:
f0:95:3f:66:fc:ac:cc:ee:54:93:56:46:45:07:66:7d:7c:cb:
a6:4b:b0:92:28:f6:5a:9e:0b:9b:c1:26:1b:6a:f6:e1:f2:e6:
da:38:41:83
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgIDAJbsMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI0MDgxOTA1NTY1N1oXDTI1MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjZjMmRlYTktZWIyZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL2P+qx4q88bEjwsWVi0ZjJ5lbmMPhnsFuPX2G92GMDTYwNlhyJyUv+Pz647
gmxrdBN9ZOJWKwQdD98MZOXPOnT/4QgKikUTLvIqu5mC8/8CCWS2VuBiarf72hdD
ORp4ARIR7W/twYVa65yEaU9dKZEJuQ/SDsUO9gmYzkes24xdoJWE1zf2x113jWwE
UXePdtVK1djMyyI6aCeEeYzbOJzZDas4AkRElUvpwhwQn4tBLibZaNoANVtlSTua
gsFOAfySHtppgGEp5cdjgVFlkxeZzkKgEyItXKCDW5QT7XlwM5L7WhO4/4+uuzIq
qyjMpgadHYmxiqiTF5QRb0NMgh0CAwEAAaOCApYwggKSMB0GA1UdDgQWBBTQzo7l
JMW7SJ6St6puAVFOXRB7ATAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0Q3QzUzM0RD
NURFRjExRUY5MjlEM0IzM0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/
BBEwDzANBAIAAjAHAwUAJAGnYDANBgkqhkiG9w0BAQsFAAOCAQEAer5BGQpwZsFQ
LnLdFCDBshdKtaVWdFVbVThyGIB2ua7VzAK55qmrSH4t4BFol7q7nGzwB7Et7oHe
DD/0Y2HsIiuDTHw6djRaLMNvFgU8/SpV+wa+40fxNMjvRv2gtenDrUl4ibl4JFK9
STpfk6PVavv6wLsTa69iWOUz+/Sd6InqP7zJ4fOxA9nPUwWKBVTgsMyofrF5jK0R
LZsHp0F4kjxpoiTf5Clo6kWaT0Z91L3r7tVc6sid7mxudtfs8tOCWwZUJd2SWJBC
vKd2ByfDoEaPNZKbVCoE8JU/ZvyszO5Uk1ZGRQdmfXzLpkuwkij2Wp4Lm8EmG2r2
4fLm2jhBgw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:21:41 2025 by rpki-client