Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DD9A9632A0A111EE84CD2A2BC4F9AE02.roa
File: DD9A9632A0A111EE84CD2A2BC4F9AE02.roa (raw, json)
Hash identifier: BncPhyOPUdhind060xf2XzEmdLY6tN3TvVz+sqPuMJM=
Subject key identifier: 31:84:78:DE:A1:98:C1:E2:FD:90:B4:5A:94:04:71:25:07:0E:EC:4E
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8DA8
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DD9A9632A0A111EE84CD2A2BC4F9AE02.roa
Signing time: Thu 30 May 2024 16:16:30 +0000
ROA not before: Thu 30 May 2024 16:16:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 141798
IP address blocks: 2001:df6:5580::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36264 (0x8da8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 30 16:16:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a65e-b26f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:64:5a:af:08:fa:f5:14:b8:ce:23:70:47:d7:
9e:3c:21:3c:e5:bc:7e:b4:e8:d1:f0:b3:48:fd:a4:
88:a4:e2:84:54:26:06:17:f2:cb:14:b7:df:f1:da:
76:ca:67:3c:61:d6:23:1d:52:f1:bd:98:6d:5b:11:
2e:ff:d7:c0:7d:49:95:eb:7b:07:3c:af:43:fd:95:
15:00:7d:8a:e7:3a:73:a1:4c:a6:78:63:36:d1:62:
90:18:24:cc:6e:7e:94:c2:fd:f6:96:ed:1b:bb:df:
b8:78:50:9f:ec:a0:a7:94:17:e8:43:a2:75:a2:83:
7e:05:87:e7:69:86:36:bc:0b:78:f8:2a:eb:7f:3a:
ec:0c:15:70:ae:25:dd:0d:bf:da:ff:3f:5e:47:ca:
a4:08:45:83:8a:f7:1c:dd:d3:47:c0:8f:a5:8a:0c:
e3:25:f5:b6:49:cc:41:b6:e4:dc:72:3c:de:9d:80:
2f:45:b6:6d:67:1d:5b:14:83:28:ee:2d:55:8e:d8:
b5:e9:d1:e6:db:14:a9:ba:04:17:fb:fd:9a:df:9b:
7a:9d:9b:1b:01:a4:89:2a:49:72:72:fe:10:e1:eb:
22:42:58:0a:a4:7b:9f:d5:b8:f8:05:75:9e:20:ee:
92:66:72:87:33:14:09:cc:2b:40:37:39:f5:6b:67:
28:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:84:78:DE:A1:98:C1:E2:FD:90:B4:5A:94:04:71:25:07:0E:EC:4E
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DD9A9632A0A111EE84CD2A2BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:5580::/48
Signature Algorithm: sha256WithRSAEncryption
61:c1:be:ed:0d:3c:96:d7:46:72:be:50:4c:e6:0e:22:06:ab:
3d:a9:5c:fa:22:c8:8a:4a:07:3e:b1:47:8d:86:ed:29:4d:b8:
75:ec:38:3a:18:93:11:2e:11:20:9c:ab:72:7f:ff:38:32:50:
e0:41:e6:ea:a3:93:68:db:f3:69:c2:e4:15:1e:93:85:55:4c:
bc:19:0d:1c:48:0f:12:32:10:bd:22:e9:3e:58:f4:ec:5b:7e:
d7:59:74:61:df:ef:3e:fd:66:25:72:3a:2c:e2:19:fe:b9:58:
98:61:65:43:21:24:c1:fc:cb:ed:35:d9:7d:6b:55:ec:ee:9d:
30:88:ab:39:5b:38:f0:f8:9c:ec:60:6b:d0:78:e0:7c:aa:64:
0d:b3:c3:27:cb:b6:e4:3b:3b:ee:78:7a:ea:13:14:1e:89:28:
d8:1c:13:a4:61:f0:79:cc:47:b2:82:9b:33:a0:4a:a4:02:87:
5a:fa:59:64:a7:7f:ac:64:49:bc:ca:5b:e3:5c:18:40:79:38:
ff:37:0e:80:e2:8c:d1:f4:18:c4:d4:8a:ba:9b:47:0c:75:69:
ae:07:a9:41:d2:ee:1d:d5:be:be:ed:30:fa:25:87:fa:5e:c9:
a6:50:aa:56:d0:87:5a:b1:4d:99:80:85:7a:2a:30:61:d0:d5:
7f:61:96:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:16:50 2025 by rpki-client