Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190818/7E1F6AE2909D11EF9717F650C4F9AE02/B91F8BF69EE211EF883C7D14C4F9AE02.roa
File: B91F8BF69EE211EF883C7D14C4F9AE02.roa (raw, json)
Hash identifier: 9aXScn/l0q0sI5C2A7tBUW0Hngu1l3/fCSNKmiXLl4I=
Subject key identifier: 8E:53:48:9F:75:5B:EB:67:26:71:B6:C8:04:84:EC:1E:FB:12:9A:FB
Certificate issuer: /CN=A9190818/serialNumber=548430EAB88E4E378FB5005AFAE5CAB9C0007A1A
Certificate serial: 43
Authority key identifier: 54:84:30:EA:B8:8E:4E:37:8F:B5:00:5A:FA:E5:CA:B9:C0:00:7A:1A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIQw6riOTjePtQBa-uXKucAAeho.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190818/7E1F6AE2909D11EF9717F650C4F9AE02/B91F8BF69EE211EF883C7D14C4F9AE02.roa
Signing time: Wed 08 Jan 2025 21:00:30 +0000
ROA not before: Wed 08 Jan 2025 21:00:30 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 153371
IP address blocks: 2401:ce20::/48 maxlen: 48
2401:ce20:1::/48 maxlen: 48
2401:ce20:2::/48 maxlen: 48
2401:ce20:3::/48 maxlen: 48
2401:ce20:4::/48 maxlen: 48
2401:ce20:10::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67 (0x43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190818/serialNumber=548430EAB88E4E378FB5005AFAE5CAB9C0007A1A
Validity
Not Before: Jan 8 21:00:30 2025 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=677ee76e-27a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e0:80:33:08:14:41:ca:ff:56:73:31:6b:b8:
05:05:15:90:5d:cc:80:7a:4e:b5:23:64:33:a1:34:
a3:7c:ab:20:bc:46:a1:a4:3e:57:50:70:76:e9:f1:
22:f3:46:72:1c:60:81:4c:5e:80:29:dd:80:ad:38:
7f:f3:70:e1:ef:ad:40:8d:f6:2f:1b:47:7c:4f:07:
04:69:fd:5e:ea:73:bc:07:e3:00:73:26:5e:34:34:
41:7b:b7:2c:71:e9:8b:1f:03:b6:48:67:26:13:97:
e1:10:8d:ef:f6:4a:75:4a:12:5b:5c:17:5c:1c:ea:
8b:d4:4a:8a:b1:68:5e:17:c9:d0:be:d5:ea:b3:fe:
79:b3:24:e5:f5:0d:cd:0b:29:a8:b5:6f:b6:88:8b:
b7:a9:b5:c5:5d:98:98:c7:74:0b:27:a3:ea:d8:dc:
2a:39:d9:bb:93:0c:65:60:61:7b:be:a0:21:3f:24:
00:d0:a4:f2:83:c0:e4:99:1d:b9:ee:7d:b6:f3:ad:
54:7e:47:ed:d0:ed:90:b7:8d:71:76:4a:49:7c:69:
15:e5:a3:01:ba:84:08:e3:30:68:37:2a:2f:d8:da:
ca:00:a7:56:c4:b0:06:54:df:60:28:99:48:fd:ab:
3d:2d:8d:f2:2a:09:79:1f:d5:4f:be:8b:c9:d5:ce:
0b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:53:48:9F:75:5B:EB:67:26:71:B6:C8:04:84:EC:1E:FB:12:9A:FB
X509v3 Authority Key Identifier:
keyid:54:84:30:EA:B8:8E:4E:37:8F:B5:00:5A:FA:E5:CA:B9:C0:00:7A:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190818/7E1F6AE2909D11EF9717F650C4F9AE02/VIQw6riOTjePtQBa-uXKucAAeho.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIQw6riOTjePtQBa-uXKucAAeho.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190818/7E1F6AE2909D11EF9717F650C4F9AE02/B91F8BF69EE211EF883C7D14C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:ce20::-2401:ce20:4:ffff:ffff:ffff:ffff:ffff
2401:ce20:10::/44
Signature Algorithm: sha256WithRSAEncryption
38:4d:9c:38:79:b1:f0:49:fa:5b:65:35:99:0d:46:09:42:9e:
f0:1d:03:7f:6b:fb:68:77:fd:7e:35:fe:cc:a1:f3:e5:bc:35:
1e:6b:8b:6e:8a:8c:cf:5e:10:b2:65:6f:2f:c2:c1:43:d0:30:
2b:1f:1a:eb:85:7e:4a:9c:8d:91:bc:d6:57:01:9a:d0:9e:6a:
19:54:a8:f0:6a:6c:ba:0a:77:c7:17:3c:f5:28:43:4b:f4:b4:
5a:e2:08:2a:2d:c8:a6:b8:a5:db:a0:18:48:65:5f:3e:d5:df:
60:29:db:4a:03:86:6d:2e:46:21:5f:ad:c8:03:27:66:8b:1a:
34:3d:c5:b9:01:09:ee:77:8d:47:16:d6:c8:bb:04:a3:00:7b:
02:a8:d5:c6:8a:f3:cb:f2:9c:d9:dc:78:e7:ef:e6:64:b1:34:
23:26:4d:e7:78:a5:a1:5a:70:b0:fc:e8:52:80:98:37:25:3f:
41:0c:82:b2:11:23:7a:5b:a5:d8:8d:5a:35:ff:bc:33:fc:64:
40:59:c7:11:00:34:c6:b0:a5:e4:01:4f:70:bb:0e:b6:9a:8a:
03:01:78:13:76:8e:1a:53:f6:69:4d:1b:fd:4e:af:b9:41:cb:
7c:27:76:7c:39:c7:a8:62:94:f2:03:8b:34:05:9b:45:89:d3:
a2:d8:a6:de
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
MDgxODExMC8GA1UEBRMoNTQ4NDMwRUFCODhFNEUzNzhGQjUwMDVBRkFFNUNBQjlD
MDAwN0ExQTAeFw0yNTAxMDgyMTAwMzBaFw0yNjAxMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY3N2VlNzZlLTI3YTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC44IAzCBRByv9WczFruAUFFZBdzIB6TrUjZDOhNKN8qyC8RqGkPldQcHbp8SLz
RnIcYIFMXoAp3YCtOH/zcOHvrUCN9i8bR3xPBwRp/V7qc7wH4wBzJl40NEF7tyxx
6YsfA7ZIZyYTl+EQje/2SnVKEltcF1wc6ovUSoqxaF4XydC+1eqz/nmzJOX1Dc0L
Kai1b7aIi7eptcVdmJjHdAsno+rY3Co52buTDGVgYXu+oCE/JADQpPKDwOSZHbnu
fbbzrVR+R+3Q7ZC3jXF2Skl8aRXlowG6hAjjMGg3Ki/Y2soAp1bEsAZU32AomUj9
qz0tjfIqCXkf1U++i8nVzgu7AgMBAAGjggKqMIICpjAdBgNVHQ4EFgQUjlNIn3Vb
62cmcbbIBITsHvsSmvswHwYDVR0jBBgwFoAUVIQw6riOTjePtQBa+uXKucAAehow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkwODE4LzdFMUY2QUUyOTA5
RDExRUY5NzE3RjY1MEM0RjlBRTAyL1ZJUXc2cmlPVGplUHRRQmEtdVhLdWNBQWVo
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvVklRdzZyaU9UamVQdFFCYS11WEt1Y0FBZWhvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MDgxOC83RTFGNkFFMjkwOUQxMUVGOTcxN0Y2NTBDNEY5QUUwMi9COTFGOEJGNjlF
RTIxMUVGODgzQzdEMTRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDA0BggrBgEFBQcBBwEB/wQl
MCMwIQQCAAIwGzAQAwUFJAHOIAMHACQBziAABAMHBCQBziAAEDANBgkqhkiG9w0B
AQsFAAOCAQEAOE2cOHmx8En6W2U1mQ1GCUKe8B0Df2v7aHf9fjX+zKHz5bw1HmuL
boqMz14QsmVvL8LBQ9AwKx8a64V+SpyNkbzWVwGa0J5qGVSo8Gpsugp3xxc89ShD
S/S0WuIIKi3Ipril26AYSGVfPtXfYCnbSgOGbS5GIV+tyAMnZosaND3FuQEJ7neN
RxbWyLsEowB7AqjVxorzy/Kc2dx45+/mZLE0IyZN53iloVpwsPzoUoCYNyU/QQyC
shEjelul2I1aNf+8M/xkQFnHEQA0xrCl5AFPcLsOtpqKAwF4E3aOGlP2aU0b/U6v
uUHLfCd2fDnHqGKU8gOLNAWbRYnTotim3g==
-----END CERTIFICATE-----
Generated at Mon Apr 28 02:30:52 2025 by rpki-client