Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/12FD08CAC88411ECAAB5BD09C4F9AE02.roa
File: 12FD08CAC88411ECAAB5BD09C4F9AE02.roa (raw, json)
Hash identifier: Rk9fezvR7MLf0U22xpSZ4jUyV+Jwv2bIeNDcvnRfGXA=
Subject key identifier: 08:82:83:0A:9B:8F:4F:5C:56:93:8E:13:D1:71:B3:4E:D0:F4:6D:EC
Certificate issuer: /CN=A91998BE/serialNumber=D0D0D6CD68770C38783BBEB841B112D0560174A2
Certificate serial: 0839
Authority key identifier: D0:D0:D6:CD:68:77:0C:38:78:3B:BE:B8:41:B1:12:D0:56:01:74:A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NDWzWh3DDh4O764QbES0FYBdKI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/12FD08CAC88411ECAAB5BD09C4F9AE02.roa
Signing time: Tue 24 Dec 2024 20:39:30 +0000
ROA not before: Tue 24 Dec 2024 20:39:30 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 400384
IP address blocks: 2403:f5c0::/32 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2105 (0x839)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91998BE/serialNumber=D0D0D6CD68770C38783BBEB841B112D0560174A2
Validity
Not Before: Dec 24 20:39:30 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=676b1c02-37ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8f:ae:a4:52:af:7d:8c:11:b5:4e:32:4e:4e:
69:ae:8b:74:d4:51:57:59:69:18:8d:c4:56:7b:53:
c6:0f:6c:71:d4:88:f2:b5:f7:a3:e2:c9:a8:b7:d3:
57:e3:a7:18:b4:7a:a3:5c:9a:56:8c:19:8a:66:4d:
f0:2f:34:a3:e0:ab:69:f0:37:5e:c1:23:d9:d3:f3:
08:49:e2:22:e7:3b:93:fd:07:2c:43:82:7b:2b:c9:
e8:db:9b:3a:81:f3:66:d6:84:68:89:b3:48:2a:d9:
fa:5d:1b:48:4b:d7:df:89:fd:f1:bb:a7:c3:e2:b3:
0e:52:cc:14:5a:99:f0:5f:08:8b:a1:67:d9:29:d7:
9b:0a:4f:b7:43:22:1a:d1:64:6d:7f:02:9a:79:f3:
88:72:f4:89:af:51:4a:7b:b8:d9:17:0b:de:c1:1a:
e5:42:8a:69:41:ba:86:d4:1b:04:68:c1:48:da:25:
f3:1d:d7:11:8c:95:99:db:49:f3:9d:be:75:3d:c5:
48:b9:49:92:96:45:c1:46:ab:53:24:f9:4c:24:49:
54:00:c5:d5:57:8a:8b:38:fc:df:07:76:0e:4c:b8:
5d:af:c2:8c:01:d4:3c:4f:97:48:46:91:14:3e:f8:
44:ab:0d:e4:c4:87:5f:3b:88:d4:b4:51:d4:d7:54:
3e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:82:83:0A:9B:8F:4F:5C:56:93:8E:13:D1:71:B3:4E:D0:F4:6D:EC
X509v3 Authority Key Identifier:
keyid:D0:D0:D6:CD:68:77:0C:38:78:3B:BE:B8:41:B1:12:D0:56:01:74:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NDWzWh3DDh4O764QbES0FYBdKI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/12FD08CAC88411ECAAB5BD09C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:f5c0::/32
Signature Algorithm: sha256WithRSAEncryption
5d:64:84:d5:32:7d:e5:7a:ec:59:f2:32:f9:8c:21:2d:34:7f:
a9:bf:ff:1a:41:7e:47:ff:1a:d2:cf:8f:5c:85:43:bb:8a:b6:
c0:de:02:1a:a8:ef:24:29:7f:89:c3:5a:da:78:81:74:cc:d2:
96:82:e4:64:a0:44:54:79:de:94:c1:57:32:1c:28:2c:16:48:
a3:3d:85:da:81:83:14:70:0c:f2:40:e6:7a:1a:cc:dd:27:62:
a7:6a:71:fe:dc:c7:3d:30:1c:29:90:de:8e:c8:68:53:49:bb:
04:99:07:a2:d2:03:d7:ef:05:11:b3:ed:7a:7b:d3:98:53:28:
77:b2:b3:97:40:14:5e:bd:65:c0:9e:76:46:c8:e2:75:5d:27:
5b:94:75:3c:fb:2b:6c:58:bd:68:f9:d4:b5:a2:0c:03:ed:a2:
89:61:2e:0a:af:f4:35:7e:01:2c:91:d9:be:7c:c8:4c:7b:aa:
80:b7:0b:5d:02:85:82:d3:bb:57:a3:ca:b7:44:2d:b7:96:2c:
e6:cd:e8:b3:f1:98:7c:6a:c3:ef:db:28:e1:be:38:6b:03:7a:
d1:7e:0d:d1:5b:c5:05:4d:71:1f:5e:21:d0:bc:2a:72:e9:90:
77:74:57:e2:f7:c6:7e:01:e0:bc:6f:c6:d2:e6:0b:f4:83:0d:
97:e4:14:8e
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgICCDkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTk4QkUxMTAvBgNVBAUTKEQwRDBENkNENjg3NzBDMzg3ODNCQkVCODQxQjExMkQw
NTYwMTc0QTIwHhcNMjQxMjI0MjAzOTMwWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzZiMWMwMi0zN2FkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqY+upFKvfYwRtU4yTk5prot01FFXWWkYjcRWe1PGD2xx1Ijytfej4smot9NX
46cYtHqjXJpWjBmKZk3wLzSj4Ktp8DdewSPZ0/MISeIi5zuT/QcsQ4J7K8no25s6
gfNm1oRoibNIKtn6XRtIS9ffif3xu6fD4rMOUswUWpnwXwiLoWfZKdebCk+3QyIa
0WRtfwKaefOIcvSJr1FKe7jZFwvewRrlQoppQbqG1BsEaMFI2iXzHdcRjJWZ20nz
nb51PcVIuUmSlkXBRqtTJPlMJElUAMXVV4qLOPzfB3YOTLhdr8KMAdQ8T5dIRpEU
PvhEqw3kxIdfO4jUtFHU11Q+cwIDAQABo4ICljCCApIwHQYDVR0OBBYEFAiCgwqb
j09cVpOOE9Fxs07Q9G3sMB8GA1UdIwQYMBaAFNDQ1s1odww4eDu+uEGxEtBWAXSi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OThCRS8xNTBFNTdDNkNG
NDkxMUVBOUNDOTM1M0VDNEY5QUUwMi8wTkRXeldoM0REaDRPNzY0UWJFUzBGWUJk
S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBORFd6V2gzRERoNE83NjRRYkVTMEZZQmRLSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTk4QkUvMTUwRTU3QzZDRjQ5MTFFQTlDQzkzNTNFQzRGOUFFMDIvMTJGRDA4Q0FD
ODg0MTFFQ0FBQjVCRDA5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAkA/XAMA0GCSqGSIb3DQEBCwUAA4IBAQBdZITVMn3leuxZ
8jL5jCEtNH+pv/8aQX5H/xrSz49chUO7irbA3gIaqO8kKX+Jw1raeIF0zNKWguRk
oERUed6UwVcyHCgsFkijPYXagYMUcAzyQOZ6GszdJ2KnanH+3Mc9MBwpkN6OyGhT
SbsEmQei0gPX7wURs+16e9OYUyh3srOXQBRevWXAnnZGyOJ1XSdblHU8+ytsWL1o
+dS1ogwD7aKJYS4Kr/Q1fgEskdm+fMhMe6qAtwtdAoWC07tXo8q3RC23lizmzeiz
8Zh8asPv2yjhvjhrA3rRfg3RW8UFTXEfXiHQvCpy6ZB3dFfi98Z+AeC8b8bS5gv0
gw2X5BSO
-----END CERTIFICATE-----
Generated at Sat Apr 26 07:49:08 2025 by rpki-client