Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/DD0545F6324A11EFA615F80FC4F9AE02.roa
File: DD0545F6324A11EFA615F80FC4F9AE02.roa (raw, json)
Hash identifier: mcClfxKa9uWF/j7dnojdzff39MRT3F+Ocj/LoLSS9jw=
Subject key identifier: 84:31:1E:CF:D9:64:15:4F:C7:94:2E:7C:3D:BB:A6:FF:A6:30:3B:0E
Certificate issuer: /CN=A919A777/serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C
Certificate serial: 7A
Authority key identifier: 64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/DD0545F6324A11EFA615F80FC4F9AE02.roa
Signing time: Wed 25 Sep 2024 05:49:04 +0000
ROA not before: Wed 25 Sep 2024 05:49:04 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 215084
IP address blocks: 2403:ad80:101a::/48 maxlen: 48
2403:ad80:101b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122 (0x7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A777/serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C
Validity
Not Before: Sep 25 05:49:04 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66f3a450-5cb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1e:a4:f5:a6:38:69:50:7b:a1:39:e7:2e:6a:
49:bf:d3:f1:34:7f:c1:fd:2d:ba:f3:0b:53:8f:10:
34:a9:a9:05:2d:e0:19:f1:41:ef:d6:17:d4:51:a4:
1a:de:24:17:95:09:c5:c4:c3:24:e5:fd:c2:69:c7:
6e:b9:7a:03:50:f4:99:34:16:9c:e5:b2:0b:e1:06:
3d:20:5a:b7:ce:d5:05:56:7e:09:d5:df:67:61:b7:
f3:8b:92:46:f7:f3:4c:e9:61:e1:32:69:17:d3:d1:
5d:4c:e6:25:9f:99:7b:bb:eb:03:62:f2:c1:61:17:
ce:e3:6e:28:d0:00:38:0b:2a:e6:4e:ec:02:46:ba:
89:29:e8:4e:5e:44:b3:22:4c:67:4c:65:01:75:20:
fe:53:d5:2f:2e:6f:88:c6:0a:46:6b:f8:34:51:a0:
d6:13:df:b5:62:12:46:7f:ea:75:fd:e5:ed:ec:c5:
93:2c:04:0c:d9:f8:2a:ef:df:3f:ff:dd:d0:fd:2e:
2b:b4:2e:fe:f8:ca:c9:0a:ff:8a:b4:92:ac:5a:00:
c0:fd:88:0e:a9:e0:77:47:1e:d5:ae:28:67:c1:3e:
66:f4:a6:0e:0a:89:64:22:46:97:13:05:9e:4a:8c:
9e:42:3f:36:61:f6:f4:41:65:41:0b:e1:79:33:21:
95:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:31:1E:CF:D9:64:15:4F:C7:94:2E:7C:3D:BB:A6:FF:A6:30:3B:0E
X509v3 Authority Key Identifier:
keyid:64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/DD0545F6324A11EFA615F80FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:ad80:101a::/47
Signature Algorithm: sha256WithRSAEncryption
1d:22:5f:50:43:8b:eb:16:a0:55:97:bb:2b:19:1e:36:cb:5b:
8a:a0:fe:a3:03:8a:c3:73:ab:36:69:ea:aa:3d:c6:c3:a5:8f:
14:1b:f4:0a:0f:04:f5:45:4c:2c:86:57:2e:53:d0:a0:ae:43:
2a:1d:31:16:06:b5:a7:74:33:b2:09:0b:9b:33:62:f9:b5:17:
8d:e4:08:47:50:bf:5f:ce:c3:54:24:39:97:4e:00:26:c7:4c:
67:8e:85:38:41:79:35:96:5a:04:33:ff:76:8d:5e:16:9b:d9:
63:05:a6:3c:4f:00:ea:e7:d5:8e:96:58:14:75:e0:ab:ad:91:
72:3d:ff:18:7b:1e:4c:e4:ad:5f:c2:94:5b:7c:aa:60:a7:80:
74:27:77:cb:66:d3:44:f6:67:44:f5:93:86:c7:8f:a4:9b:ab:
1d:61:c4:20:27:56:65:2a:20:76:92:ed:6f:83:05:09:4d:e0:
3e:18:5f:97:fe:9b:31:f1:cc:71:1c:90:0f:31:f8:ae:fe:46:
95:72:52:09:6d:e7:3c:04:c5:d3:65:55:ac:b8:ac:e1:3b:ea:
c3:3c:6a:e1:d6:0c:11:8f:d8:1b:50:96:38:d3:2f:a4:32:a8:
d6:01:73:3e:c5:40:12:9b:7a:e0:fa:6b:41:7c:61:c3:f1:a8:
be:57:f3:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:15:55 2025 by rpki-client