Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/E7F77E5E42E711EF8B9EF861C4F9AE02.roa
File: E7F77E5E42E711EF8B9EF861C4F9AE02.roa (raw, json)
Hash identifier: 2lKk6v8L+otxkXH3Z6ztUescMpEPEHQiPb/n8LYQ7iQ=
Subject key identifier: CD:E0:06:D6:86:B2:66:DA:87:7C:A5:39:35:15:C1:1E:8A:9F:69:C1
Certificate issuer: /CN=A919A777/serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C
Certificate serial: 79
Authority key identifier: 64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/E7F77E5E42E711EF8B9EF861C4F9AE02.roa
Signing time: Wed 25 Sep 2024 05:49:02 +0000
ROA not before: Wed 25 Sep 2024 05:49:02 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 207338
IP address blocks: 2403:ad80:102a::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121 (0x79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A777/serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C
Validity
Not Before: Sep 25 05:49:02 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66f3a44e-2614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8c:5e:58:4f:21:9b:6f:fd:7f:db:27:cf:06:
40:ac:d4:ec:8d:9e:a5:bc:ff:44:10:51:02:82:5a:
84:4f:cb:6d:38:c9:19:a9:49:b1:02:5d:89:5d:67:
9b:85:ab:c4:83:7c:04:a4:2f:59:38:20:bb:93:eb:
6f:f1:31:14:da:15:e6:2c:ab:39:aa:8c:2b:19:11:
14:31:e5:30:2d:9d:8c:d5:42:05:2a:17:11:72:d6:
f5:e2:97:c4:84:50:ea:e0:6f:9f:37:24:d5:13:30:
aa:be:dd:13:b1:84:3a:d7:90:56:d0:7e:af:d0:61:
94:4b:f6:a2:6a:5b:b9:72:0e:4d:11:09:09:a8:02:
37:ca:04:f7:db:30:af:21:3a:50:b3:cd:38:e0:17:
9c:be:28:8b:7b:7c:11:1e:37:95:4c:69:ac:af:df:
dc:d3:e5:3a:d4:be:44:9a:19:64:05:00:58:e5:a4:
f6:9a:c5:47:c7:71:0e:53:e1:1d:e8:5d:cf:e1:77:
72:23:82:2a:0e:2d:ce:be:5c:6b:d3:6c:85:f1:c9:
21:e0:44:5a:57:cb:98:13:f1:af:cc:02:da:f1:bc:
a3:b1:13:da:6d:44:78:c6:f8:39:44:46:fd:14:42:
95:6c:b4:72:e4:ed:78:77:e6:a3:05:91:56:b2:ec:
dd:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E0:06:D6:86:B2:66:DA:87:7C:A5:39:35:15:C1:1E:8A:9F:69:C1
X509v3 Authority Key Identifier:
keyid:64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/E7F77E5E42E711EF8B9EF861C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:ad80:102a::/48
Signature Algorithm: sha256WithRSAEncryption
5a:20:85:d6:01:8d:69:2a:47:25:10:79:ed:71:c8:0b:d6:3e:
c4:98:29:66:05:54:51:5e:e3:ed:5a:26:b8:47:20:84:d6:f6:
54:e1:d7:68:84:e6:55:16:27:90:57:42:59:8d:42:aa:3a:4b:
22:25:27:a5:2b:e5:ae:8a:02:fc:7b:50:2b:f2:27:cc:29:24:
cb:8c:3d:41:bd:f1:88:fe:2d:bc:f9:1e:e4:d0:31:ed:7e:69:
e5:d9:63:b8:8c:c5:4e:92:ce:4a:1e:56:1f:f1:29:a7:d2:f6:
bc:98:80:7a:9b:05:bd:c8:78:57:72:c6:6b:ab:b6:b0:2a:c0:
4f:dc:15:80:93:e3:66:7a:27:66:97:7d:46:51:ef:06:8e:5f:
e1:ed:ee:8e:39:5b:d1:0a:9c:84:ce:34:f4:b9:e3:f5:34:14:
ac:01:18:8f:df:fa:ea:cd:67:99:53:e9:cf:31:ba:32:d4:da:
6b:22:a5:4a:32:3f:96:90:05:5f:8a:9f:e9:04:8f:bb:2a:f0:
ec:7b:c8:01:97:d3:c1:aa:50:e8:e6:96:8a:6e:ed:f6:87:c7:
61:b4:04:9a:d5:8f:be:70:c3:ab:64:72:96:c6:77:d3:20:0a:
ff:45:04:5e:74:48:bc:e7:35:89:23:d9:1b:0d:29:ae:ec:1c:
45:4b:2d:da
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgIBeTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
QTc3NzExMC8GA1UEBRMoNjQ3RDA5MjdEQjNCMTc4RTJGNjU0QTMyNjg1NTdGRTVC
NUQ2NzI5QzAeFw0yNDA5MjUwNTQ5MDJaFw0yNTEyMDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY2ZjNhNDRlLTI2MTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDJjF5YTyGbb/1/2yfPBkCs1OyNnqW8/0QQUQKCWoRPy204yRmpSbECXYldZ5uF
q8SDfASkL1k4ILuT62/xMRTaFeYsqzmqjCsZERQx5TAtnYzVQgUqFxFy1vXil8SE
UOrgb583JNUTMKq+3ROxhDrXkFbQfq/QYZRL9qJqW7lyDk0RCQmoAjfKBPfbMK8h
OlCzzTjgF5y+KIt7fBEeN5VMaayv39zT5TrUvkSaGWQFAFjlpPaaxUfHcQ5T4R3o
Xc/hd3IjgioOLc6+XGvTbIXxySHgRFpXy5gT8a/MAtrxvKOxE9ptRHjG+DlERv0U
QpVstHLk7Xh35qMFkVay7N07AgMBAAGjggKYMIIClDAdBgNVHQ4EFgQUzeAG1oay
ZtqHfKU5NRXBHoqfacEwHwYDVR0jBBgwFoAUZH0JJ9s7F44vZUoyaFV/5bXWcpww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlBNzc3LzBCQTU3MkIwRUM0
RjExRUVBMUIzODg2NkM0RjlBRTAyL1pIMEpKOXM3RjQ0dlpVb3lhRlZfNWJYV2Nw
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvWkgwSko5czdGNDR2WlVveWFGVl81YlhXY3B3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
QTc3Ny8wQkE1NzJCMEVDNEYxMUVFQTFCMzg4NjZDNEY5QUUwMi9FN0Y3N0U1RTQy
RTcxMUVGOEI5RUY4NjFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACQDrYAQKjANBgkqhkiG9w0BAQsFAAOCAQEAWiCF1gGNaSpH
JRB57XHIC9Y+xJgpZgVUUV7j7VomuEcghNb2VOHXaITmVRYnkFdCWY1CqjpLIiUn
pSvlrooC/HtQK/InzCkky4w9Qb3xiP4tvPke5NAx7X5p5dljuIzFTpLOSh5WH/Ep
p9L2vJiAepsFvch4V3LGa6u2sCrAT9wVgJPjZnonZpd9RlHvBo5f4e3ujjlb0Qqc
hM409Lnj9TQUrAEYj9/66s1nmVPpzzG6MtTaayKlSjI/lpAFX4qf6QSPuyrw7HvI
AZfTwapQ6OaWim7t9ofHYbQEmtWPvnDDq2RylsZ30yAK/0UEXnRIvOc1iSPZGw0p
ruwcRUst2g==
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:49:02 2025 by rpki-client