Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/610B51267AE711EFACC0CA34C4F9AE02.roa
File: 610B51267AE711EFACC0CA34C4F9AE02.roa (raw, json)
Hash identifier: Sia8Gi3qcpCvgS981cn17WU6AtoHaTrcG1W6ziIGcuE=
Subject key identifier: 11:5E:10:94:95:4D:9A:B5:3F:C3:D2:8D:E4:20:33:71:DE:C5:78:03
Certificate issuer: /CN=A919BE9A/serialNumber=A79B82887031441990B18D1A05F9E271E7E7B8E6
Certificate serial: 0146
Authority key identifier: A7:9B:82:88:70:31:44:19:90:B1:8D:1A:05:F9:E2:71:E7:E7:B8:E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/610B51267AE711EFACC0CA34C4F9AE02.roa
Signing time: Wed 25 Sep 2024 03:06:44 +0000
ROA not before: Wed 25 Sep 2024 03:06:44 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 151331
IP address blocks: 2400:e3e0:aa00::/40 maxlen: 48
2400:e3e0:ab00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 326 (0x146)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919BE9A/serialNumber=A79B82887031441990B18D1A05F9E271E7E7B8E6
Validity
Not Before: Sep 25 03:06:44 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=66f37e44-7c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1e:47:49:41:33:81:33:da:22:b0:21:db:d4:
2f:71:f3:a4:ed:c5:8e:ef:1a:46:86:e0:3c:64:5c:
03:34:35:72:f6:5f:4d:d2:4b:e4:4a:ef:7a:fd:6d:
7b:83:d4:33:2c:ad:e3:2e:0f:ae:9c:67:e8:bb:a0:
1d:95:bf:b8:f4:cd:26:de:f5:77:6d:b7:b7:99:84:
bc:79:83:b0:a5:c5:3c:77:57:c0:3f:80:ed:ba:1c:
40:1e:40:c9:b8:d7:12:6f:b2:62:ab:ac:dc:c8:90:
2c:9b:9c:6d:3f:63:45:3d:9d:b5:4f:92:a0:24:5e:
00:d7:6a:e3:3d:d4:ca:e8:9e:1a:e8:c3:f0:11:ae:
e0:33:a0:2c:7b:0c:6f:a8:b4:73:96:48:f3:ee:70:
f9:da:21:c1:c2:71:b6:25:9d:d3:a2:c8:7e:31:11:
95:29:a2:0d:58:21:26:78:10:5d:94:bb:a2:25:50:
1b:84:44:87:de:88:75:44:68:d3:ce:f7:53:15:3c:
7a:dc:2f:1f:b5:7a:3d:bd:b9:5d:20:ac:79:8f:78:
33:38:ea:42:93:68:e6:10:31:fc:a4:11:e2:51:ea:
ae:9b:22:f0:b1:00:8d:c9:f9:b9:05:e3:5c:79:9c:
f7:c5:01:43:e8:93:d7:4d:86:3c:8e:3d:5f:bd:34:
fd:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:5E:10:94:95:4D:9A:B5:3F:C3:D2:8D:E4:20:33:71:DE:C5:78:03
X509v3 Authority Key Identifier:
keyid:A7:9B:82:88:70:31:44:19:90:B1:8D:1A:05:F9:E2:71:E7:E7:B8:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/610B51267AE711EFACC0CA34C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:e3e0:aa00::/39
Signature Algorithm: sha256WithRSAEncryption
5a:88:e8:ba:69:f5:56:fb:66:3c:91:1a:09:08:dd:23:f2:6e:
91:b7:8c:9c:c7:68:e6:24:24:9e:b6:2e:ec:47:33:7f:db:fd:
e3:3d:f9:08:90:d7:eb:33:8a:99:6d:37:9f:27:29:a4:7c:fe:
c7:b5:c1:02:93:88:0c:8c:6a:19:2f:a4:44:20:c5:04:4a:56:
98:38:74:a5:65:41:ef:27:ee:23:2d:04:db:14:98:d5:2f:18:
86:92:d5:fd:20:eb:14:d7:63:71:5a:2b:d7:07:05:28:12:a5:
03:de:b4:98:78:00:2a:15:ff:19:83:d2:a6:1e:f7:a2:20:0a:
7c:a9:82:c0:7b:81:00:0e:8d:91:81:b5:72:fc:4b:1c:ce:71:
ce:cf:9d:ff:ed:b9:35:a0:cb:b3:fc:c4:cd:72:bf:b3:46:80:
e5:50:2c:2c:2c:ab:e4:c0:29:e7:b3:ed:10:7e:3e:e9:bf:24:
17:e6:46:4f:19:ae:44:3b:f8:3b:f6:b6:d8:be:b5:47:e5:ea:
51:75:6f:ed:7b:c5:7d:d5:9a:cb:3a:3a:81:c7:d5:81:51:fe:
23:d6:ee:8b:af:85:91:48:36:10:19:23:eb:0f:49:2e:67:31:
38:89:64:d6:94:a1:62:c4:cd:1d:b1:a9:5a:38:2a:09:9e:f1:
a0:50:eb:fa
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgICAUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUJFOUExMTAvBgNVBAUTKEE3OUI4Mjg4NzAzMTQ0MTk5MEIxOEQxQTA1RjlFMjcx
RTdFN0I4RTYwHhcNMjQwOTI1MDMwNjQ0WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02NmYzN2U0NC03YzRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtR5HSUEzgTPaIrAh29QvcfOk7cWO7xpGhuA8ZFwDNDVy9l9N0kvkSu96/W17
g9QzLK3jLg+unGfou6Adlb+49M0m3vV3bbe3mYS8eYOwpcU8d1fAP4DtuhxAHkDJ
uNcSb7Jiq6zcyJAsm5xtP2NFPZ21T5KgJF4A12rjPdTK6J4a6MPwEa7gM6Asewxv
qLRzlkjz7nD52iHBwnG2JZ3Tosh+MRGVKaINWCEmeBBdlLuiJVAbhESH3oh1RGjT
zvdTFTx63C8ftXo9vbldIKx5j3gzOOpCk2jmEDH8pBHiUequmyLwsQCNyfm5BeNc
eZz3xQFD6JPXTYY8jj1fvTT9HwIDAQABo4IClzCCApMwHQYDVR0OBBYEFBFeEJSV
TZq1P8PSjeQgM3HexXgDMB8GA1UdIwQYMBaAFKebgohwMUQZkLGNGgX54nHn57jm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QkU5QS84RkExRjU2RUI4
NUUxMUVEOEU2RjQyMTNDNEY5QUUwMi9wNXVDaUhBeFJCbVFzWTBhQmZuaWNlZm51
T1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3A1dUNpSEF4UkJtUXNZMGFCZm5pY2VmbnVPWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUJFOUEvOEZBMUY1NkVCODVFMTFFRDhFNkY0MjEzQzRGOUFFMDIvNjEwQjUxMjY3
QUU3MTFFRkFDQzBDQTM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8E
EjAQMA4EAgACMAgDBgEkAOPgqjANBgkqhkiG9w0BAQsFAAOCAQEAWojoumn1Vvtm
PJEaCQjdI/JukbeMnMdo5iQknrYu7Eczf9v94z35CJDX6zOKmW03nycppHz+x7XB
ApOIDIxqGS+kRCDFBEpWmDh0pWVB7yfuIy0E2xSY1S8YhpLV/SDrFNdjcVor1wcF
KBKlA960mHgAKhX/GYPSph73oiAKfKmCwHuBAA6NkYG1cvxLHM5xzs+d/+25NaDL
s/zEzXK/s0aA5VAsLCyr5MAp57PtEH4+6b8kF+ZGTxmuRDv4O/a22L61R+XqUXVv
7XvFfdWayzo6gcfVgVH+I9bui6+FkUg2EBkj6w9JLmcxOIlk1pShYsTNHbGpWjgq
CZ7xoFDr+g==
-----END CERTIFICATE-----
Generated at Sun Apr 27 02:01:16 2025 by rpki-client