Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/C352565AC6E011EF87D90241C4F9AE02.roa
File: C352565AC6E011EF87D90241C4F9AE02.roa (raw, json)
Hash identifier: UXlrlWrOxReW5G8Eu3eEFovhfHXZti6fTTd2hbFPI6I=
Subject key identifier: 41:5A:FC:78:14:AC:91:03:34:14:7E:FC:E4:3E:1C:7D:BE:F7:FE:21
Certificate issuer: /CN=A91A192D/serialNumber=A81D0D61F7B730DDB742CC48ADD88A04D46FD024
Certificate serial: FE
Authority key identifier: A8:1D:0D:61:F7:B7:30:DD:B7:42:CC:48:AD:D8:8A:04:D4:6F:D0:24
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/C352565AC6E011EF87D90241C4F9AE02.roa
Signing time: Mon 30 Dec 2024 19:03:32 +0000
ROA not before: Mon 30 Dec 2024 19:03:32 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 152300
IP address blocks: 2001:df3:5240::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 254 (0xfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A192D/serialNumber=A81D0D61F7B730DDB742CC48ADD88A04D46FD024
Validity
Not Before: Dec 30 19:03:32 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=6772ee84-ff00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:53:a6:e7:d0:a0:2b:e7:86:28:29:f8:14:bf:
66:c5:c4:98:34:39:98:56:4f:13:fe:b0:8a:0f:da:
a9:b2:bb:0d:db:b6:fd:86:0e:6d:aa:ea:50:aa:b4:
1f:32:ac:89:45:d2:91:7e:2e:1f:3c:76:e0:76:97:
88:31:fc:83:51:8c:6f:d9:94:17:69:3f:4b:f6:59:
a7:84:60:0f:fe:c4:9c:d8:9f:27:2e:67:4c:63:08:
0e:af:dc:ea:c0:3c:c8:68:43:3e:95:96:07:7f:f1:
cc:d6:ed:2a:91:85:1c:56:0f:f6:62:76:b7:d2:f6:
35:7d:77:68:45:7c:2c:4b:e8:5c:62:5e:8d:9f:02:
43:25:ef:19:68:c3:ae:24:5f:14:bc:b4:88:7c:43:
c9:e2:fd:c0:c6:ac:48:d0:72:b5:d4:8e:59:56:cf:
7e:68:22:37:44:76:5f:b0:64:78:32:6c:39:b2:97:
61:f5:a5:08:0a:b2:d6:19:07:7e:ba:5c:d9:86:fa:
4b:b9:a8:17:76:ba:9a:81:a3:e1:aa:98:7d:66:22:
3e:97:1c:13:c6:d4:55:39:78:c8:86:e3:60:56:4b:
d5:3b:73:3a:7c:d1:2a:e7:55:d7:b9:e3:5a:4b:1b:
b8:99:0a:68:8a:f9:a4:43:a6:53:67:73:5f:c9:7b:
e6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:5A:FC:78:14:AC:91:03:34:14:7E:FC:E4:3E:1C:7D:BE:F7:FE:21
X509v3 Authority Key Identifier:
keyid:A8:1D:0D:61:F7:B7:30:DD:B7:42:CC:48:AD:D8:8A:04:D4:6F:D0:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/C352565AC6E011EF87D90241C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:5240::/48
Signature Algorithm: sha256WithRSAEncryption
9f:20:26:3e:73:0e:2c:4e:df:1f:1e:e8:63:04:be:db:5e:65:
af:46:e7:d6:0f:19:7e:56:d2:a8:7e:7c:a0:b0:69:ae:37:05:
05:cc:03:cc:cb:ed:37:6a:31:6c:16:5f:a8:ca:e8:2c:69:fc:
1d:67:84:d0:79:a8:d7:5a:7e:9a:15:04:36:65:9d:52:8d:dd:
4d:21:e9:82:ce:db:d6:94:8d:41:fe:9f:2c:df:f1:be:95:5d:
a8:a1:4f:09:3b:b6:da:ca:08:79:7b:1c:df:7b:49:7a:f3:48:
6a:57:6d:19:92:fc:df:6e:5e:8d:ee:1f:bc:ee:fd:00:c6:85:
c9:87:6c:2c:f7:73:a5:4b:39:ad:06:3a:40:b5:cf:22:e5:2a:
10:11:f0:fb:64:11:24:d1:5a:2e:24:07:8a:08:13:0a:b2:ca:
98:3e:85:40:77:7e:77:61:51:cd:a7:a0:e6:6b:6b:8c:98:a8:
fb:39:96:08:51:37:e9:c2:02:69:d9:04:0f:a8:50:a8:2c:ac:
59:9d:ad:9e:31:64:45:96:b3:eb:28:fc:d3:58:da:fc:bc:35:
04:56:8d:52:62:21:ee:9a:63:fd:18:3d:8e:13:e2:75:89:d6:
4d:21:78:fc:02:89:d5:76:61:ab:d6:51:32:10:ce:61:8e:d1:
de:19:d6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:50:14 2025 by rpki-client