Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/65552C3AE8D411ED8D0FAD45C4F9AE02.roa
File: 65552C3AE8D411ED8D0FAD45C4F9AE02.roa (raw, json)
Hash identifier: ifJGYL5q49BedEWwURROMxMLmQuzo6sd4i9VU7gjPWk=
Subject key identifier: EA:27:72:7B:20:70:50:E8:67:B2:36:87:AA:B8:4B:5D:33:75:1B:34
Certificate issuer: /CN=A91A395C/serialNumber=0D8B71D86B5E202933BCB02A5B6D74092A52A17C
Certificate serial: 3482
Authority key identifier: 0D:8B:71:D8:6B:5E:20:29:33:BC:B0:2A:5B:6D:74:09:2A:52:A1:7C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYtx2GteICkzvLAqW210CSpSoXw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/65552C3AE8D411ED8D0FAD45C4F9AE02.roa
Signing time: Sun 22 Dec 2024 14:50:52 +0000
ROA not before: Sun 22 Dec 2024 14:50:52 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 142435
IP address blocks: 2403:5000:187::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13442 (0x3482)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A395C/serialNumber=0D8B71D86B5E202933BCB02A5B6D74092A52A17C
Validity
Not Before: Dec 22 14:50:52 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=6768274c-3a4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:de:4f:b6:51:f2:94:0f:b2:2a:88:5a:39:68:
12:b0:79:69:57:3f:f4:d8:ea:53:b3:de:1e:71:7b:
02:b7:9c:3a:7e:a4:54:14:7f:c8:d6:e2:14:eb:0f:
48:69:09:28:3b:07:1b:7f:24:fb:3b:b8:59:b1:4e:
cd:87:0a:81:3a:14:87:93:f7:93:8a:d1:14:52:b8:
fc:f4:d6:31:aa:d3:4b:4d:99:c0:b8:f7:04:9d:fe:
95:2d:fd:72:0f:39:6f:4d:36:ec:78:23:62:0e:ea:
96:02:1b:72:33:f0:e2:1c:21:bf:c1:e0:c3:66:58:
e1:20:6d:4d:3a:8e:e2:b3:ac:4a:3d:a3:ef:e4:8a:
ff:c6:8d:ae:08:49:fc:dc:2a:3b:76:c3:15:5c:16:
ed:10:c8:12:59:2d:b4:53:88:a4:67:18:6c:23:ff:
cc:b0:f3:19:50:a5:71:31:57:b8:7e:a6:92:ec:1a:
bc:3b:23:4c:ab:b8:43:a8:15:0f:29:1e:69:42:1a:
b5:36:b2:68:ea:7c:86:f9:b1:b8:d5:07:cc:47:18:
48:fb:da:67:fa:0d:76:3d:11:80:4d:ed:e4:60:fd:
9e:88:4c:e2:9f:b5:27:a8:97:62:63:3c:fb:57:7f:
87:32:8c:fc:3f:17:eb:49:8c:fc:70:c3:19:48:79:
d2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:27:72:7B:20:70:50:E8:67:B2:36:87:AA:B8:4B:5D:33:75:1B:34
X509v3 Authority Key Identifier:
keyid:0D:8B:71:D8:6B:5E:20:29:33:BC:B0:2A:5B:6D:74:09:2A:52:A1:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYtx2GteICkzvLAqW210CSpSoXw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/65552C3AE8D411ED8D0FAD45C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:5000:187::/48
Signature Algorithm: sha256WithRSAEncryption
13:54:92:4d:cb:0b:e6:52:80:e9:03:8d:41:a2:43:7f:6e:16:
99:04:5e:a7:8b:ed:b8:37:c6:02:68:de:e9:ea:4f:ad:0d:50:
d0:c2:83:0a:8f:34:99:28:14:9c:eb:9c:77:96:17:10:3c:b0:
b5:65:91:21:f5:af:24:78:aa:be:b6:9e:5e:cb:93:c2:10:ca:
62:0b:49:e9:b3:b0:95:92:84:da:1e:66:b2:ab:5a:25:c6:45:
54:44:e0:89:bc:2f:e3:1b:c4:6a:b3:cc:a4:4f:60:93:cc:26:
8f:87:f1:64:e3:0b:f8:22:24:97:0c:d9:5f:a7:70:71:ed:15:
7e:5e:35:cd:29:2d:f2:dd:b9:d7:61:d3:92:e3:f2:b0:1a:6a:
f3:65:b0:a5:ad:59:e2:c1:62:41:17:c3:88:2a:87:8a:97:fe:
37:f7:91:ba:a6:7f:77:31:93:7e:08:ca:f9:ac:81:cc:f3:c1:
68:96:62:34:d4:4d:a3:9b:03:86:ec:cd:af:d7:5a:51:48:ed:
dc:ec:61:7c:2b:c3:bf:fa:15:40:d1:82:2c:1a:8d:56:55:f4:
4c:e6:4b:51:bd:7e:6f:c8:31:6a:3d:b9:d9:a1:c9:54:6a:0e:
3d:ed:8d:22:c8:fe:a6:b5:7d:50:6f:f9:bd:3b:19:81:b5:09:
a3:da:84:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:56:37 2025 by rpki-client