Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/70AB4F0A638B11EFA99DB91FC4F9AE02.roa
File: 70AB4F0A638B11EFA99DB91FC4F9AE02.roa (raw, json)
Hash identifier: qllvLWe7EQwmCpJH/oR414l95EH0Xa6wu4InJZSdhu0=
Subject key identifier: 9A:EE:36:B7:E4:8E:1F:3B:C5:E7:DF:EB:54:4C:0A:E9:E5:3A:C5:C3
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 4635
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/70AB4F0A638B11EFA99DB91FC4F9AE02.roa
Signing time: Thu 05 Sep 2024 03:35:31 +0000
ROA not before: Thu 05 Sep 2024 03:35:31 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 152975
IP address blocks: 2001:df4:2c40::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17973 (0x4635)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Sep 5 03:35:31 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66d92702-7c75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:eb:d6:f4:c9:fc:81:ef:1d:e8:23:af:44:41:
bc:3e:20:63:7e:45:44:3a:0f:c9:9d:d9:ae:a0:92:
6a:82:cb:d5:b2:8c:0d:e1:13:53:90:96:7b:48:03:
4c:48:83:2f:04:3f:9f:af:fa:f0:ea:85:94:43:e6:
66:34:6f:72:15:77:09:90:74:42:df:77:a5:1d:7a:
41:95:90:76:59:7c:0b:7d:94:e3:eb:17:7e:e2:c4:
7b:0b:5b:79:bb:a4:81:c6:df:40:7a:7c:c4:7a:be:
93:0d:94:0d:b6:f5:f8:64:4e:b1:61:a5:5d:5b:ee:
ff:67:b8:83:f1:06:9d:6e:f7:c2:70:1d:fd:6f:d5:
4f:ba:1b:92:65:b7:24:a1:3b:e1:1d:b5:f4:c1:00:
58:b3:6b:c7:61:30:08:84:c3:48:b9:13:d3:5e:67:
5f:f1:aa:d8:5d:4b:c5:79:97:8c:d7:fd:7d:71:8c:
8a:db:63:09:5a:db:e1:65:a4:f7:15:22:98:81:44:
d0:3b:03:a2:98:1f:2e:e8:81:69:14:51:b6:0a:e5:
0b:94:d6:07:a3:1c:d3:b4:82:84:47:33:c4:47:e4:
45:4f:22:7c:8a:79:6a:ac:d0:9c:d2:87:0d:87:a3:
f6:9e:32:22:6b:bb:53:2c:5e:8c:44:1c:11:8e:6c:
07:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:EE:36:B7:E4:8E:1F:3B:C5:E7:DF:EB:54:4C:0A:E9:E5:3A:C5:C3
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/70AB4F0A638B11EFA99DB91FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:2c40::/48
Signature Algorithm: sha256WithRSAEncryption
2c:e4:aa:81:b2:42:fb:32:a5:a8:6f:78:16:f9:80:0d:ec:ae:
16:f4:a8:30:79:7f:e2:da:81:9b:76:7f:49:53:00:72:1c:ca:
bd:64:be:c3:0b:37:94:fc:10:bd:db:b7:b8:0d:e4:da:9f:07:
60:35:d1:15:c0:04:83:7f:69:e3:fd:86:d1:5d:7b:92:17:b6:
c7:3b:9e:a9:28:7f:ab:06:f0:01:86:ab:1b:0b:0a:73:20:34:
18:e4:58:3e:6a:6d:24:2c:e3:58:18:3b:e6:95:e7:31:81:f4:
88:ba:47:82:88:51:c6:d4:f9:cf:fe:28:c3:41:2a:8b:a7:55:
08:cb:a4:60:a3:8e:7a:22:35:dd:84:27:9e:08:21:5f:73:81:
28:f1:c1:e8:80:5d:a9:cb:12:60:c9:04:3c:c4:19:00:b9:55:
e9:0f:f4:fb:cd:05:10:2d:db:5a:73:ac:9e:4f:23:c9:32:a4:
a0:9b:44:5c:74:2d:dc:87:c4:77:db:34:05:82:46:ce:55:5c:
b1:09:a9:7e:45:97:a0:60:6b:32:fb:25:3b:37:2f:c9:95:b9:
78:cc:ca:1f:f8:53:4d:02:d6:6f:46:c2:67:51:9d:d2:82:ed:
dc:df:d8:90:0d:17:4b:30:b0:14:f5:43:e2:0d:e6:8e:b4:db:
74:47:34:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:07:38 2025 by rpki-client