Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/F8F09AC071BC11EF98EE3652C4F9AE02.roa
File: F8F09AC071BC11EF98EE3652C4F9AE02.roa (raw, json)
Hash identifier: OmOKCpnNGxuTgnm/3ZUNP0n4Wl3zYcoWkWZk3CIh3c8=
Subject key identifier: 8B:E0:C7:64:4A:AB:BB:F9:62:01:AC:01:A9:B9:A7:84:9D:51:61:B1
Certificate issuer: /CN=A91A6204/serialNumber=1F6FBA3FBF7C4E751080D6743E2FCE00D294DB41
Certificate serial: 0483
Authority key identifier: 1F:6F:BA:3F:BF:7C:4E:75:10:80:D6:74:3E:2F:CE:00:D2:94:DB:41
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2-6P798TnUQgNZ0Pi_OANKU20E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/F8F09AC071BC11EF98EE3652C4F9AE02.roa
Signing time: Fri 13 Sep 2024 10:43:12 +0000
ROA not before: Fri 13 Sep 2024 10:43:12 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 146964
IP address blocks: 2001:df7:6d80::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1155 (0x483)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6204/serialNumber=1F6FBA3FBF7C4E751080D6743E2FCE00D294DB41
Validity
Not Before: Sep 13 10:43:12 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66e4173f-d71d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:96:44:bd:8b:4b:ab:5c:26:45:5d:d8:40:62:
1d:3c:8f:e2:bc:ee:36:f3:11:69:fb:53:4c:b9:e4:
4d:52:88:92:05:59:84:34:47:43:77:4e:7c:6c:94:
95:af:e0:b1:73:47:5a:c9:8b:b1:38:aa:3a:97:dc:
d0:f8:9e:7e:5d:60:f8:c6:04:d4:1c:7a:40:f8:3d:
b8:bc:88:68:51:d9:28:7b:12:dc:31:48:aa:6d:60:
7d:e8:ee:c5:a7:ce:a5:7e:de:4f:62:6c:5e:79:24:
cf:f8:14:3d:b0:5b:0e:0a:ff:aa:a6:62:72:eb:a0:
b5:bc:f7:e2:df:28:a5:bd:03:78:5e:bb:e4:42:3e:
e7:f8:fd:38:f1:77:e5:57:fb:1c:54:81:58:95:26:
40:64:de:aa:6f:43:e6:d1:bf:66:4f:1e:16:2d:d2:
8b:aa:29:44:ce:5a:81:de:17:34:36:e8:f3:a4:d4:
94:f9:13:fd:62:2b:7e:d3:18:35:49:ce:31:6c:fd:
6f:22:35:20:37:76:c7:c3:c8:6b:ff:55:36:e4:4f:
48:d9:87:7d:a8:97:ca:0e:63:8e:77:18:8a:69:35:
68:ae:82:0d:5c:b1:ac:bb:4d:75:70:64:69:1f:bf:
4d:3e:cb:33:46:8f:01:4e:94:aa:0a:f2:1f:4e:e6:
43:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:E0:C7:64:4A:AB:BB:F9:62:01:AC:01:A9:B9:A7:84:9D:51:61:B1
X509v3 Authority Key Identifier:
keyid:1F:6F:BA:3F:BF:7C:4E:75:10:80:D6:74:3E:2F:CE:00:D2:94:DB:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2-6P798TnUQgNZ0Pi_OANKU20E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/F8F09AC071BC11EF98EE3652C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df7:6d80::/48
Signature Algorithm: sha256WithRSAEncryption
18:8d:60:85:73:b2:ab:f9:b0:3d:50:d7:43:b9:b3:c0:f0:0f:
78:2e:fb:df:04:83:0c:0c:6f:25:79:6f:c2:f9:af:0d:44:c5:
1b:db:6d:08:a4:f8:0e:34:4a:f7:e1:b2:e2:01:e9:c9:12:65:
02:b8:af:d3:06:85:ff:7c:0c:e6:96:13:53:55:77:bd:65:2e:
c8:98:f2:06:08:43:ff:13:3f:44:75:bc:4a:56:f2:f5:ce:84:
c9:cc:9b:57:f4:96:5c:8d:cb:06:21:c8:2a:8a:ee:af:82:2c:
56:9d:af:49:aa:c2:93:54:9f:45:3f:21:e3:4c:4f:fc:4a:94:
42:46:c8:46:7f:b3:7e:7d:16:a6:8d:b1:89:37:4c:80:82:7c:
c0:ac:72:d4:0c:32:eb:57:e1:59:9a:fc:84:07:e7:73:2f:55:
db:2f:b8:6e:92:86:6a:52:b0:bb:71:66:b8:d3:23:65:ed:17:
7b:21:25:07:bd:23:b4:b1:d2:29:9e:d9:17:d1:d2:3e:67:9d:
6d:7c:f7:ab:bd:83:be:53:1b:6d:e8:1a:c4:5d:73:20:0a:f2:
a7:af:a1:fd:c2:cd:6a:e8:6c:d5:f9:43:64:44:9a:b9:b2:9f:
e2:8b:68:72:fc:85:b4:c1:62:b0:b6:9d:33:6d:7a:0a:df:0d:
47:ea:51:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:15:50 2025 by rpki-client