Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/7D2E766CE5AF11EE9A0A642FC4F9AE02.roa
File: 7D2E766CE5AF11EE9A0A642FC4F9AE02.roa (raw, json)
Hash identifier: FB0V4RMdFHeXRpqHQF3eni47ItP+S5H4Tlgoc4AQRYQ=
Subject key identifier: 67:94:78:AF:17:4A:D5:9E:02:B0:59:31:C8:CB:18:E1:13:E9:07:10
Certificate issuer: /CN=A91B65AC/serialNumber=73061BA9040181EC0AEB4D8F6E003F838FC9C48F
Certificate serial: 05
Authority key identifier: 73:06:1B:A9:04:01:81:EC:0A:EB:4D:8F:6E:00:3F:83:8F:C9:C4:8F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwYbqQQBgewK602PbgA_g4_JxI8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/7D2E766CE5AF11EE9A0A642FC4F9AE02.roa
Signing time: Tue 19 Mar 2024 05:13:58 +0000
ROA not before: Tue 19 Mar 2024 05:13:58 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 152594
IP address blocks: 2001:df3:8240::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B65AC/serialNumber=73061BA9040181EC0AEB4D8F6E003F838FC9C48F
Validity
Not Before: Mar 19 05:13:58 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=65f91f16-0e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:20:44:0a:c8:ed:e9:50:e9:05:45:15:8e:5d:
73:55:1f:f6:e8:d5:32:8c:4d:41:27:ba:73:95:e2:
1d:c8:3a:61:d2:33:4a:dc:0c:cb:b5:71:fa:31:d7:
7d:87:49:67:65:ee:0b:00:d2:f4:98:cd:ce:98:4e:
bd:36:4f:2d:39:53:aa:8e:4b:cb:2a:e5:c7:5f:5a:
35:16:76:ef:8d:05:1c:11:72:a9:f1:60:31:1e:01:
a7:c7:74:25:c9:2e:48:d5:b0:5c:45:9b:34:50:84:
6e:ee:57:b8:f0:50:95:b0:8f:02:dc:fb:83:f4:ce:
2b:43:41:5c:d9:57:df:cb:88:a7:84:b2:d1:a3:3d:
61:83:81:bb:04:85:be:35:63:92:26:c7:cd:28:08:
ef:9b:92:19:06:91:02:98:e2:16:48:c5:ea:b7:85:
2f:a2:f8:b5:e0:e5:94:3e:32:8f:93:dd:9f:78:e7:
26:71:26:59:24:8a:0e:9f:c5:09:fb:af:5d:26:68:
7a:93:a2:5d:99:2e:f8:7c:af:39:61:e9:de:08:61:
28:dd:c4:3a:42:83:33:24:3e:88:85:e7:ff:38:54:
71:b1:68:ac:e4:64:0a:c0:fc:29:f1:f9:d4:f7:a5:
a9:09:87:65:d7:13:de:fb:e3:73:84:81:1f:35:85:
b1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:94:78:AF:17:4A:D5:9E:02:B0:59:31:C8:CB:18:E1:13:E9:07:10
X509v3 Authority Key Identifier:
keyid:73:06:1B:A9:04:01:81:EC:0A:EB:4D:8F:6E:00:3F:83:8F:C9:C4:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/cwYbqQQBgewK602PbgA_g4_JxI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwYbqQQBgewK602PbgA_g4_JxI8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/7D2E766CE5AF11EE9A0A642FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:8240::/48
Signature Algorithm: sha256WithRSAEncryption
40:65:0e:6c:f7:af:7c:db:6e:28:7f:d7:a2:a2:87:58:b1:e9:
f9:2e:48:84:29:6e:07:0c:4b:ef:0b:39:86:ee:b1:c0:cf:6e:
21:cb:96:c4:4a:b8:6f:13:76:5e:3b:da:32:15:20:dd:74:27:
fd:ad:8b:8d:02:74:63:ca:6b:4c:69:5f:16:40:35:06:ad:31:
ee:25:f1:48:cc:ca:4f:47:8b:f7:13:a4:81:85:c2:4a:3f:cc:
73:c9:4f:52:0e:a8:9e:53:bd:93:53:85:8c:d3:20:5f:bd:19:
52:de:fb:ad:06:1e:bd:3d:8d:dc:39:e2:1c:b2:e6:06:f4:e9:
17:c6:ee:ce:7a:36:ee:fb:67:7b:e0:86:c7:fc:17:c7:16:3c:
41:cb:be:b9:15:a7:07:cc:5f:b4:c7:2a:0b:e8:f2:28:7a:07:
27:40:36:07:f6:51:ec:fe:d8:89:4d:4e:ec:25:0f:f1:27:49:
dd:9d:d8:a4:a7:77:1b:ac:e3:db:3f:8e:bc:21:14:3a:8a:76:
96:9d:b0:17:9c:af:c8:fb:d1:99:bd:52:86:0c:09:cd:fd:40:
aa:99:48:fc:6b:af:9c:fd:8c:a2:72:17:f2:af:76:97:ff:aa:
67:3d:cd:95:6e:43:56:3d:d1:47:8a:5b:bd:32:91:a3:a7:7e:
24:ca:35:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:25:01 2025 by rpki-client