Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/90405CE2D5DD11EF99075D78C4F9AE02.roa
File: 90405CE2D5DD11EF99075D78C4F9AE02.roa (raw, json)
Hash identifier: hTL1z9/ySOlu0XaviOinYnMnBTyzcwAp4EbODVpERNU=
Subject key identifier: 54:70:F4:1E:66:45:4D:9A:E4:17:27:F6:BA:77:C2:B7:E7:D8:9D:12
Certificate issuer: /CN=A91C022C/serialNumber=D796995A776759C4264317800287EBEEEFB4BA6A
Certificate serial: 09
Authority key identifier: D7:96:99:5A:77:67:59:C4:26:43:17:80:02:87:EB:EE:EF:B4:BA:6A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15aZWndnWcQmQxeAAofr7u-0umo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/90405CE2D5DD11EF99075D78C4F9AE02.roa
Signing time: Sat 18 Jan 2025 20:48:26 +0000
ROA not before: Sat 18 Jan 2025 20:48:26 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 23470
IP address blocks: 2001:df4:ec40::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C022C/serialNumber=D796995A776759C4264317800287EBEEEFB4BA6A
Validity
Not Before: Jan 18 20:48:26 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=678c1399-07eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:3c:2a:d0:e2:56:23:fa:8c:2e:d3:47:f7:90:
b6:55:c1:16:b9:1a:b7:9a:de:e3:ba:0a:2e:f0:df:
81:2a:bc:11:11:1d:77:52:c7:23:f5:ce:8c:bd:3c:
a0:32:c7:55:e8:17:9d:04:b4:c1:fd:5d:f3:09:6e:
b6:c1:fb:e2:a2:ef:1d:4c:c4:1f:27:15:b3:bc:0a:
ee:09:80:90:a6:94:82:a2:0b:90:82:18:9e:bf:d6:
a7:90:d3:b3:35:54:94:e3:d5:a5:f1:96:1d:55:1b:
06:56:25:e3:52:d7:a4:40:30:fb:2b:c0:9e:97:db:
3c:bf:91:6b:fc:1b:68:59:55:77:1a:de:48:34:bc:
61:49:08:9a:b9:05:2d:27:08:3a:8e:4b:80:15:12:
76:65:38:93:31:0c:9a:ce:af:17:23:98:d3:20:9b:
4a:d9:42:ee:4e:88:7f:4c:7f:94:14:17:1a:58:29:
2d:35:69:7b:0d:88:d3:e0:27:f5:1d:d1:53:03:4b:
c8:f5:c5:a2:aa:48:2f:23:1f:c1:8c:a0:25:fa:98:
b7:36:cc:90:33:41:f2:c1:0e:b5:11:58:6f:4d:f0:
ac:47:e0:9d:9e:1c:00:8a:55:d9:14:26:be:3c:3b:
d4:d3:1d:f3:a9:07:a7:4d:63:d5:06:df:93:f2:f0:
30:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:70:F4:1E:66:45:4D:9A:E4:17:27:F6:BA:77:C2:B7:E7:D8:9D:12
X509v3 Authority Key Identifier:
keyid:D7:96:99:5A:77:67:59:C4:26:43:17:80:02:87:EB:EE:EF:B4:BA:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15aZWndnWcQmQxeAAofr7u-0umo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/90405CE2D5DD11EF99075D78C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:ec40::/48
Signature Algorithm: sha256WithRSAEncryption
3c:6a:df:a5:c3:82:2d:40:07:78:90:b1:78:da:7d:61:3d:42:
99:0f:d4:8e:87:e3:75:00:ac:7c:32:60:d0:42:27:de:be:bf:
8c:3e:58:46:83:21:5c:74:b7:03:4e:cf:d2:44:b4:36:52:2c:
cd:33:1f:84:5d:c7:43:1f:11:4c:5a:4f:5b:bf:c8:f1:8b:36:
cb:a1:e7:e3:df:36:6b:52:8b:ee:17:43:f2:55:ba:95:de:12:
22:d9:3e:0a:47:51:2c:e1:98:36:f2:9f:a2:76:34:5e:ef:9f:
63:40:84:fe:b7:87:8d:5e:85:07:36:68:82:0b:f4:91:0f:4a:
6b:fd:5e:34:b9:61:51:6d:82:b1:af:d8:2b:2f:1f:8c:6b:ec:
43:e9:cf:ed:c0:ee:09:ed:62:9d:d5:0b:ba:d3:62:d5:60:86:
32:90:38:81:7f:dd:f5:38:26:df:ed:93:1a:14:23:e7:b5:4d:
03:f8:b1:6d:cd:88:39:e7:48:89:31:8b:44:d7:88:b1:b4:8e:
89:c2:21:c8:ad:00:b4:e4:d9:37:8b:4a:ec:b7:f5:d5:45:ff:
48:66:4d:a8:e4:5c:45:3f:6a:d3:fb:08:ad:a1:e6:74:0f:72:
64:8b:09:0e:6d:ac:b4:08:a0:0e:00:06:b0:00:57:dd:77:62:
3c:a4:e3:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:09:11 2025 by rpki-client