Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/59A2E9D8A01411EF8E674221C4F9AE02.roa
File: 59A2E9D8A01411EF8E674221C4F9AE02.roa (raw, json)
Hash identifier: Awesdi3w1tMsyunxz0+auFNmXjcMcElIgsBpVsZJdUI=
Subject key identifier: 19:02:43:77:FC:BE:5C:71:EA:2E:17:44:CE:03:AD:78:C4:C9:BC:AD
Certificate issuer: /CN=A91C08EE/serialNumber=158B96664FB1C9AEEEB3D28707F877FE237B02DC
Certificate serial: 01B4
Authority key identifier: 15:8B:96:66:4F:B1:C9:AE:EE:B3:D2:87:07:F8:77:FE:23:7B:02:DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FYuWZk-xya7us9KHB_h3_iN7Atw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/59A2E9D8A01411EF8E674221C4F9AE02.roa
Signing time: Mon 11 Nov 2024 10:04:33 +0000
ROA not before: Mon 11 Nov 2024 10:04:33 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 150177
IP address blocks: 2001:df1:2ec0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 436 (0x1b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C08EE/serialNumber=158B96664FB1C9AEEEB3D28707F877FE237B02DC
Validity
Not Before: Nov 11 10:04:33 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=6731d6b1-b747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a4:e2:8c:0f:e1:cc:8b:95:8b:c0:00:13:91:
44:6a:47:0f:55:fa:9d:b1:6b:4b:e2:58:8d:b4:12:
0a:dc:65:45:f9:56:07:cc:fd:5f:57:a7:45:ce:cb:
50:4d:a7:22:65:8d:cf:b2:8d:a8:ea:88:a6:b2:d9:
2d:08:58:e9:ec:35:57:23:36:ba:56:b3:c8:d6:f0:
5a:8f:83:29:d4:4c:c5:b4:91:d1:a8:8a:6a:05:91:
9e:73:4a:47:d5:66:2a:ce:13:60:d9:b7:22:d9:44:
0d:a7:79:76:a8:90:94:d3:c8:d8:11:c6:5b:a5:47:
33:6b:42:a7:df:12:bc:79:9e:dd:e4:c6:db:ab:68:
bc:e9:24:e4:54:51:a0:b2:83:95:87:d0:2f:de:14:
48:75:49:dc:5b:61:ad:48:ab:e8:af:e4:7b:bd:ec:
a5:74:d9:b5:9f:3f:17:28:53:76:1e:cc:eb:ff:be:
f9:6e:e6:47:a6:11:60:7b:4f:2b:0e:b0:11:cc:e3:
3d:ed:ee:b2:f8:75:20:57:ef:ad:07:90:45:41:58:
75:01:05:0a:35:42:76:5b:40:95:84:65:75:d0:f6:
0a:ff:e6:ff:44:83:a0:9b:d6:74:d1:52:3a:f5:c9:
2e:d7:97:e4:5d:e7:43:4d:20:40:40:b6:3c:b6:dc:
2e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:02:43:77:FC:BE:5C:71:EA:2E:17:44:CE:03:AD:78:C4:C9:BC:AD
X509v3 Authority Key Identifier:
keyid:15:8B:96:66:4F:B1:C9:AE:EE:B3:D2:87:07:F8:77:FE:23:7B:02:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FYuWZk-xya7us9KHB_h3_iN7Atw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/59A2E9D8A01411EF8E674221C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df1:2ec0::/48
Signature Algorithm: sha256WithRSAEncryption
78:48:db:4a:8b:6b:af:34:1b:1f:12:57:5a:aa:a5:cb:c3:f9:
6a:72:6f:c4:2d:99:2f:fb:ea:5d:da:d3:53:ba:03:b7:91:e6:
24:6b:af:f5:8a:97:64:4d:96:55:12:45:f4:d8:76:9a:f0:d1:
0f:2c:f6:79:2c:6b:27:40:6b:bb:e8:d0:b8:c6:ba:63:ef:03:
98:d8:2b:f8:df:b2:c9:9e:a9:75:5e:dc:fd:2c:d2:65:d5:7e:
fd:ab:29:8b:dc:31:60:9d:be:5d:6f:f9:1e:60:b2:c5:8c:57:
5e:c8:02:d1:44:eb:b1:f1:8a:19:d6:51:7e:fb:27:94:2f:c1:
3b:c9:44:0c:99:12:dc:42:22:e1:64:bf:9a:54:7c:cb:ab:0c:
e6:0b:a8:1e:3c:3a:63:c6:a5:d2:e0:a6:1b:e6:44:db:b5:ce:
ff:ef:2a:fa:a3:fa:a4:e2:16:91:e4:55:57:dc:73:d4:bc:40:
e3:16:e3:af:42:55:d2:60:00:8e:f1:8f:45:90:bf:39:de:69:
62:03:34:38:17:fb:53:01:ab:86:9f:b2:30:5f:27:36:e8:eb:
c4:13:a9:f8:09:d1:8f:e1:7c:25:5b:b1:02:12:8f:a3:ef:3e:
e2:bf:d2:43:5e:44:7c:9e:22:75:18:2b:7c:e8:24:31:fd:87:
9f:8f:59:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:00:16 2025 by rpki-client