Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/06D77958D49411EFA8DF5E69C4F9AE02.roa
File: 06D77958D49411EFA8DF5E69C4F9AE02.roa (raw, json)
Hash identifier: SIysPbQ0shw6SImSP7LGItvtceoka+GBhE2dzjDub+w=
Subject key identifier: 40:8E:3D:66:BD:45:2D:21:BE:5F:0F:00:FF:93:F1:9F:ED:99:9F:ED
Certificate issuer: /CN=A91C6A35/serialNumber=FB6B946361F0C5C82E2B06740D4BA8B0B99353F8
Certificate serial: 02
Authority key identifier: FB:6B:94:63:61:F0:C5:C8:2E:2B:06:74:0D:4B:A8:B0:B9:93:53:F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-2uUY2HwxcguKwZ0DUuosLmTU_g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/06D77958D49411EFA8DF5E69C4F9AE02.roa
Signing time: Fri 17 Jan 2025 05:29:31 +0000
ROA not before: Fri 17 Jan 2025 05:29:31 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 135028
IP address blocks: 2401:e960::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6A35/serialNumber=FB6B946361F0C5C82E2B06740D4BA8B0B99353F8
Validity
Not Before: Jan 17 05:29:31 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=6789eaba-a885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a4:94:54:4e:b0:96:99:1c:cf:1a:d6:09:8d:
89:84:d8:9a:fc:67:34:c6:cd:7f:26:bb:51:e9:07:
59:df:2f:65:d2:e8:33:28:4e:9a:7e:e0:96:f8:c2:
e2:6e:ee:bf:b7:17:81:2b:c0:66:8f:95:13:03:de:
94:af:66:89:af:94:b1:2f:03:c9:ba:b4:68:cd:ea:
25:23:d7:df:0e:59:87:6f:85:47:be:65:5c:c4:0a:
87:b4:2e:11:07:bb:b1:a9:52:46:81:64:25:2f:0b:
7e:25:97:c9:51:34:e3:0f:95:f0:af:ad:cd:9b:38:
0e:e3:d0:b5:5d:c1:66:0d:3e:7f:31:aa:a6:98:5e:
75:0b:44:e9:9e:14:af:6e:13:c6:b7:d0:6d:98:73:
d4:2a:fc:02:38:e4:03:5b:e2:00:af:b2:da:03:a3:
bb:4a:3d:0b:04:e6:98:a9:b0:97:d7:76:37:00:ce:
e2:80:c0:a9:95:d7:24:1b:8e:98:dc:aa:cc:fa:49:
44:73:10:95:a9:e4:3b:1d:5e:77:d1:10:3c:54:ba:
53:a9:6a:7e:dd:d8:82:fb:d1:25:b7:ca:1c:9a:09:
87:61:d0:ad:93:3c:d1:0c:a1:24:e7:56:c7:0e:bf:
2e:26:c7:ad:9f:ef:61:2f:6a:a2:0e:16:83:c5:0b:
b5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:8E:3D:66:BD:45:2D:21:BE:5F:0F:00:FF:93:F1:9F:ED:99:9F:ED
X509v3 Authority Key Identifier:
keyid:FB:6B:94:63:61:F0:C5:C8:2E:2B:06:74:0D:4B:A8:B0:B9:93:53:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-2uUY2HwxcguKwZ0DUuosLmTU_g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/06D77958D49411EFA8DF5E69C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:e960::/32
Signature Algorithm: sha256WithRSAEncryption
1f:b4:95:1b:f0:fa:35:f2:39:3d:89:b3:ac:7f:20:15:ea:a4:
9d:f2:8a:83:8f:b8:1d:ee:e9:40:22:69:0b:a0:df:8c:68:62:
c1:ce:aa:b1:67:77:f9:43:fc:dd:57:e9:b6:e6:7c:22:c5:76:
56:a3:ab:fc:02:d7:b2:c8:b6:5a:de:0f:be:0b:16:fb:7d:1e:
5e:a8:6d:58:14:8f:a0:db:b2:b1:ba:7b:1d:16:92:55:e3:04:
6f:f4:a2:e6:6b:48:53:ce:a3:b1:25:88:21:d6:d2:c5:92:37:
db:72:bf:36:d7:e0:25:90:87:80:de:ba:ed:b3:c7:cb:8f:9c:
fd:67:eb:91:6e:a5:17:6d:8f:24:33:44:45:75:93:25:7d:1b:
11:e8:1d:fe:85:76:34:d4:35:27:89:48:29:d9:33:f7:88:f8:
e8:01:3b:51:dd:13:92:17:b9:ab:61:a7:e2:8d:33:7b:7d:01:
58:4a:96:ad:27:a6:91:0f:41:06:f8:77:8a:5e:5e:a8:ea:ad:
32:a3:d1:f7:af:06:e7:85:68:a7:87:0f:a6:62:e9:d6:7c:52:
5b:5e:61:c6:16:9e:28:c3:ef:bd:3c:24:2e:5e:7d:8a:9a:cc:
f7:da:0d:3b:37:b7:e7:69:de:8a:96:5e:9a:87:fe:50:d4:cc:
bb:8c:e1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:13:07 2025 by rpki-client