Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/6F8A81CCF30C11ED94750772C4F9AE02.roa
File: 6F8A81CCF30C11ED94750772C4F9AE02.roa (raw, json)
Hash identifier: KeTueCm3z2LBug4KnXXzF4iTTZQ8It6Q070daguo0jI=
Subject key identifier: 67:F4:D9:EA:26:3C:52:E3:40:31:29:98:3A:A3:C6:ED:AF:49:F5:DD
Certificate issuer: /CN=A91D51A0/serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539
Certificate serial: 0334
Authority key identifier: C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/6F8A81CCF30C11ED94750772C4F9AE02.roa
Signing time: Fri 01 Mar 2024 03:05:10 +0000
ROA not before: Fri 01 Mar 2024 03:05:10 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 208690
IP address blocks: 2400:54a0:2a00::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 820 (0x334)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D51A0/serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539
Validity
Not Before: Mar 1 03:05:10 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=65e145e6-3d41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:52:cb:8e:9c:9a:f5:b3:64:95:f0:96:ca:b1:
ae:b1:84:92:b6:bf:3d:45:84:ba:fd:f9:35:89:5d:
ae:ff:60:75:93:35:24:3f:d7:1b:80:30:cb:ec:0a:
ff:53:61:8c:e0:90:4f:9b:4f:f6:33:b8:9c:bd:4e:
b9:dc:0b:2d:0c:91:b9:cf:98:00:5e:00:da:e9:80:
1d:ae:16:13:39:70:4f:5d:91:16:2c:bd:83:f5:81:
09:98:b0:22:72:fa:3d:42:27:e2:7a:ba:4d:d7:d9:
1e:eb:84:e6:40:a2:71:fc:8a:02:84:0a:a1:95:22:
5f:7f:4a:e2:99:55:46:fb:53:2a:43:68:c1:af:9c:
f4:73:c9:8a:82:b5:3f:41:41:20:64:69:80:51:24:
5c:87:7d:8a:3b:7a:66:cb:6a:11:51:8f:fc:08:06:
32:75:b5:cd:4f:73:9e:53:18:43:63:3e:6a:30:4d:
40:00:47:b9:76:a6:69:28:44:b5:93:a5:e6:83:0d:
c5:f0:6a:9d:8b:e8:3f:53:96:c2:99:ec:f5:9c:d6:
4d:87:a9:7d:17:69:75:5f:a9:74:bd:79:a6:08:a4:
3a:e3:60:c6:6f:a0:3b:57:a5:d9:61:e1:b2:f6:f2:
8b:3f:b3:56:a5:1b:3b:d4:67:a4:50:d4:4a:b3:f9:
6e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F4:D9:EA:26:3C:52:E3:40:31:29:98:3A:A3:C6:ED:AF:49:F5:DD
X509v3 Authority Key Identifier:
keyid:C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/6F8A81CCF30C11ED94750772C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:54a0:2a00::/44
Signature Algorithm: sha256WithRSAEncryption
43:01:2d:0b:cf:54:f8:b8:c4:cc:7a:06:fb:11:b8:a6:61:6a:
47:30:06:75:01:c3:41:05:ab:a5:56:8b:b5:42:c3:f5:28:f9:
e6:c3:91:3e:bf:8b:f6:1a:b4:4b:4d:bb:04:55:cb:d9:f3:a6:
6f:2e:ee:11:32:69:3e:ed:c1:2c:ad:00:85:2d:cc:df:92:b3:
c4:e2:4f:19:ec:8b:9c:b3:1e:40:b4:b0:62:6f:07:f7:f5:90:
10:ca:8e:f2:12:40:91:30:03:63:ac:5f:fa:e6:10:5a:4d:af:
4c:fd:5b:4f:d0:f9:c4:de:e7:ea:da:a9:2c:66:ba:b3:e8:3b:
95:4b:ea:c6:27:fb:44:46:69:95:50:e7:24:18:be:41:95:38:
a2:d2:d5:75:8f:46:c6:7d:e6:61:ec:a3:a5:c6:a3:37:84:c8:
59:56:4c:9d:42:b9:cd:1c:0a:1e:8a:a4:30:4d:b5:44:1c:7a:
2b:7f:6c:e3:b2:c8:e1:09:8a:d3:b5:ff:f8:ac:85:aa:ee:e0:
e2:aa:df:23:02:7c:ea:ba:77:b3:ed:d7:f9:c5:c7:fd:29:47:
fe:98:de:61:c5:98:f8:06:ba:f2:62:80:47:1a:37:17:1f:ab:
a3:46:96:cf:86:19:af:02:b6:aa:66:e8:71:4e:fe:6c:fc:1c:
02:02:c2:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:38:27 2025 by rpki-client