Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/345F56F87FE311EF80C0F71FC4F9AE02.roa
File: 345F56F87FE311EF80C0F71FC4F9AE02.roa (raw, json)
Hash identifier: GPBxxSS7tjXB56EHA0eFK8gRXpMRgACbmw5NUyFguDY=
Subject key identifier: 0C:55:A1:7E:2C:27:D4:29:33:54:43:62:E3:90:FD:5A:5E:3D:11:56
Certificate issuer: /CN=A91E0D87/serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7
Certificate serial: 04A9
Authority key identifier: 72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/345F56F87FE311EF80C0F71FC4F9AE02.roa
Signing time: Tue 31 Dec 2024 23:42:54 +0000
ROA not before: Tue 31 Dec 2024 23:42:54 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 64071
IP address blocks: 2001:df7:e400::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1193 (0x4a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0D87/serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7
Validity
Not Before: Dec 31 23:42:54 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=6774817e-ecfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5c:9c:62:2f:3f:15:73:37:ae:da:7e:98:02:
64:b9:64:b1:45:3a:73:5e:03:37:a9:63:bb:33:55:
3e:c0:ed:b5:02:be:86:3e:ba:d3:cf:5d:2c:23:27:
ad:a0:5c:78:40:f3:d2:9f:af:2e:f0:ae:c5:09:95:
c5:2f:8e:b3:85:28:37:3c:1a:48:1b:25:39:d4:2c:
62:b7:11:4a:39:72:4d:dd:1a:36:76:5e:2c:f9:f7:
0f:18:6e:38:5e:f2:28:ef:77:8d:72:77:42:5c:dc:
0a:ad:c1:f8:9b:69:48:08:24:dc:4b:6a:7e:7b:bd:
54:5e:da:67:0e:04:87:af:c7:ab:37:74:44:54:12:
5d:ea:c2:bd:33:1d:f8:03:77:ce:6b:09:d8:7f:8f:
d6:b2:43:e3:f6:68:b3:de:50:46:e8:33:2a:43:84:
86:8b:74:04:f8:22:cc:c8:8b:59:25:96:69:db:e1:
30:41:29:31:6a:86:14:fc:19:d4:0b:66:de:76:38:
fc:ea:0a:77:e1:2d:27:8f:29:43:99:27:0e:8a:ad:
25:1a:23:9c:bb:87:30:46:7f:6e:df:10:7b:f3:03:
4c:73:bf:26:11:71:44:c2:76:07:4c:70:b6:85:14:
28:6c:b8:dd:d0:ea:a1:e2:54:f9:f1:a0:8f:03:11:
25:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:55:A1:7E:2C:27:D4:29:33:54:43:62:E3:90:FD:5A:5E:3D:11:56
X509v3 Authority Key Identifier:
keyid:72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/345F56F87FE311EF80C0F71FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df7:e400::/48
Signature Algorithm: sha256WithRSAEncryption
0a:66:91:57:ef:98:4b:d7:da:8d:34:0b:74:7c:8e:47:a4:6c:
c9:75:b7:c1:f7:aa:64:b2:b0:f2:25:5c:3c:00:6c:b1:5a:8b:
78:2e:9c:f8:e1:b8:c0:c8:fa:cf:29:a7:b5:fc:a3:0b:84:d5:
b7:7d:ff:ae:5b:3b:c7:9f:df:97:b5:61:d5:8e:5f:e6:6e:df:
92:0b:f7:bd:a5:23:ef:bf:8f:45:20:96:3a:78:28:7c:b6:fd:
80:2e:70:7e:65:b8:36:36:d0:9a:84:00:8a:77:a7:33:73:ab:
a6:cf:c8:9b:fa:b7:b0:ac:9f:4a:25:1a:3c:96:d6:d6:45:66:
2e:8b:bf:d5:fa:35:b9:02:20:05:da:17:ca:5d:3d:c3:f1:5a:
8c:ba:ef:af:0b:d8:ae:4c:32:9e:2c:ea:9b:9c:16:04:d0:4c:
0d:55:5a:9f:86:05:f5:3a:3d:ae:3c:e5:0d:95:a3:41:f5:cf:
89:3a:41:69:71:55:8c:cd:82:8c:cf:ee:e0:70:5d:df:06:86:
09:a0:a6:bc:c1:b1:71:6f:92:b1:1c:c9:10:2f:6d:0e:cd:43:
e0:77:61:89:8e:22:22:9a:59:0a:3b:cf:10:e6:ea:44:ec:cb:
26:7a:61:fc:a5:ec:93:ef:a6:ca:4d:1d:9a:ec:e1:3a:b8:4a:
90:db:ac:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:46:12 2025 by rpki-client