Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/D79FB786B26F11EFB2BFFC58C4F9AE02.roa
File: D79FB786B26F11EFB2BFFC58C4F9AE02.roa (raw, json)
Hash identifier: zF2lUZusEG3deab0rsy4oWCVgxqrmDytRYZ4DuJdhaU=
Subject key identifier: 8C:37:CD:81:30:CE:76:04:EF:79:23:F9:CD:EC:CC:87:2B:F7:9F:A4
Certificate issuer: /CN=A91ED9F9/serialNumber=92EFD5C0B9201A7ED3965F2D98B6D9EB66290530
Certificate serial: 9C
Authority key identifier: 92:EF:D5:C0:B9:20:1A:7E:D3:96:5F:2D:98:B6:D9:EB:66:29:05:30
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ku_VwLkgGn7Tll8tmLbZ62YpBTA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/D79FB786B26F11EFB2BFFC58C4F9AE02.roa
Signing time: Wed 04 Dec 2024 18:44:50 +0000
ROA not before: Wed 04 Dec 2024 18:44:50 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 25855
IP address blocks: 2401:7f60::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156 (0x9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ED9F9/serialNumber=92EFD5C0B9201A7ED3965F2D98B6D9EB66290530
Validity
Not Before: Dec 4 18:44:50 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=6750a322-dccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e1:06:bb:95:d0:e8:80:40:65:dc:21:fa:79:
3b:a9:02:fc:74:a9:50:36:32:c2:0f:7b:36:88:b7:
43:f7:73:d7:83:ed:47:12:f6:76:98:24:bb:f1:12:
7d:26:9a:02:2a:42:b9:69:ea:6b:af:9b:ac:ae:1c:
42:19:38:a4:ba:68:0f:cb:be:74:78:73:31:2b:ad:
d0:94:f9:89:f7:59:95:f6:dc:ea:d9:e1:92:74:50:
e4:d2:41:c0:0e:3f:bc:50:00:6a:c6:06:84:7b:81:
4f:1c:15:83:0a:67:7f:cb:db:f7:58:af:1f:49:77:
80:2c:61:cd:2f:1c:45:ab:d3:e1:61:d5:a1:e8:d7:
2c:f9:a8:5c:5f:c7:8c:59:6d:61:e5:b3:64:c4:b4:
61:00:93:53:c5:8f:c1:aa:ae:4f:74:15:e7:ba:63:
c5:a1:28:b5:1a:5f:93:65:ee:78:0e:76:e8:ab:c1:
4e:c2:3c:bf:45:a7:ce:fd:5c:d0:d7:5b:61:69:69:
77:a6:cd:26:7d:49:e0:35:35:1f:8e:ca:9a:2f:c8:
3e:18:2e:7c:c3:6a:40:79:77:ec:a7:95:06:d0:54:
53:fb:3d:ea:5f:0e:91:e6:d5:6d:4c:f5:b2:41:85:
6c:4c:2f:62:57:38:91:0b:fb:b6:ed:2b:7b:d0:cb:
eb:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:37:CD:81:30:CE:76:04:EF:79:23:F9:CD:EC:CC:87:2B:F7:9F:A4
X509v3 Authority Key Identifier:
keyid:92:EF:D5:C0:B9:20:1A:7E:D3:96:5F:2D:98:B6:D9:EB:66:29:05:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ku_VwLkgGn7Tll8tmLbZ62YpBTA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/D79FB786B26F11EFB2BFFC58C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:7f60::/32
Signature Algorithm: sha256WithRSAEncryption
39:54:ad:26:5a:8d:ee:e8:ac:99:d4:1c:68:d7:93:a3:8e:aa:
fd:d3:eb:4d:80:ad:1c:ee:de:ad:c3:e4:d1:10:4a:36:3e:bb:
69:27:20:7d:44:f1:65:f5:3a:17:72:d2:0d:21:b4:02:76:4c:
1a:4c:48:ea:91:f1:38:d7:9f:00:d1:f1:0d:13:cf:a4:08:04:
ce:8f:a0:ab:be:02:9a:98:36:24:95:ec:8c:60:5e:00:8a:d7:
d6:61:3c:86:54:54:e6:65:f3:a8:d1:a7:d1:56:f4:b1:89:71:
35:9a:1a:35:ae:0b:f4:85:6f:58:d3:95:12:e7:27:2d:10:61:
81:10:9f:a0:4d:4a:59:70:30:56:90:54:43:3e:c7:f8:5b:b0:
1b:bd:88:d8:4f:4a:ee:5d:32:db:b6:f2:2c:36:31:ba:00:3a:
56:b7:ed:f4:97:32:e8:8c:f6:0b:61:f6:4b:3e:92:1a:7e:f1:
9c:48:88:d2:cd:11:b9:6e:59:a5:6b:fe:94:eb:91:f5:08:a0:
9a:cc:22:69:d0:65:df:ef:63:ce:70:69:3d:e4:26:8c:d6:73:
81:66:ce:ce:ae:80:c8:e2:6e:88:f7:c8:e2:f1:8d:ef:13:ba:
33:13:be:21:7f:e6:56:05:dc:2f:2d:ce:e9:d2:37:ae:88:ff:
e6:7c:02:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:42:12 2025 by rpki-client