Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/A069EA0C8EE911EE8698A64FC4F9AE02.roa
File: A069EA0C8EE911EE8698A64FC4F9AE02.roa (raw, json)
Hash identifier: 1Kpd2YjRlMJbYQzqvODxmlNt6RPiHgoY7Xsf29roK9M=
Subject key identifier: 28:E0:C5:16:42:FA:F9:D5:D1:BD:45:92:54:2F:41:AF:BF:41:22:99
Certificate issuer: /CN=A91EE03B/serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4
Certificate serial: 0105
Authority key identifier: B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/A069EA0C8EE911EE8698A64FC4F9AE02.roa
Signing time: Sat 03 Aug 2024 05:55:47 +0000
ROA not before: Sat 03 Aug 2024 05:55:47 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 23470
IP address blocks: 2401:b60:ffff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 261 (0x105)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE03B/serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4
Validity
Not Before: Aug 3 05:55:47 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66adc663-193a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4f:64:6e:b9:ef:3c:0e:c7:60:92:23:a9:07:
2f:50:e2:19:4d:d7:c9:60:fe:80:29:cd:5c:1d:d6:
8f:42:cd:6a:39:48:82:a4:c5:a7:1e:b7:45:2d:08:
71:7d:7e:2f:58:de:0b:a9:5f:ee:ff:e4:fd:dd:b1:
31:a9:72:c9:72:48:d3:16:56:49:39:38:92:4f:a1:
ae:b7:7a:f5:c1:b0:87:7c:d7:09:2e:ff:97:f2:9b:
da:2d:c7:08:f6:be:c7:ca:15:df:eb:5e:1a:72:cc:
f8:14:f1:e5:50:58:f9:1b:78:e1:5c:6b:c0:43:9f:
72:26:92:cd:ac:b0:d6:02:be:b8:10:02:ca:90:ed:
31:09:45:58:86:07:62:ef:f1:57:77:0d:d6:bb:4c:
23:ca:e3:d1:e0:a9:a7:d8:12:20:ac:bd:99:02:59:
35:c8:e2:d9:0c:3d:c9:9f:a9:b3:c9:e6:6a:15:7f:
ee:a5:35:3f:92:da:49:b0:bf:06:90:ac:9b:d1:66:
5f:6e:f7:d6:3c:0c:ae:b6:70:2d:15:6b:ee:e6:9d:
e7:e2:a6:88:71:fd:13:e6:3d:36:73:71:03:39:77:
b1:5d:f8:60:87:e6:8e:46:0a:61:d2:bf:8e:4f:86:
72:78:d9:1f:b4:e6:8f:38:f0:9b:ed:f3:39:69:8c:
af:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E0:C5:16:42:FA:F9:D5:D1:BD:45:92:54:2F:41:AF:BF:41:22:99
X509v3 Authority Key Identifier:
keyid:B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/A069EA0C8EE911EE8698A64FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:b60:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
22:91:87:73:6d:9c:5f:f1:a9:c6:4f:21:c0:25:25:1a:89:bf:
b7:43:46:53:58:fd:e1:f8:92:d1:e5:a5:75:ee:8a:b5:48:f8:
75:8c:ed:e7:37:e7:95:50:62:a9:b7:4f:bd:48:95:b4:3b:2a:
dd:53:81:d2:5e:c2:2c:3d:e7:c6:e6:6f:a6:6a:00:d1:37:66:
48:94:ae:59:88:59:9e:d9:11:b3:b5:f2:14:81:7b:40:8d:5c:
86:03:54:54:ba:82:b1:8b:18:15:01:08:64:f7:b9:57:4e:63:
ed:b4:60:bf:46:69:82:6d:66:06:df:8c:10:95:a1:53:fb:a2:
86:ff:23:e8:fb:0a:f9:2b:18:2e:db:5c:1a:40:e7:80:1d:52:
41:14:2d:51:16:c0:69:69:10:b1:95:17:65:a2:f2:bc:50:c4:
9e:f1:c2:00:fc:89:50:6f:05:ff:d6:dd:ff:eb:c1:be:09:b1:
87:24:c6:52:e3:fc:39:1e:52:f3:bf:43:35:71:b1:5d:5b:50:
da:d8:a5:7a:70:6b:7f:73:33:af:45:34:03:7c:d2:d3:70:84:
a7:a4:98:c5:54:98:36:f6:93:61:fc:a8:59:3f:d4:26:89:ab:
60:a0:cd:71:c3:34:79:94:34:65:a8:21:f5:32:66:74:dc:18:
06:fd:56:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:49:43 2025 by rpki-client