Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/636B090C609A11EDAAF70C26C4F9AE02.roa
File: 636B090C609A11EDAAF70C26C4F9AE02.roa (raw, json)
Hash identifier: KwB5Za6c44Sp6WKsELOvklwRL+/LDv/rBqGOUWdpNrM=
Subject key identifier: C9:3B:5F:D6:68:8D:E3:92:93:43:8F:2C:9A:1C:85:2F:93:BF:85:AB
Certificate issuer: /CN=A91EF547/serialNumber=A683632546F1A10784BC1A4FF6FA0BBE6CEC2D4E
Certificate serial: 0340
Authority key identifier: A6:83:63:25:46:F1:A1:07:84:BC:1A:4F:F6:FA:0B:BE:6C:EC:2D:4E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poNjJUbxoQeEvBpP9voLvmzsLU4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/636B090C609A11EDAAF70C26C4F9AE02.roa
Signing time: Sun 03 Nov 2024 00:53:34 +0000
ROA not before: Sun 03 Nov 2024 00:53:34 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 147067
IP address blocks: 2001:df7:b180::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 832 (0x340)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF547/serialNumber=A683632546F1A10784BC1A4FF6FA0BBE6CEC2D4E
Validity
Not Before: Nov 3 00:53:34 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=6726c98e-239c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4c:46:9d:4d:cb:84:e0:12:46:72:f7:eb:4d:
cc:e7:f1:b6:5e:5b:ae:bf:48:e4:b5:64:9c:e7:83:
48:84:22:72:84:ad:7b:78:80:d2:cb:03:95:b4:b6:
89:5a:3b:7f:9d:ff:bc:7e:83:e5:48:e3:4f:49:98:
04:26:71:b0:4d:f2:56:33:09:f4:54:d6:67:de:61:
a8:a8:29:75:20:73:59:e9:c6:92:69:7c:87:7b:6b:
04:38:c9:eb:dd:43:e4:85:99:59:84:98:63:dd:5b:
05:38:9e:ea:dd:d6:db:04:18:44:a8:a8:d9:90:73:
a7:7e:ed:59:a6:a0:da:10:cb:1b:26:1b:28:8f:1f:
d9:2e:b4:2a:ff:a1:9f:eb:c7:62:c5:c1:22:b9:c3:
a1:71:94:24:3a:bb:8b:0d:d1:cc:f0:e1:35:35:d0:
d5:18:2e:ad:fe:ad:fc:dc:e7:d7:73:7d:1a:a3:58:
19:15:b1:81:26:63:ac:d8:5d:16:5e:88:5e:09:95:
0d:68:0d:76:9e:d5:f7:05:f6:24:1d:0a:67:da:be:
a7:91:21:29:2b:fc:5a:34:77:7d:26:cd:d0:91:91:
b2:47:d9:52:f0:15:75:3a:a3:38:f9:bb:4e:6d:3a:
f2:8a:64:8d:c5:65:52:ac:27:cb:86:e0:f3:04:72:
26:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:3B:5F:D6:68:8D:E3:92:93:43:8F:2C:9A:1C:85:2F:93:BF:85:AB
X509v3 Authority Key Identifier:
keyid:A6:83:63:25:46:F1:A1:07:84:BC:1A:4F:F6:FA:0B:BE:6C:EC:2D:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poNjJUbxoQeEvBpP9voLvmzsLU4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/636B090C609A11EDAAF70C26C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df7:b180::/48
Signature Algorithm: sha256WithRSAEncryption
5c:07:cb:14:60:b4:2f:4e:ee:2e:ca:6f:74:86:63:df:71:14:
13:e6:95:ae:29:9c:eb:58:29:9b:12:a1:16:14:52:1d:1f:a2:
60:d1:34:59:a2:8c:79:20:b2:23:e7:c1:55:dd:a7:bc:55:7b:
6a:2c:2f:2f:f2:a5:f2:89:0f:3a:68:76:50:e2:ae:41:96:80:
0d:09:b6:1d:89:82:1c:79:ca:23:2f:ed:ab:e6:d1:19:81:56:
f4:0d:a2:3f:77:ee:bd:78:93:65:b4:8f:75:3c:3f:32:45:a5:
10:04:dd:05:1f:59:73:aa:21:5e:8c:22:0b:9e:b9:a8:a8:94:
34:43:e3:38:a0:90:be:31:e4:2b:ec:71:a3:d8:8f:2b:ff:df:
7c:54:68:eb:04:aa:08:da:1f:86:59:b9:56:a0:81:0c:25:6f:
92:56:67:b5:6b:f0:53:a2:b6:bf:57:19:5b:f3:17:b1:49:ee:
02:51:0d:2e:d8:96:64:b9:cf:bf:d6:b5:cc:a4:2a:04:56:95:
e6:12:22:d9:47:e7:0a:50:30:c2:8f:a8:b8:ef:88:64:f2:dc:
52:ca:d4:71:17:aa:b6:bd:5c:5e:c9:00:43:df:93:db:c3:5c:
8f:3b:90:16:8a:ac:5b:02:b3:74:c7:ce:39:7a:12:7b:9d:4d:
7d:06:ca:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:46:51 2025 by rpki-client