Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/9ABFC32C94F811EF92676015C4F9AE02.roa
File: 9ABFC32C94F811EF92676015C4F9AE02.roa (raw, json)
Hash identifier: gWk0VsOcbG73/lmCIcmaJtgvf1O8GLTJ+JuzqZmFgTQ=
Subject key identifier: 03:A9:6B:78:BA:70:46:07:88:86:17:26:37:C9:22:C9:D4:3B:31:32
Certificate issuer: /CN=A91EFC94/serialNumber=ACB70251EB15B75D4229AA2131E3D9A87C2945C0
Certificate serial: 03
Authority key identifier: AC:B7:02:51:EB:15:B7:5D:42:29:AA:21:31:E3:D9:A8:7C:29:45:C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLcCUesVt11CKaohMePZqHwpRcA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/9ABFC32C94F811EF92676015C4F9AE02.roa
Signing time: Mon 28 Oct 2024 06:48:14 +0000
ROA not before: Mon 28 Oct 2024 06:48:14 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 153379
IP address blocks: 2001:df4:82c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EFC94/serialNumber=ACB70251EB15B75D4229AA2131E3D9A87C2945C0
Validity
Not Before: Oct 28 06:48:14 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=671f33ae-b777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4a:15:35:c9:62:8f:f3:74:aa:3c:fa:1f:c5:
91:0c:ef:3f:65:6d:ac:66:23:20:bb:52:d6:5f:9f:
4e:a9:29:59:04:0d:67:b8:21:bc:c5:27:57:d4:aa:
06:36:71:6a:e2:ab:b4:67:92:01:40:3f:92:b5:a5:
b6:bc:2a:18:c2:50:0c:5d:26:88:32:53:6f:e5:1d:
4f:39:2e:49:57:13:08:3d:73:db:89:18:83:48:fc:
e0:6a:1a:af:3b:96:c7:f4:65:d3:76:c2:9a:fe:9f:
e0:d7:5b:44:19:e0:1c:da:67:a8:95:a7:f0:f5:b0:
69:3d:1e:8b:2d:e9:c0:83:a5:6c:c3:b4:27:33:40:
eb:ee:ae:ec:f5:13:88:73:fb:8c:de:8c:9a:98:2f:
cf:5a:73:1a:23:08:30:87:eb:9c:79:ba:44:53:63:
f6:27:f1:e2:0f:37:98:72:6d:10:00:4b:b0:6a:37:
dc:9a:4c:72:ca:dc:9d:08:70:85:24:d6:51:36:d6:
44:ec:37:9d:1d:39:01:c5:86:57:a0:77:27:e8:ab:
69:74:7a:98:89:48:24:40:d9:7a:51:0b:b2:c2:75:
fa:7d:34:bb:22:d3:18:a1:2a:ed:2a:26:3e:53:2c:
04:9f:86:55:2e:89:1a:29:e3:0f:13:31:45:f3:44:
81:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A9:6B:78:BA:70:46:07:88:86:17:26:37:C9:22:C9:D4:3B:31:32
X509v3 Authority Key Identifier:
keyid:AC:B7:02:51:EB:15:B7:5D:42:29:AA:21:31:E3:D9:A8:7C:29:45:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLcCUesVt11CKaohMePZqHwpRcA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/9ABFC32C94F811EF92676015C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:82c0::/48
Signature Algorithm: sha256WithRSAEncryption
1e:50:8e:f4:8f:f8:54:84:3a:4c:a2:e3:0d:6b:73:38:47:c8:
79:97:31:6b:6b:e1:23:11:14:1a:44:14:c5:22:91:ee:42:a0:
6f:4c:f8:48:cc:fa:de:11:2b:78:14:24:e0:01:74:c0:20:a4:
48:86:d9:2d:3f:36:57:e7:78:c5:46:37:a6:85:74:ab:2e:f6:
eb:86:0d:34:04:75:7c:87:df:e6:eb:9f:51:21:fa:a4:83:fe:
b0:86:e3:b8:aa:79:75:ad:db:5d:ac:41:e3:03:af:51:aa:5f:
c8:6b:45:2d:84:0c:a6:35:24:3e:6e:2f:63:54:10:11:e5:04:
82:dc:1d:9e:1a:51:68:98:44:fe:84:1c:a4:c5:a7:75:13:1e:
2f:0b:1c:b3:c6:07:ee:af:f0:62:43:34:0f:a6:8c:0c:ff:cd:
67:d3:c8:63:a3:b3:c7:dd:9e:37:de:0c:b0:62:23:1f:6b:eb:
81:45:1a:41:db:fd:60:09:68:93:d8:01:2c:1e:71:5e:09:11:
3e:53:53:48:09:d0:d9:1d:55:ac:62:8a:82:e2:74:1b:77:e2:
e6:0d:5b:01:44:ea:7f:5b:76:04:5f:5d:b5:24:1b:1f:1f:4d:
ea:f3:6a:9d:11:2d:75:1d:b5:ad:8c:7e:2a:a6:02:e7:80:34:
96:fd:9f:eb
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
RkM5NDExMC8GA1UEBRMoQUNCNzAyNTFFQjE1Qjc1RDQyMjlBQTIxMzFFM0Q5QTg3
QzI5NDVDMDAeFw0yNDEwMjgwNjQ4MTRaFw0yNjAxMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY3MWYzM2FlLWI3NzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDAShU1yWKP83SqPPofxZEM7z9lbaxmIyC7UtZfn06pKVkEDWe4IbzFJ1fUqgY2
cWriq7RnkgFAP5K1pba8KhjCUAxdJogyU2/lHU85LklXEwg9c9uJGINI/OBqGq87
lsf0ZdN2wpr+n+DXW0QZ4BzaZ6iVp/D1sGk9Host6cCDpWzDtCczQOvuruz1E4hz
+4zejJqYL89acxojCDCH65x5ukRTY/Yn8eIPN5hybRAAS7BqN9yaTHLK3J0IcIUk
1lE21kTsN50dOQHFhlegdyfoq2l0epiJSCRA2XpRC7LCdfp9NLsi0xihKu0qJj5T
LASfhlUuiRop4w8TMUXzRIH1AgMBAAGjggKYMIIClDAdBgNVHQ4EFgQUA6lreLpw
RgeIhhcmN8kiydQ7MTIwHwYDVR0jBBgwFoAUrLcCUesVt11CKaohMePZqHwpRcAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVGQzk0L0IxNDQ5QzRFOTRE
QTExRUY4OTA4NkQyMUM0RjlBRTAyL3JMY0NVZXNWdDExQ0thb2hNZVBacUh3cFJj
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvckxjQ1Vlc1Z0MTFDS2FvaE1lUFpxSHdwUmNBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RkM5NC9CMTQ0OUM0RTk0REExMUVGODkwODZEMjFDNEY5QUUwMi85QUJGQzMyQzk0
RjgxMUVGOTI2NzYwMTVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACABDfSCwDANBgkqhkiG9w0BAQsFAAOCAQEAHlCO9I/4VIQ6
TKLjDWtzOEfIeZcxa2vhIxEUGkQUxSKR7kKgb0z4SMz63hEreBQk4AF0wCCkSIbZ
LT82V+d4xUY3poV0qy7264YNNAR1fIff5uufUSH6pIP+sIbjuKp5da3bXaxB4wOv
UapfyGtFLYQMpjUkPm4vY1QQEeUEgtwdnhpRaJhE/oQcpMWndRMeLwscs8YH7q/w
YkM0D6aMDP/NZ9PIY6Ozx92eN94MsGIjH2vrgUUaQdv9YAlok9gBLB5xXgkRPlNT
SAnQ2R1VrGKKguJ0G3fi5g1bAUTqf1t2BF9dtSQbHx9N6vNqnREtdR21rYx+KqYC
54A0lv2f6w==
-----END CERTIFICATE-----
Generated at Sun Apr 27 06:32:27 2025 by rpki-client