Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/A24D0F54140C11EFBC640B71C4F9AE02.roa
File: A24D0F54140C11EFBC640B71C4F9AE02.roa (raw, json)
Hash identifier: iTyxeo6fdLY6zYqk38GBrAnxGbLRbpbsfA4HbHTb8W0=
Subject key identifier: 3E:B7:C1:92:54:77:78:68:79:A3:C1:1A:EA:B1:87:50:A2:5E:10:B8
Certificate issuer: /CN=A91FDA40/serialNumber=37B62A77251C52A04B33B82D2ED0204C927A429A
Certificate serial: ED
Authority key identifier: 37:B6:2A:77:25:1C:52:A0:4B:33:B8:2D:2E:D0:20:4C:92:7A:42:9A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/A24D0F54140C11EFBC640B71C4F9AE02.roa
Signing time: Fri 17 May 2024 05:16:37 +0000
ROA not before: Fri 17 May 2024 05:16:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 150791
IP address blocks: 2001:df2:fc0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 237 (0xed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDA40/serialNumber=37B62A77251C52A04B33B82D2ED0204C927A429A
Validity
Not Before: May 17 05:16:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6646e834-0a45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:36:5c:14:8d:4f:3d:47:57:d1:90:91:12:bb:
56:fc:21:4d:92:9e:10:ad:55:d5:8f:c4:a3:70:ee:
28:6a:62:bf:f2:fd:b0:71:87:7c:d1:a7:fe:e6:d5:
57:84:25:20:70:fb:d8:f8:c2:aa:55:7e:88:c8:5e:
07:1d:eb:f5:8e:3e:3b:15:1d:38:6a:a9:a2:37:12:
2f:6c:62:52:22:7f:dc:a7:76:3e:45:09:56:f4:f2:
be:2f:8f:59:fe:b5:04:bf:61:10:c6:ed:bc:1a:8d:
d9:09:d5:7f:b8:f9:2c:2c:35:05:e5:22:94:b1:a3:
d3:ec:d1:36:1f:77:a4:e7:c5:8c:0c:64:b6:5a:95:
33:be:0d:04:e4:63:bb:cb:a8:42:64:1d:87:76:46:
e5:b1:a1:a0:86:26:ff:bb:cf:6a:1a:bd:fe:02:f1:
eb:26:9c:01:c4:28:fd:62:6f:cd:8c:47:04:d0:36:
49:84:3d:40:c6:1a:ae:0b:d0:54:54:40:bf:92:4b:
ec:29:ab:2c:ad:34:7f:2c:4a:c8:47:43:ce:30:8e:
90:6b:50:38:76:1d:27:69:6e:36:ef:7e:f7:df:de:
fc:38:e2:05:12:d2:36:01:25:21:4c:7e:32:5a:77:
56:5f:65:f1:a1:a5:84:cb:0c:5b:4e:f1:9a:4f:2b:
2f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B7:C1:92:54:77:78:68:79:A3:C1:1A:EA:B1:87:50:A2:5E:10:B8
X509v3 Authority Key Identifier:
keyid:37:B6:2A:77:25:1C:52:A0:4B:33:B8:2D:2E:D0:20:4C:92:7A:42:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/A24D0F54140C11EFBC640B71C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df2:fc0::/48
Signature Algorithm: sha256WithRSAEncryption
4f:6d:06:40:66:1b:0f:1e:46:96:6f:bc:6a:1a:a3:c9:a9:d6:
44:fa:58:ed:9f:ed:b6:cc:e2:fd:4d:bc:a4:c0:45:16:de:f9:
14:ee:06:b4:b4:b5:5e:0e:ba:8c:58:1a:64:ff:80:59:05:8e:
61:58:2b:50:eb:b2:75:bc:59:6b:38:1d:78:a2:fd:14:3c:1f:
ce:57:c0:5b:49:e2:d4:66:2b:72:35:79:1a:4d:9d:04:e1:c3:
e3:b2:d1:ec:3e:7f:1c:d0:af:0b:dd:9f:f7:96:31:9d:18:be:
04:9f:1a:1e:98:dd:76:0b:40:c8:cf:52:61:77:f0:e7:1b:f8:
75:47:db:de:31:91:a1:0e:95:4c:10:8e:8d:04:c7:b4:65:ab:
a2:6f:b5:a8:22:36:94:96:41:00:46:9a:52:b4:72:a0:5d:4a:
54:2f:5f:4a:95:eb:16:f2:bb:ae:34:de:87:9e:ce:69:f3:7b:
15:24:90:4e:09:d2:8a:12:70:c8:24:cf:a5:47:16:38:99:1d:
9f:69:43:ed:d9:ae:58:70:13:20:f6:fa:eb:5e:0a:48:8b:42:
84:9e:6d:d6:1e:50:90:81:ec:d9:af:a5:a8:e8:62:48:f8:95:
7a:e2:d2:51:7d:a0:eb:79:b1:d5:85:0b:79:50:7e:10:aa:d6:
8d:1c:23:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:08:56 2025 by rpki-client