Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/669FD05EA53911EFBE261371C4F9AE02.roa
File: 669FD05EA53911EFBE261371C4F9AE02.roa (raw, json)
Hash identifier: C8BMzBjnObRwd1PN8+bj1Lr3uDFXe55TuSG2M+7J66A=
Subject key identifier: B9:D7:DB:64:FB:B3:ED:4F:0D:A8:32:80:A9:63:F5:88:A5:A7:19:28
Certificate issuer: /CN=A91FDEFE/serialNumber=4FE1B35F9AD8281B66F47031F507E0EE7D54211A
Certificate serial: 03
Authority key identifier: 4F:E1:B3:5F:9A:D8:28:1B:66:F4:70:31:F5:07:E0:EE:7D:54:21:1A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/669FD05EA53911EFBE261371C4F9AE02.roa
Signing time: Sun 17 Nov 2024 23:12:23 +0000
ROA not before: Sun 17 Nov 2024 23:12:23 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 132238
IP address blocks: 2401:d7a0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDEFE/serialNumber=4FE1B35F9AD8281B66F47031F507E0EE7D54211A
Validity
Not Before: Nov 17 23:12:23 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=673a7856-087e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:99:dd:61:54:f8:55:8b:15:4d:75:cf:8b:da:
c1:9d:16:b6:68:48:38:92:4f:6f:76:2e:3b:52:3d:
e8:dd:98:51:48:37:b8:04:57:f0:03:fb:0c:bd:60:
df:30:d9:bb:b0:f2:17:ec:53:ee:d0:2b:97:5c:07:
90:14:7c:ba:d1:3d:a5:a1:45:6b:ec:33:b3:82:bc:
2e:c7:dd:80:1c:80:42:d9:cf:57:e1:fe:0d:fb:4e:
89:00:90:c3:b2:a1:ad:34:e3:72:a6:9e:99:a0:88:
84:3d:ac:fc:f0:4d:38:63:8b:01:76:74:3c:f0:6f:
19:31:82:a4:e2:c4:ac:71:bf:8c:95:55:12:b9:31:
79:d8:7d:e3:03:e8:97:14:2c:30:86:62:7d:db:37:
30:6e:1a:32:10:fa:b2:b4:62:31:f0:3a:46:e0:e3:
ae:9e:2f:a3:74:88:6c:d5:aa:52:ca:06:bd:48:ce:
ca:c2:63:aa:25:35:01:b1:9f:1c:ed:15:24:48:9f:
d0:3b:23:a3:9c:ed:7f:04:48:7e:09:e0:90:5f:bc:
1b:c0:c7:ae:e5:ac:f5:a5:c7:8f:75:01:19:73:9f:
a7:c8:d7:bc:e5:23:1e:61:56:48:03:b5:db:e8:70:
69:e6:2c:a2:d4:64:d5:0f:59:c0:e1:e4:7e:3b:ff:
05:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D7:DB:64:FB:B3:ED:4F:0D:A8:32:80:A9:63:F5:88:A5:A7:19:28
X509v3 Authority Key Identifier:
keyid:4F:E1:B3:5F:9A:D8:28:1B:66:F4:70:31:F5:07:E0:EE:7D:54:21:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/669FD05EA53911EFBE261371C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:d7a0::/32
Signature Algorithm: sha256WithRSAEncryption
8f:5c:04:88:ea:48:64:f9:51:2d:bc:83:be:60:2f:c4:ec:8c:
e6:e7:e3:51:71:c7:b5:ef:74:8e:fb:d6:be:29:fd:c7:5f:4b:
c1:ae:bf:70:48:cb:7f:4f:c0:38:39:a9:21:eb:b5:e1:0c:46:
98:5a:dd:94:37:b7:22:c0:b2:a1:ce:d5:08:f6:aa:1c:b0:98:
d7:c1:f1:80:b7:02:09:92:b8:ef:b3:9b:1d:59:c0:d5:a5:5c:
5c:99:7a:b9:e4:89:bc:37:df:8a:c2:fe:cd:16:79:e6:fa:40:
ad:25:b0:98:c4:ea:c1:6d:bb:e6:db:49:3a:45:9b:c3:03:81:
4e:7d:1f:c3:75:1c:10:01:e3:8d:5d:bf:29:2e:5f:71:d0:c4:
1c:c0:3d:fd:30:de:1c:d3:4b:25:e4:6d:fe:56:35:94:f0:c4:
c8:e0:ca:90:b5:64:f7:ac:0a:4f:e0:70:5a:58:85:13:3b:dd:
88:6f:b9:5c:da:72:e6:79:2a:08:f5:7e:7f:32:1d:c3:e1:4e:
93:6e:a3:1e:02:70:fe:ab:9f:2d:23:dc:91:5d:41:a6:0b:70:
71:a2:a6:2d:af:f6:07:cb:03:c5:52:93:7b:4e:92:76:9c:d0:
e3:d8:dc:9f:c3:f3:c9:f1:7b:49:b9:88:90:0a:2c:3a:b6:57:
80:18:b4:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:36:12 2025 by rpki-client