Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDA0E/BF94AB6C0AD711E7AD6FE621C4F9AE02/13BEC2D0F65611E78F225A3AC4F9AE02.roa
File: 13BEC2D0F65611E78F225A3AC4F9AE02.roa (raw, json)
Hash identifier: JF0k9hwwuShIlvDFBow+ClTq/dHwEiGCiJ1CRY+mSYM=
Subject key identifier: 12:A5:CC:50:77:DB:D9:5F:BB:64:0F:29:EA:70:0C:F5:64:F1:46:B6
Certificate issuer: /CN=A91BDA0E/serialNumber=18B879EB8186F34920686ACE8BDB8F3C143C8501
Certificate serial: 1A9A
Authority key identifier: 18:B8:79:EB:81:86:F3:49:20:68:6A:CE:8B:DB:8F:3C:14:3C:85:01
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GLh564GG80kgaGrOi9uPPBQ8hQE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BDA0E/BF94AB6C0AD711E7AD6FE621C4F9AE02/13BEC2D0F65611E78F225A3AC4F9AE02.roa
Signing time: Wed 06 Dec 2023 16:43:52 +0000
ROA not before: Wed 06 Dec 2023 16:43:52 +0000
ROA not after: Fri 31 Jan 2025 00:00:00 +0000
asID: 7175
IP address blocks: 2403:780:fe00::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6810 (0x1a9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDA0E, serialNumber=18B879EB8186F34920686ACE8BDB8F3C143C8501
Validity
Not Before: Dec 6 16:43:52 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=6570a4c8-019d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2e:f0:4d:c5:4d:e0:60:63:d9:6c:64:a9:bc:
85:a8:34:a1:b8:cd:a4:d8:c4:f1:18:6f:33:b2:ce:
b1:0c:91:4c:37:54:67:13:ad:3b:2e:df:c8:87:eb:
08:97:1f:26:a6:95:47:a6:b1:a1:e4:ab:26:69:c2:
e7:ae:9f:67:c6:ba:01:34:59:7e:08:84:ed:72:14:
db:19:93:1a:29:6a:69:4b:40:6d:57:9a:a0:e3:7b:
7c:3b:b5:ef:ed:86:73:12:6f:15:b8:b4:89:6e:69:
7b:1e:85:5d:56:bb:22:c6:8e:69:6e:d4:0d:5e:50:
d0:00:b4:0b:2a:07:7b:23:21:e8:61:4c:81:ef:a1:
9e:28:df:85:62:89:92:d7:a5:8a:05:52:06:71:5d:
95:0d:8e:69:1e:67:d3:5f:ff:d5:ed:a1:19:a1:be:
84:e3:6b:59:dc:61:1c:a9:24:5f:08:e0:c1:73:a8:
1a:28:84:9d:d1:e8:27:1c:f5:5e:dd:25:6f:95:7d:
57:75:66:3e:7c:dc:1f:e5:0a:bd:93:03:e1:94:32:
1e:65:fa:52:3d:48:28:0a:a3:09:80:1c:c4:5c:5a:
75:85:7e:62:06:11:6a:ba:d5:db:87:95:a2:b3:96:
ae:10:4f:57:eb:bf:d5:b3:e8:b1:d2:00:9f:9f:a1:
79:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A5:CC:50:77:DB:D9:5F:BB:64:0F:29:EA:70:0C:F5:64:F1:46:B6
X509v3 Authority Key Identifier:
keyid:18:B8:79:EB:81:86:F3:49:20:68:6A:CE:8B:DB:8F:3C:14:3C:85:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BDA0E/BF94AB6C0AD711E7AD6FE621C4F9AE02/GLh564GG80kgaGrOi9uPPBQ8hQE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GLh564GG80kgaGrOi9uPPBQ8hQE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDA0E/BF94AB6C0AD711E7AD6FE621C4F9AE02/13BEC2D0F65611E78F225A3AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:780:fe00::/40
Signature Algorithm: sha256WithRSAEncryption
11:2b:0a:90:a6:ef:c3:88:f5:69:78:bc:85:32:fb:40:11:a6:
ef:ac:03:d6:b7:bf:f0:bf:30:72:60:46:c8:9d:c6:33:1b:6e:
7c:f0:b3:7d:27:5d:ae:99:59:a2:bd:71:de:f2:fa:e2:18:67:
c4:24:ec:84:83:57:10:2d:f5:b5:a3:fb:9c:a9:c0:8a:90:a4:
c5:c5:61:e9:51:33:67:b4:98:a8:34:1b:30:0c:66:aa:05:b6:
7e:aa:41:69:93:79:ec:15:f7:d0:72:6f:aa:32:64:8a:76:ab:
96:fb:2f:e9:15:d5:c7:6c:7e:b0:cb:e7:c9:b6:3a:97:e5:cb:
48:5c:2e:75:b6:34:5c:e0:8c:5e:64:86:ac:84:ac:9d:89:dc:
ba:f7:df:50:74:d8:47:5a:ac:84:e8:c4:21:b3:90:19:73:94:
00:05:63:e0:cd:a1:7c:77:2b:93:2d:07:f4:0b:3a:d2:ff:b1:
9b:47:7a:43:68:16:53:2c:d3:97:16:4d:cc:1c:d5:43:3d:80:
2b:57:e6:8d:f8:a0:fd:53:c8:e2:9e:ce:8e:b4:9a:cd:c0:65:
cd:d0:a1:18:25:17:ef:21:c9:be:19:aa:16:f5:6a:79:41:f5:
56:97:d0:13:d6:06:08:14:7e:02:c2:90:a0:36:b1:e5:ec:81:
32:bf:d4:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:55:42 2025 by rpki-client