Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA496/FB12A2783C0F11E4B788FF4AC4F9AE02/EE3DDD2401AA11EDB7DF7B4BC4F9AE02.roa
File: EE3DDD2401AA11EDB7DF7B4BC4F9AE02.roa (raw, json)
Hash identifier: Jrpra1DN6Qua5gOtuyS7ZwYqohrmR0qUmCq00umz0cc=
Subject key identifier: 53:1E:09:B5:1B:87:40:23:8F:EC:F4:10:20:C8:51:04:01:BB:04:57
Certificate issuer: /CN=A91CA496/serialNumber=A03969BAFFD67AAB75D493837FA1C7C69FFB2717
Certificate serial: 2A6B
Authority key identifier: A0:39:69:BA:FF:D6:7A:AB:75:D4:93:83:7F:A1:C7:C6:9F:FB:27:17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oDlpuv_Weqt11JODf6HHxp_7Jxc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CA496/FB12A2783C0F11E4B788FF4AC4F9AE02/EE3DDD2401AA11EDB7DF7B4BC4F9AE02.roa
Signing time: Mon 31 Mar 2025 15:42:27 +0000
ROA not before: Mon 31 Mar 2025 15:42:27 +0000
ROA not after: Fri 01 Aug 2025 00:00:00 +0000
asID: 133405
IP address blocks: 2401:a280::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10859 (0x2a6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CA496, serialNumber=A03969BAFFD67AAB75D493837FA1C7C69FFB2717
Validity
Not Before: Mar 31 15:42:27 2025 GMT
Not After : Aug 1 00:00:00 2025 GMT
Subject: CN=67eab7e3-1f3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:13:e9:b9:26:3b:9a:6a:f9:a0:5b:f2:05:a9:
7a:1e:85:e7:8f:60:ab:18:10:64:92:1d:d3:34:d4:
5f:d9:49:1b:08:ad:92:31:d2:6f:05:25:e7:e4:92:
9e:5b:5e:e1:87:c9:0c:30:56:d1:fb:58:fa:38:9e:
57:24:41:c3:bf:2c:91:4f:22:59:95:b4:e3:13:c6:
90:42:09:32:14:db:33:75:87:26:de:54:f6:86:e6:
70:97:2b:b7:83:d5:35:40:4a:3f:e6:e6:32:98:46:
80:bb:ff:8a:ee:fb:fb:aa:28:c6:c4:c6:5a:f0:bf:
11:0c:fe:56:77:67:88:ee:b7:2b:87:42:7d:c0:f3:
5d:af:ea:fb:ed:bf:bc:4a:d6:2f:25:98:30:4c:f2:
65:e8:a5:6f:57:b8:06:9e:92:d6:fd:88:e3:6e:98:
6b:9b:d8:07:24:25:cd:43:ca:53:d5:55:bd:e3:31:
0f:a9:3b:c4:70:a0:36:b1:66:7b:52:3d:c1:42:ed:
b5:73:df:0d:d8:06:85:29:49:5b:0f:24:ae:7b:ec:
e4:40:7e:ee:e6:af:8e:50:eb:27:19:33:ea:6c:23:
77:f2:f2:b6:6a:39:b2:0c:b1:47:b6:5a:f0:7f:bd:
ef:4b:07:9c:05:11:08:ce:44:66:4d:50:2c:8b:53:
8e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:1E:09:B5:1B:87:40:23:8F:EC:F4:10:20:C8:51:04:01:BB:04:57
X509v3 Authority Key Identifier:
keyid:A0:39:69:BA:FF:D6:7A:AB:75:D4:93:83:7F:A1:C7:C6:9F:FB:27:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CA496/FB12A2783C0F11E4B788FF4AC4F9AE02/oDlpuv_Weqt11JODf6HHxp_7Jxc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oDlpuv_Weqt11JODf6HHxp_7Jxc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA496/FB12A2783C0F11E4B788FF4AC4F9AE02/EE3DDD2401AA11EDB7DF7B4BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:a280::/32
Signature Algorithm: sha256WithRSAEncryption
83:44:23:cf:db:61:76:7c:97:b0:d3:fc:09:ea:4f:fb:3e:7b:
c5:d3:92:91:f4:e9:10:aa:42:1d:1c:ef:4c:30:e6:31:fa:3a:
2e:ce:43:e2:91:b3:42:31:d5:0b:fb:0f:5d:58:86:44:52:ab:
b8:87:27:eb:d8:84:88:50:79:ee:7c:9f:d5:4b:5f:60:bc:b4:
55:67:1d:93:27:5f:e4:b5:ea:a3:63:a5:f2:ac:0a:45:e0:1e:
01:61:13:0b:78:3e:45:e3:9c:0b:8c:7e:80:1f:13:37:bb:1d:
b5:e0:b7:05:b8:e7:dc:b6:46:27:0e:8f:ec:3e:2b:cb:73:09:
18:9c:7b:b0:ed:f0:7c:2d:ce:95:d0:86:9e:5f:6a:4d:75:fa:
f9:c0:5a:40:62:85:86:3c:f3:dd:58:41:6c:55:10:ee:44:d4:
25:e1:e8:97:f4:26:0f:6d:22:d5:7f:17:e3:fa:f1:c8:c5:d0:
07:79:c4:dd:93:cf:da:cd:86:d3:76:db:f7:72:7f:e5:85:ac:
cb:bf:e9:cb:25:4e:8e:4a:10:ee:27:55:d1:f2:e7:df:c0:8d:
fa:5b:e6:dd:9d:30:f4:69:d7:dc:18:cf:3c:44:dd:3f:48:05:
c3:7f:a2:f5:27:f7:b8:cb:d3:57:77:fb:74:16:11:b9:27:ee:
0c:4f:76:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:55:44 2025 by rpki-client