Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/23C2512042CE11F0A606855EC4F9AE02.roa
File: 23C2512042CE11F0A606855EC4F9AE02.roa (raw, json)
Hash identifier: 3Q6WShQMdAqz05Q0bkZ+VlUenPoKdZmhd7NqMagZtlM=
Subject key identifier: 33:DF:6E:FE:33:CF:63:ED:09:76:B8:FE:BA:F9:BA:8F:E1:F3:F4:55
Certificate issuer: /CN=A912E92E/serialNumber=1782FC2C4D24A0E2640D15B3190DEE98F36B8F3C
Certificate serial: 085D
Authority key identifier: 17:82:FC:2C:4D:24:A0:E2:64:0D:15:B3:19:0D:EE:98:F3:6B:8F:3C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4L8LE0koOJkDRWzGQ3umPNrjzw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/23C2512042CE11F0A606855EC4F9AE02.roa
Signing time: Mon 30 Jun 2025 16:25:37 +0000
ROA not before: Mon 30 Jun 2025 16:25:37 +0000
ROA not after: Thu 30 Oct 2025 00:00:00 +0000
asID: 135352
IP address blocks: 2404:cc80::/32 maxlen: 33
2404:cc80::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2141 (0x85d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E92E, serialNumber=1782FC2C4D24A0E2640D15B3190DEE98F36B8F3C
Validity
Not Before: Jun 30 16:25:37 2025 GMT
Not After : Oct 30 00:00:00 2025 GMT
Subject: CN=6862ba81-0d94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0b:a9:17:68:60:c7:97:6c:35:1a:5f:49:08:
6c:0d:ff:71:1c:07:0e:7f:22:2a:14:29:1f:5c:a0:
f8:be:ae:ff:8a:9f:a3:ef:68:7c:c5:f0:bd:b2:a8:
1a:c5:ee:70:e0:29:6e:2a:37:e7:73:0d:6a:41:79:
bf:2a:77:29:31:60:ac:42:4c:ab:ac:1c:18:98:8f:
8f:d6:22:17:ae:08:b2:0c:21:ac:f9:e5:d3:c8:dd:
43:a8:48:5a:c1:02:a5:25:39:f0:e9:34:c3:03:ab:
b0:5e:c7:5d:cf:1a:d8:96:e0:46:62:66:27:97:4b:
f9:db:58:f2:b1:81:86:6c:8d:45:9a:8e:dc:a4:d4:
71:06:4f:70:70:82:bb:9c:f9:c4:02:7a:15:9e:93:
76:d0:b5:17:a0:7d:28:0c:fa:7a:15:e9:84:f2:70:
84:6a:59:06:9c:cc:59:ad:d0:ca:f2:87:0b:ac:c6:
50:7f:1e:89:a0:4c:c2:2e:d4:69:ba:22:2a:55:4d:
19:22:52:30:a1:a3:2a:29:f2:32:3d:8d:60:19:4a:
93:46:b9:5c:1d:84:13:7a:4a:a5:b8:33:02:49:e5:
21:ca:15:fc:04:2e:a5:1b:d3:a3:7e:e9:66:54:60:
e9:ab:91:e4:6f:30:d8:08:09:8e:7f:5b:06:58:90:
69:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:DF:6E:FE:33:CF:63:ED:09:76:B8:FE:BA:F9:BA:8F:E1:F3:F4:55
X509v3 Authority Key Identifier:
keyid:17:82:FC:2C:4D:24:A0:E2:64:0D:15:B3:19:0D:EE:98:F3:6B:8F:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/F4L8LE0koOJkDRWzGQ3umPNrjzw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4L8LE0koOJkDRWzGQ3umPNrjzw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/23C2512042CE11F0A606855EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:cc80::/32
Signature Algorithm: sha256WithRSAEncryption
89:87:0f:fc:1c:30:4a:23:d0:6c:f3:8d:cc:46:db:3c:0f:a1:
d8:44:cf:02:07:32:69:ba:eb:79:d3:d9:bd:05:82:3a:09:13:
79:6c:a8:93:fd:27:bc:db:23:aa:d1:6a:d1:8e:f6:7c:78:2d:
b2:f5:a0:a4:63:24:5b:7e:53:04:3b:07:e7:d2:df:96:9b:ca:
a7:b0:c3:0e:03:b1:8d:51:8c:13:8e:04:af:86:ce:0c:fc:6a:
d6:02:97:7e:f8:cd:4a:65:53:a4:60:3a:08:82:ef:3d:90:27:
75:c0:b3:61:62:86:90:90:fa:0f:77:5a:a9:3b:5e:f4:a0:f1:
b8:9d:23:d5:e5:7c:8a:2b:9c:e8:60:01:7d:fc:8c:72:2c:d3:
4e:03:a9:c7:93:a9:da:52:c1:83:b8:4f:0b:cb:96:83:a9:2b:
a2:d1:12:1e:dd:e0:7e:f0:a3:e9:65:e6:16:21:6a:e7:a2:82:
08:95:d2:43:d9:cc:e2:e3:b4:6e:74:a9:0c:31:c7:dc:48:9f:
6a:62:28:57:3d:29:78:06:fb:b8:6c:36:d2:77:37:3b:82:99:
8b:98:42:16:c4:76:9d:84:9f:f5:38:a8:b5:60:bc:56:c8:61:
e2:60:c9:b8:8d:d1:98:bb:14:24:bc:0e:ce:6b:c1:f9:ad:5f:
0e:98:75:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:40:07 2025 by rpki-client