Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/20519AFE346111EFB91EA738C4F9AE02.roa
File: 20519AFE346111EFB91EA738C4F9AE02.roa (raw, json)
Hash identifier: aygeQkP1fHUp6GkG7Gr3GPYW0xo6LhPZYhejgYQHNPs=
Subject key identifier: 93:1B:A5:7B:CB:1C:F2:81:ED:B1:14:C9:DC:1A:FE:AD:41:79:0B:EA
Certificate issuer: /CN=A9112DB1/serialNumber=22EDF9EB66087FD0E9817AE736C0039D188088D5
Certificate serial: 038E
Authority key identifier: 22:ED:F9:EB:66:08:7F:D0:E9:81:7A:E7:36:C0:03:9D:18:80:88:D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/20519AFE346111EFB91EA738C4F9AE02.roa
Signing time: Thu 27 Jun 2024 08:42:03 +0000
ROA not before: Thu 27 Jun 2024 08:42:03 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 134972
IP address blocks: 2400:8a20:161::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 910 (0x38e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112DB1/serialNumber=22EDF9EB66087FD0E9817AE736C0039D188088D5
Validity
Not Before: Jun 27 08:42:03 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=667d25db-77e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4d:e9:8a:25:85:0e:dd:a3:d2:25:bf:f9:67:
81:6f:ce:30:ce:80:e4:b9:3d:ba:ad:6f:c2:a7:9f:
f5:47:52:98:6c:45:e3:32:af:f9:d1:1e:a4:b4:a0:
c2:69:72:fd:b8:b1:73:e1:2e:dd:eb:99:ac:dc:9a:
e7:94:17:c7:cf:f7:9f:1a:24:b8:84:b2:4d:b0:04:
82:90:b7:2d:7a:63:c5:cd:34:0b:cd:06:42:75:f0:
76:01:bc:2b:d1:56:d6:f7:e1:68:34:21:4e:bb:e1:
87:9d:ff:67:1b:58:80:db:5b:bd:80:94:ac:2e:3d:
31:47:a4:bc:90:88:79:91:7f:0a:b8:30:96:f4:c1:
d2:a5:a4:4a:35:57:1a:cf:f9:6c:e3:a3:f7:7f:7a:
77:ba:26:7e:1e:8a:9b:46:97:bd:75:0c:52:ab:a3:
aa:e7:08:f9:16:7a:4c:c4:b1:4e:44:11:2f:ac:04:
cb:a8:fa:d7:12:b4:0f:02:da:93:26:6f:50:7e:a5:
49:4f:30:10:3f:5f:0c:af:dd:29:09:0f:df:a8:ac:
b4:dc:97:0d:57:29:5b:f7:99:9a:f6:8a:f3:44:8a:
c5:3a:2f:b3:1a:b4:f9:0d:10:92:04:8b:a8:7f:2e:
d2:2c:44:c2:ab:30:e5:4a:fa:d0:7d:e9:11:39:a3:
e6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:1B:A5:7B:CB:1C:F2:81:ED:B1:14:C9:DC:1A:FE:AD:41:79:0B:EA
X509v3 Authority Key Identifier:
keyid:22:ED:F9:EB:66:08:7F:D0:E9:81:7A:E7:36:C0:03:9D:18:80:88:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/20519AFE346111EFB91EA738C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:8a20:161::/48
Signature Algorithm: sha256WithRSAEncryption
83:14:7d:1d:59:9d:49:da:91:77:74:1b:4d:20:1c:a2:20:e6:
1f:01:e8:3b:cb:f4:f7:ba:35:01:e9:d2:ba:10:3e:cf:69:a0:
7e:dc:d9:f5:09:9f:74:93:ac:03:3a:53:7a:f1:79:a9:77:69:
5a:a9:0e:ab:b3:c7:28:c8:36:0d:9b:9b:53:86:14:d5:38:70:
ce:3c:c4:c3:aa:3c:5d:66:bb:7b:53:93:85:5d:1d:22:07:5d:
cd:cb:09:10:40:ba:3d:9a:21:bf:84:f3:6f:a3:0b:d5:fd:3a:
fc:b5:59:e3:50:53:7f:06:56:84:d1:49:19:9c:90:c5:d9:cf:
63:f9:d8:a3:bf:34:9e:a4:ce:62:38:58:16:65:1d:dd:ed:20:
46:23:fc:65:95:e1:89:32:28:ca:10:31:69:ab:da:29:78:ba:
71:2e:6f:76:50:6d:ef:8f:53:8e:b1:c7:dc:0c:b3:7c:ae:fc:
e1:a4:04:0f:b6:a5:34:4a:8a:c9:7b:ad:91:38:68:82:81:9a:
37:08:fd:f5:6e:e9:da:53:de:f0:55:3a:c9:12:bc:c7:11:67:
58:4f:e8:a1:05:92:96:ef:f8:c5:2d:38:bc:25:b7:e4:10:18:
ae:a1:71:37:fb:46:2b:d4:9d:c9:ea:e2:93:59:3a:d8:43:66:
1e:71:07:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:37:00 2025 by rpki-client