Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/642A8EA2887911ECAFCDDE1FC4F9AE02.roa
File: 642A8EA2887911ECAFCDDE1FC4F9AE02.roa (raw, json)
Hash identifier: biN9tdHvCrBXyCcQr8koJ0sIQQhBNypDbtvOi2obKUY=
Subject key identifier: 91:4B:A8:27:7F:EB:9C:73:06:89:66:7C:56:F4:23:CE:8E:DA:65:AC
Certificate issuer: /CN=A9112DB1/serialNumber=22EDF9EB66087FD0E9817AE736C0039D188088D5
Certificate serial: 036D
Authority key identifier: 22:ED:F9:EB:66:08:7F:D0:E9:81:7A:E7:36:C0:03:9D:18:80:88:D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/642A8EA2887911ECAFCDDE1FC4F9AE02.roa
Signing time: Mon 06 May 2024 14:39:17 +0000
ROA not before: Mon 06 May 2024 14:39:17 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 147293
IP address blocks: 2001:df0:64c0::/48 maxlen: 48
2400:8a20:120::/48 maxlen: 48
2400:8a20:121::/48 maxlen: 48
2400:8a20:122::/48 maxlen: 48
2400:8a20:130::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 877 (0x36d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112DB1/serialNumber=22EDF9EB66087FD0E9817AE736C0039D188088D5
Validity
Not Before: May 6 14:39:17 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=6638eb95-edd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a5:97:b8:fa:ec:34:3c:93:6e:b3:eb:4f:34:
17:94:43:b5:f7:7c:a8:d5:d3:c3:31:97:4f:e5:cb:
0b:39:74:17:0a:27:2c:fc:72:9f:b9:49:67:a1:11:
94:83:3e:02:3f:fd:f0:96:75:39:70:8f:a6:28:48:
32:f5:e9:63:08:fd:88:65:cd:14:2a:92:64:cd:40:
33:5d:96:d2:52:a2:7b:59:68:c4:03:c7:4d:e1:1a:
d5:47:b6:1c:13:39:a4:2e:bb:4a:fa:b3:5f:4f:ef:
c9:45:23:a1:db:9e:32:4d:f0:2a:4c:8a:47:6f:0c:
44:04:a6:75:e4:c5:0a:d3:bd:6a:3e:e6:7d:a6:0a:
e0:b7:a7:0d:29:5f:28:c6:d7:76:56:45:d9:85:c5:
06:69:0b:a5:b2:59:60:5a:cf:97:95:b2:c6:43:aa:
fc:9f:f3:12:cc:2c:dd:ef:b5:8a:84:4d:7b:64:d1:
08:af:4e:24:3a:0a:76:0a:6d:85:c4:46:da:55:01:
d9:f8:c6:e4:24:b9:49:8c:82:b8:96:49:6f:60:b9:
d6:af:47:48:2f:b6:fc:f5:31:19:50:b0:43:b2:a1:
36:c1:0a:e8:0a:c2:ea:ea:f4:6f:81:cf:71:9e:d8:
80:b3:5d:2b:6b:c1:26:84:e4:01:c5:50:d1:14:75:
17:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:4B:A8:27:7F:EB:9C:73:06:89:66:7C:56:F4:23:CE:8E:DA:65:AC
X509v3 Authority Key Identifier:
keyid:22:ED:F9:EB:66:08:7F:D0:E9:81:7A:E7:36:C0:03:9D:18:80:88:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/642A8EA2887911ECAFCDDE1FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df0:64c0::/48
2400:8a20:120::-2400:8a20:122:ffff:ffff:ffff:ffff:ffff
2400:8a20:130::/48
Signature Algorithm: sha256WithRSAEncryption
03:8c:1a:60:65:ef:2c:31:bd:fa:a2:01:9f:c8:e1:32:af:d6:
21:b4:a3:2e:08:52:48:22:c4:a7:c7:6a:5a:e8:c3:7b:dd:08:
0c:de:e1:14:d7:37:e3:72:56:3c:98:46:f6:e5:fe:1c:7f:64:
0d:58:08:cc:15:cf:ec:5e:9d:3f:d7:d1:89:e1:07:13:e5:2c:
75:53:7c:e5:36:55:7b:2b:4c:f3:f8:d6:64:36:d0:0d:66:c5:
e0:51:90:dc:21:1d:e1:c0:f6:e5:2e:1f:05:29:cb:5a:d4:26:
e1:b2:12:c4:6b:00:09:e9:cf:25:25:cc:f4:88:f5:fb:6d:fd:
b9:44:92:55:91:f2:6e:f0:4d:0d:ad:ce:74:ce:ec:c6:8b:0b:
c3:13:00:d7:67:30:a9:e7:2e:5c:98:c7:e6:a6:96:e8:b8:c9:
7f:6f:d9:5f:14:b6:fe:f4:28:54:36:1d:c0:a6:d5:8b:9a:7e:
bd:25:04:5b:8d:e0:72:c5:7e:25:f0:e4:f2:e8:28:0b:7d:95:
cc:64:c6:26:f1:73:07:0e:5a:5d:f4:c1:d7:64:c6:b2:f3:07:
7e:24:be:47:d0:77:21:3a:87:3e:cd:9c:16:e7:c9:67:c8:37:
e4:99:83:29:9a:87:10:dd:8e:b7:2c:c4:ba:94:b8:5a:e3:b1:
a8:6a:b5:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:58:54 2025 by rpki-client