Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/9D164714168511EAB282BB44C4F9AE02.roa
File: 9D164714168511EAB282BB44C4F9AE02.roa (raw, json)
Hash identifier: +Z5eq5GUeFS2MmmulFa88HJNuMpvnMOg5gvwg5dtvrw=
Subject key identifier: BA:CF:EF:CF:23:CC:9D:06:36:77:6A:81:10:3E:D4:34:1B:38:31:5D
Certificate issuer: /CN=A9123D9C/serialNumber=5B2CF0FB62F160F1838AEE3E6CDE07544DFF8BFF
Certificate serial: 0F5C
Authority key identifier: 5B:2C:F0:FB:62:F1:60:F1:83:8A:EE:3E:6C:DE:07:54:4D:FF:8B:FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/9D164714168511EAB282BB44C4F9AE02.roa
Signing time: Thu 08 Feb 2024 18:16:02 +0000
ROA not before: Thu 08 Feb 2024 18:16:02 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 138919
IP address blocks: 2404:9ec0:114::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3932 (0xf5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123D9C/serialNumber=5B2CF0FB62F160F1838AEE3E6CDE07544DFF8BFF
Validity
Not Before: Feb 8 18:16:02 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=65c51a61-84cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:3e:64:fa:27:bd:48:02:6c:f1:bf:77:18:0b:
76:a3:ac:f4:0b:71:e4:d0:41:21:84:73:06:89:2d:
6e:d9:2b:20:95:0b:c5:23:df:be:fb:df:b5:5f:af:
e2:03:90:cc:d0:02:eb:d4:a9:9f:93:69:7b:6a:4a:
b0:a7:30:ae:d6:2f:3c:c2:e7:85:85:d5:b5:d6:df:
77:91:0b:b6:96:b5:a9:e8:2e:28:1e:dd:4d:ae:d2:
e9:66:9a:5f:4c:07:97:c8:ae:ee:23:44:76:56:a9:
6c:31:a5:c4:79:b2:20:3d:e1:ea:c7:5e:1c:02:d5:
60:13:80:32:af:c7:1a:19:f0:24:a5:f2:ae:20:3d:
47:39:3f:43:28:07:72:a2:c8:2e:64:3f:6b:f0:2a:
59:8e:a9:04:89:24:b1:a0:0f:fd:e2:db:e7:d9:ad:
80:44:11:c8:be:17:d9:e0:a6:98:dd:8b:58:76:df:
cb:08:0b:11:fe:2e:74:be:2a:46:f7:80:90:ae:30:
e8:b6:63:28:8c:d2:90:64:61:3d:37:77:fc:f9:94:
60:d7:1f:f4:74:ca:b0:d2:88:8e:ae:ac:c7:ad:26:
95:d5:98:9f:1e:7e:55:3a:8d:3f:85:fc:e5:67:24:
1a:95:dc:a2:4b:ef:bc:09:db:97:44:e2:5e:a1:15:
0f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:CF:EF:CF:23:CC:9D:06:36:77:6A:81:10:3E:D4:34:1B:38:31:5D
X509v3 Authority Key Identifier:
keyid:5B:2C:F0:FB:62:F1:60:F1:83:8A:EE:3E:6C:DE:07:54:4D:FF:8B:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/9D164714168511EAB282BB44C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:9ec0:114::/48
Signature Algorithm: sha256WithRSAEncryption
20:17:7d:27:ad:fe:89:9b:b0:4b:63:43:29:2d:7b:6e:d6:85:
5b:aa:9c:ab:bb:c6:85:a0:24:36:08:d2:9c:75:e6:27:0a:ef:
6c:d1:bf:89:82:ff:70:21:16:72:74:71:17:24:a9:1f:75:a5:
e9:1b:67:1d:66:22:ec:f4:12:32:3b:4d:0c:c2:2d:7c:0b:80:
53:c1:7b:49:d4:0a:96:53:4e:3b:55:16:48:69:6e:72:2a:2e:
8e:3b:63:7d:74:44:67:37:20:0d:cb:36:79:96:56:05:33:79:
11:7e:4d:a7:df:3e:a3:5f:22:91:92:7e:75:fe:0e:21:8d:d9:
d0:b0:d1:23:51:c3:84:c4:7f:ed:ae:af:09:c8:d3:c6:79:2d:
c1:2a:8b:7b:5d:63:7f:e7:d4:68:eb:b3:2a:de:07:88:fe:a4:
07:23:7e:10:40:3c:aa:a2:82:b8:fa:55:67:0f:9c:a0:ae:72:
b3:33:3d:a8:89:cd:ea:6e:c3:7f:58:42:5b:c3:9c:0a:5b:68:
c9:a2:51:26:51:d8:f6:2d:fb:f7:25:ac:a0:ac:97:9f:7b:77:
19:11:de:00:f1:be:b0:bc:86:ca:a5:fb:ad:36:a3:f4:7e:0b:
4c:ae:49:44:cc:a0:98:11:7b:2e:41:57:64:1a:15:87:31:1e:
86:43:6d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:45:34 2025 by rpki-client