Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/CC320712ACE011EAB535D034C4F9AE02.roa
File: CC320712ACE011EAB535D034C4F9AE02.roa (raw, json)
Hash identifier: JYY7Jlcu8MvbqrTObq1zVkDo+73nlBcySqwLIuU2yn4=
Subject key identifier: 17:C7:13:8C:89:9F:B8:73:B9:29:1A:17:E1:5C:48:51:F0:A0:80:11
Certificate issuer: /CN=A9123D9C/serialNumber=5B2CF0FB62F160F1838AEE3E6CDE07544DFF8BFF
Certificate serial: 0F58
Authority key identifier: 5B:2C:F0:FB:62:F1:60:F1:83:8A:EE:3E:6C:DE:07:54:4D:FF:8B:FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/CC320712ACE011EAB535D034C4F9AE02.roa
Signing time: Thu 08 Feb 2024 18:15:58 +0000
ROA not before: Thu 08 Feb 2024 18:15:58 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 138467
IP address blocks: 2404:9ec0:5::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3928 (0xf58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123D9C/serialNumber=5B2CF0FB62F160F1838AEE3E6CDE07544DFF8BFF
Validity
Not Before: Feb 8 18:15:58 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=65c51a5e-6f43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ac:cf:b0:e7:b8:5b:64:ea:aa:1b:41:4b:8c:
d1:79:5d:f4:2d:c4:4a:f3:fa:15:af:f1:0d:a8:70:
e1:26:3e:d7:c5:f9:e5:89:69:f5:d4:97:a3:a1:13:
15:a9:f2:9c:e2:68:b0:6e:91:7a:6d:5d:47:28:af:
3a:15:9a:6e:53:92:b1:c5:60:cb:2e:da:51:d9:45:
18:b3:1d:49:78:b7:ae:85:fd:2c:ea:1d:66:e7:9a:
8f:2f:a6:99:d9:58:ee:89:a3:7f:bd:4c:16:ac:05:
71:41:65:19:62:27:4a:59:e7:85:f5:21:a6:ea:5d:
af:1b:b5:cb:4b:ed:fa:aa:9a:a2:99:04:eb:e8:67:
5a:04:6b:63:c1:df:ac:5d:a0:33:a6:1e:3e:b5:a9:
9e:90:dc:de:f1:3d:03:0c:a8:ab:76:1c:0d:80:0f:
04:ff:fd:d9:2c:27:7c:74:59:e6:3a:96:ed:4e:29:
61:4c:2a:fa:98:09:9f:2c:99:e3:bb:57:04:df:af:
3e:29:8b:58:3b:14:77:c4:a3:98:8d:b3:7b:88:d7:
0e:1a:b1:64:e0:f6:70:2a:8b:81:aa:b7:1e:7d:de:
a1:c2:77:26:4f:65:1f:0c:19:8e:02:ff:58:f1:3e:
af:24:3c:e9:71:ee:f9:94:26:b6:5c:ae:c1:e7:05:
87:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C7:13:8C:89:9F:B8:73:B9:29:1A:17:E1:5C:48:51:F0:A0:80:11
X509v3 Authority Key Identifier:
keyid:5B:2C:F0:FB:62:F1:60:F1:83:8A:EE:3E:6C:DE:07:54:4D:FF:8B:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/CC320712ACE011EAB535D034C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:9ec0:5::/48
Signature Algorithm: sha256WithRSAEncryption
84:35:0c:fc:97:6f:6e:46:38:ff:ae:03:7f:b4:0f:67:12:bf:
b8:b0:2f:f4:b7:c1:4b:cc:7b:95:51:68:6e:32:de:c5:61:16:
64:ae:61:47:bc:0b:f8:1d:e4:30:d2:b4:78:73:41:81:c8:b3:
be:f0:39:6c:80:fa:c6:d1:1f:ec:84:27:13:0d:18:5b:2a:6a:
e1:5a:d4:30:7c:db:bc:d4:32:ef:f6:ec:fe:76:6d:22:67:74:
d4:47:54:19:03:51:e6:28:ba:7c:37:be:95:00:ff:be:78:74:
ce:4f:e6:80:f7:c0:b2:84:15:8e:fe:7c:79:75:08:58:98:58:
6e:97:57:e4:da:c8:8f:ca:5e:f1:70:a2:3a:3a:94:d6:38:8b:
5c:00:87:f3:0a:14:87:2e:45:7d:c2:b2:8a:41:12:84:ab:d2:
f9:9c:ec:6c:54:19:48:3d:e2:7f:ed:ff:a2:60:1b:89:cc:2a:
2a:dd:67:e0:3d:bc:8e:c4:dc:a4:0c:63:9e:c4:58:29:0d:57:
69:d7:e0:b8:2c:46:4f:f8:0b:59:58:51:9d:1a:43:ba:13:61:
d8:3e:aa:43:c8:61:9c:9b:86:73:03:e0:dc:a2:68:ac:1f:2a:
53:b2:6e:bb:fc:83:27:94:0d:87:a7:3d:22:56:34:23:74:5d:
44:b3:62:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:52:33 2025 by rpki-client