Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/AA730ACCBCFA11EDAD328D3AC4F9AE02.roa
File: AA730ACCBCFA11EDAD328D3AC4F9AE02.roa (raw, json)
Hash identifier: WToU+UpRxbQJKSr2QGut5hwA296t8z/pXjsZxqDqyvg=
Subject key identifier: BF:9F:6A:94:E2:E6:A8:CB:19:4A:70:25:3A:8F:7C:2A:C1:92:C7:2E
Certificate issuer: /CN=A9127FC2/serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28
Certificate serial: 02BB
Authority key identifier: 73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/AA730ACCBCFA11EDAD328D3AC4F9AE02.roa
Signing time: Sun 21 Apr 2024 03:45:27 +0000
ROA not before: Sun 21 Apr 2024 03:45:27 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 150318
IP address blocks: 2401:1740:c01::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 699 (0x2bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127FC2/serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28
Validity
Not Before: Apr 21 03:45:27 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66248bd7-462d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:67:9a:4c:fa:e5:c5:cf:16:db:ba:b1:dc:ef:
33:e6:90:6b:58:e3:ba:a5:f9:57:87:ac:e4:71:f5:
a5:7c:c0:39:b9:a3:8e:f7:f6:3a:b7:cb:c5:63:bb:
46:7a:7a:39:d8:08:6a:93:ef:1f:5d:e3:06:c9:be:
fc:cc:c0:43:dc:51:81:a8:16:fc:d8:df:fe:48:fb:
09:01:e7:77:f6:0c:6c:74:a5:2b:2d:56:fe:7b:6d:
38:64:5d:ff:db:6f:0c:c3:1d:6d:97:45:80:66:ef:
19:95:bb:08:23:7d:d8:d2:dd:77:67:dd:be:08:9e:
44:99:ef:ab:64:f8:87:49:a1:1c:1d:70:e5:ef:34:
7d:11:24:90:fe:25:10:2b:3d:15:fc:15:6f:91:ac:
5b:56:9e:0f:8b:37:2a:49:18:65:dc:99:83:38:94:
28:5d:74:c5:78:58:c1:9e:46:15:bf:e5:b2:e5:f4:
2c:71:64:6b:20:1f:55:68:a2:90:2d:fe:9b:b0:9b:
c2:4c:a7:3e:ea:28:25:27:cd:4e:ed:a5:c4:63:f8:
d6:18:75:1f:f4:1b:1b:35:13:ab:7a:46:01:27:f4:
b6:b4:1a:c3:99:0d:f4:05:30:8a:f9:a6:51:14:73:
b9:37:60:6c:31:cf:36:26:ef:53:79:ee:79:3b:a6:
62:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:9F:6A:94:E2:E6:A8:CB:19:4A:70:25:3A:8F:7C:2A:C1:92:C7:2E
X509v3 Authority Key Identifier:
keyid:73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/AA730ACCBCFA11EDAD328D3AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:1740:c01::/48
Signature Algorithm: sha256WithRSAEncryption
8a:e8:39:aa:79:cb:bd:71:d4:52:b4:fe:7c:33:c7:a5:ae:d8:
af:8c:ca:7c:0c:fe:de:32:6d:fd:90:54:37:ad:52:e2:36:e9:
1b:5d:77:23:46:88:75:8c:e6:12:8b:65:8e:6f:4d:8d:d1:6c:
5a:d0:40:c7:51:c1:52:47:2e:bb:96:8c:05:16:c4:78:eb:a9:
f8:61:9a:1d:82:10:26:12:e3:60:85:e3:97:a3:34:7a:01:d5:
29:a1:bb:46:eb:85:e2:b2:a9:73:6d:d8:e3:e5:6a:bf:ba:51:
96:4b:5d:17:85:6a:f0:29:6c:2a:bb:cb:61:15:9a:ff:f7:1f:
93:76:d0:9a:49:d0:88:ea:5c:da:18:ba:63:9e:45:b9:15:e7:
33:01:98:3b:62:d9:b1:64:23:20:5f:4d:71:4e:63:5c:c9:a6:
58:02:06:40:c6:c0:aa:60:53:6a:67:a2:6d:14:63:55:2c:4f:
1e:e1:7f:ac:e6:a6:61:07:e7:b4:04:7e:24:ce:58:44:3e:91:
c1:c5:13:8b:ca:59:47:10:ef:96:52:17:63:16:01:54:92:8a:
13:1b:38:9f:ef:d6:9c:3f:b0:71:fc:62:29:0f:82:e3:7c:76:
37:80:f9:b3:57:6e:6a:b1:84:c7:a2:70:c2:d3:5b:0b:23:c2:
e7:f5:cf:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:53:07 2025 by rpki-client