Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/0722D856931111EDB92FFC5FC4F9AE02.roa
File: 0722D856931111EDB92FFC5FC4F9AE02.roa (raw, json)
Hash identifier: 7oNk256QBQWk8D7P/e9aNPn4CJlZ1RUEj4xQ/0njbSY=
Subject key identifier: F0:02:C6:61:29:0D:CD:CA:A0:F4:CA:5C:90:1E:5F:FE:46:06:04:84
Certificate issuer: /CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Certificate serial: 257D
Authority key identifier: 42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/0722D856931111EDB92FFC5FC4F9AE02.roa
Signing time: Fri 22 Nov 2024 18:06:26 +0000
ROA not before: Fri 22 Nov 2024 18:06:26 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 141384
IP address blocks: 2001:df0:5580::/52 maxlen: 52
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9597 (0x257d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Validity
Not Before: Nov 22 18:06:26 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=6740c822-88f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:41:01:a7:d4:3b:de:a9:12:f8:24:2d:6f:ac:
7b:e6:77:51:78:f7:25:34:a6:71:95:4f:41:c7:c0:
76:23:c4:86:b8:cb:bb:a9:af:73:ba:ab:c4:e0:30:
ce:b7:0c:03:cf:91:d7:56:bb:0e:ca:27:2c:52:04:
32:a1:41:72:95:08:c5:45:39:cd:c0:d6:9a:77:62:
54:73:b2:ba:3c:d4:fb:c2:6d:9e:ec:d8:78:c4:7e:
5f:34:76:3a:a1:38:5f:92:40:f3:6e:af:99:20:92:
db:0b:f3:39:8d:44:10:78:3d:ac:3c:e6:45:21:45:
f3:f1:83:69:c5:50:ad:17:10:a0:31:9d:cf:2f:8b:
a0:07:03:8b:5a:65:5e:12:a4:f0:37:76:f3:30:09:
98:38:d4:2b:f2:d5:04:6f:07:5e:3e:a0:ac:7f:f5:
2a:29:10:40:0d:d2:92:59:82:fa:22:88:b9:1f:5a:
68:95:e4:1a:cb:dc:95:fb:d6:1a:0b:34:de:fc:ac:
bc:23:08:93:a9:18:5c:e2:79:90:66:bf:1a:69:22:
bc:43:eb:e4:f7:50:d0:fc:bc:76:6b:f0:28:37:42:
22:6c:b6:1c:e6:20:3a:ff:7e:73:cf:15:94:0b:d7:
56:8e:c0:da:4d:03:ba:06:14:cb:7a:08:f2:79:d5:
e1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:02:C6:61:29:0D:CD:CA:A0:F4:CA:5C:90:1E:5F:FE:46:06:04:84
X509v3 Authority Key Identifier:
keyid:42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/0722D856931111EDB92FFC5FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df0:5580::/52
Signature Algorithm: sha256WithRSAEncryption
0b:c2:50:6a:85:f9:ab:47:29:0d:44:d3:b0:93:a5:d1:77:c2:
c0:38:b0:d9:fe:c5:ba:11:6a:43:c1:3e:6a:72:d9:ae:a0:81:
38:54:f6:91:56:57:57:f8:15:66:b1:63:41:17:8d:2d:7d:6a:
50:e1:68:d5:e6:3f:a4:7a:69:94:e2:99:b2:a1:5c:1d:7d:55:
1c:08:4a:47:0e:dc:dd:1b:79:aa:61:78:56:52:e3:ee:d5:f9:
b3:28:ac:5e:80:4a:1d:f9:4f:f8:37:7e:8f:8e:8f:8a:4d:cb:
7d:9e:66:3a:00:b5:11:5b:15:a9:e4:ff:3b:ee:5c:02:b5:7b:
3c:cc:c5:82:d7:c9:fa:bc:52:c3:32:a4:4a:fd:8e:76:5f:d5:
1d:5b:6e:48:0d:bc:41:88:76:85:0b:cc:91:fc:ef:ee:d1:d9:
01:80:f2:db:9b:00:a6:ae:9e:5b:8f:d2:b6:28:e4:30:7d:79:
27:f6:8e:dc:ce:5c:c8:66:e1:00:22:5f:f9:93:f6:a6:fc:ef:
20:2d:ce:3f:40:e0:fc:c5:bd:b3:2d:33:48:20:e2:6c:60:98:
fd:cc:1c:ca:76:b3:e2:8d:04:2a:2b:86:25:39:eb:88:f4:6e:
9c:f8:12:b7:ee:ae:2c:53:34:1d:7b:a4:de:47:2f:56:a4:7f:
0d:00:f9:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:01:29 2025 by rpki-client