Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/0FE13C92EBB411EE9D86095BC4F9AE02.roa
File: 0FE13C92EBB411EE9D86095BC4F9AE02.roa (raw, json)
Hash identifier: Urnbb3WwZrA7rnMnP0+t9Rx88lYq3mJh+CKBhIzde4E=
Subject key identifier: E2:7B:72:48:A3:5E:55:50:54:5D:6E:2A:BC:67:56:7A:23:C3:F3:1E
Certificate issuer: /CN=A9153490/serialNumber=137353D0E8C145A580CB00BC3222089C4048AE51
Certificate serial: 18
Authority key identifier: 13:73:53:D0:E8:C1:45:A5:80:CB:00:BC:32:22:08:9C:40:48:AE:51
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3NT0OjBRaWAywC8MiIInEBIrlE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/0FE13C92EBB411EE9D86095BC4F9AE02.roa
Signing time: Tue 26 Mar 2024 21:01:49 +0000
ROA not before: Tue 26 Mar 2024 21:01:49 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 139623
IP address blocks: 2401:7f20::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24 (0x18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153490/serialNumber=137353D0E8C145A580CB00BC3222089C4048AE51
Validity
Not Before: Mar 26 21:01:49 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=660337bd-7f3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:77:4c:6f:4f:61:97:b4:5e:44:0b:a6:ea:08:
8a:ea:26:94:2b:5f:4f:c4:20:69:dc:93:49:aa:2f:
35:18:ae:15:b1:d1:99:8c:ce:38:14:9c:c0:1d:f3:
2c:4f:a3:c9:a2:9a:dd:80:49:d5:e2:c4:6c:74:47:
00:7e:e6:9f:d7:27:a4:6b:09:fb:f6:97:29:fe:ff:
87:29:00:3e:d3:96:d3:72:51:fc:15:96:81:7b:06:
92:6c:fe:d7:d1:a8:d4:8f:87:e0:a0:e3:25:74:5b:
b7:3a:21:ec:68:63:bc:40:af:38:5e:61:8c:b6:65:
a3:f4:4e:57:fd:87:0f:4f:70:5b:b1:57:df:8b:ba:
c0:69:d3:87:61:18:73:f0:11:9c:2f:a3:9e:b8:8a:
25:5f:53:5b:0a:3c:ca:e3:3d:16:ea:cb:09:49:c6:
f6:a0:ac:fb:14:a0:8d:cb:10:89:7c:6b:e5:25:a3:
89:73:dd:fd:3b:38:10:d8:bb:0b:87:ca:49:83:1a:
bc:ca:23:65:a8:cf:5c:8f:9d:3f:a2:6c:9c:af:aa:
9c:38:d1:6b:8c:d5:d3:6f:0f:51:60:c1:5c:52:26:
2c:07:c8:ac:d4:22:63:23:95:75:ae:d0:22:5a:f4:
51:de:da:ea:89:7d:b3:56:ca:c9:9e:cc:6a:c9:fe:
37:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:7B:72:48:A3:5E:55:50:54:5D:6E:2A:BC:67:56:7A:23:C3:F3:1E
X509v3 Authority Key Identifier:
keyid:13:73:53:D0:E8:C1:45:A5:80:CB:00:BC:32:22:08:9C:40:48:AE:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3NT0OjBRaWAywC8MiIInEBIrlE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/0FE13C92EBB411EE9D86095BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:7f20::/32
Signature Algorithm: sha256WithRSAEncryption
7c:73:36:f5:dc:08:bb:79:8c:38:0f:6e:54:c9:1d:8d:54:5f:
46:25:1e:fc:a7:1c:71:4a:fe:b5:7f:11:09:71:45:39:54:bf:
4f:35:fd:dc:4e:c5:66:ff:fc:26:dc:4f:40:cb:e3:db:cd:b0:
27:23:47:d9:67:68:64:19:32:83:cf:75:e1:c3:f5:67:51:7a:
ea:49:cf:4c:48:57:49:10:11:04:ce:11:e3:dd:ea:e6:34:b5:
cd:1a:fe:ca:56:18:f1:27:6e:ea:5a:63:ad:8d:98:58:b0:79:
4b:2a:03:60:93:ff:a0:e3:2b:80:f2:d1:69:11:62:33:8d:13:
5f:bd:41:e9:fb:be:5d:36:f9:d4:e1:98:d8:9e:8c:4e:71:ec:
9e:b8:61:57:82:d0:61:0d:79:1f:91:cd:28:4a:bd:bc:b7:cd:
e4:42:b4:5c:59:2c:0c:01:a1:fe:c0:8e:3d:1b:4c:f0:28:be:
1d:4a:4e:c1:04:26:49:f1:51:c0:96:64:cb:27:13:db:e1:27:
dc:7c:f1:69:b6:48:c4:c9:2f:89:ca:64:28:66:43:5b:2a:32:
3f:d0:99:c3:33:e3:d3:c0:df:58:36:48:1f:6f:47:56:83:12:
16:16:ba:c0:67:13:ce:f3:78:a1:9b:62:0e:25:3c:dd:8c:dd:
eb:f5:6e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:36:11 2025 by rpki-client