Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/118F422C816F11EF9ACB654AC4F9AE02.roa
File: 118F422C816F11EF9ACB654AC4F9AE02.roa (raw, json)
Hash identifier: dqd2t4UXuMtWb1yN/NCXtKO4VOE3Updlpy8CHKQcrr4=
Subject key identifier: 91:31:D2:9E:90:8C:C6:E7:27:E8:68:24:13:5C:87:EC:C2:20:70:B7
Certificate issuer: /CN=A9153AE1/serialNumber=F664AC026BF4F47C08757CDE7F21EC3CF2A4E64E
Certificate serial: 1876
Authority key identifier: F6:64:AC:02:6B:F4:F4:7C:08:75:7C:DE:7F:21:EC:3C:F2:A4:E6:4E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/118F422C816F11EF9ACB654AC4F9AE02.roa
Signing time: Thu 03 Oct 2024 10:05:51 +0000
ROA not before: Thu 03 Oct 2024 10:05:51 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 20940
IP address blocks: 2400:2000:6::/48 maxlen: 48
2400:2000:7::/48 maxlen: 48
2400:2000:b::/48 maxlen: 48
2400:2000:c::/48 maxlen: 48
2400:2000:f::/48 maxlen: 48
2400:2000:10::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6262 (0x1876)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153AE1/serialNumber=F664AC026BF4F47C08757CDE7F21EC3CF2A4E64E
Validity
Not Before: Oct 3 10:05:51 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66fe6c7f-d1c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1d:ee:38:c6:bd:4f:a9:10:f0:aa:16:69:f7:
b1:7a:0f:bc:b9:97:70:a9:7f:03:6b:33:1f:85:72:
b8:15:a5:13:19:35:88:11:8c:db:4e:be:94:f7:d0:
b4:ac:6d:ad:50:6b:fc:13:70:97:f9:f8:80:f0:55:
a1:de:d9:28:37:09:70:17:6e:c7:c6:dc:95:93:12:
96:c2:a8:fd:d4:9a:26:7a:a4:ea:ba:6e:7c:26:a0:
63:8a:b0:f2:a7:3d:c6:10:70:7a:82:1b:f8:ca:4f:
33:74:bb:cb:58:a1:e7:89:dd:d9:c1:78:50:79:1c:
fd:29:d6:da:da:e5:cc:d6:ae:73:52:39:1f:f1:ce:
0c:4b:f0:22:6a:44:e6:c6:f6:d9:a6:8f:11:ef:de:
13:9d:7d:af:78:41:c2:64:a3:ce:c4:c0:38:0c:04:
43:db:a0:59:f0:68:a3:5f:58:43:52:69:e9:33:15:
9a:32:31:4a:f2:38:b4:4d:c2:0e:94:d2:ea:42:fe:
30:a4:35:5a:25:ea:96:56:36:c4:54:4f:64:06:48:
8a:ba:07:0c:74:10:58:e0:69:fd:29:22:fe:9c:e3:
cf:eb:3b:ac:0a:89:53:ca:18:63:dc:0b:b1:bb:72:
56:fb:ec:ff:6e:51:85:95:43:3b:27:1e:51:54:b1:
cb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:31:D2:9E:90:8C:C6:E7:27:E8:68:24:13:5C:87:EC:C2:20:70:B7
X509v3 Authority Key Identifier:
keyid:F6:64:AC:02:6B:F4:F4:7C:08:75:7C:DE:7F:21:EC:3C:F2:A4:E6:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/118F422C816F11EF9ACB654AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:2000:6::/47
2400:2000:b::-2400:2000:c:ffff:ffff:ffff:ffff:ffff
2400:2000:f::-2400:2000:10:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
1a:e2:a3:5c:a5:65:f0:c3:12:e3:7c:fb:e1:c6:23:4b:9a:2e:
5e:91:ae:3f:2b:04:36:b5:9f:b4:e9:82:e2:66:16:de:27:80:
4f:a3:5f:b4:bf:d6:21:89:dd:ca:50:13:50:48:33:6c:17:97:
75:fb:d1:8a:e4:ee:5a:4d:d0:79:b2:b0:1c:89:53:2f:99:16:
f3:df:e3:3b:a9:c3:b1:e4:29:f2:70:35:57:f5:fa:fe:c7:92:
b6:d2:72:35:77:5c:5c:f8:1e:3f:0a:50:c2:18:70:16:10:92:
09:54:13:47:0f:8e:03:7b:8d:d5:d1:8a:ea:5a:7e:f2:c4:75:
57:b7:38:a3:63:c1:ff:7b:e0:9a:9b:34:43:0f:e3:e7:1e:e8:
7c:4f:09:d3:1c:72:92:5c:72:96:a3:17:a3:93:84:3d:3c:5d:
f5:77:98:c7:3a:34:c3:bd:9d:dc:be:fe:f5:03:ba:d6:02:32:
96:c5:ac:dc:4e:67:f3:e0:1b:f4:71:8e:6d:99:9b:a8:b8:04:
9d:f0:bb:a9:a5:c4:6a:be:2b:89:da:c9:16:0f:7f:29:7d:11:
86:70:c1:e1:ea:e6:99:bd:b8:47:e9:51:31:7b:96:d0:e4:75:
5f:af:bb:03:3a:ec:83:e3:f6:6e:41:ab:33:5a:11:2d:16:19:
29:cc:d1:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:34:59 2025 by rpki-client