Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/339E038C223B11EF8750653DC4F9AE02.roa
File: 339E038C223B11EF8750653DC4F9AE02.roa (raw, json)
Hash identifier: hmjSj8g6RQOPO6V6hh2c6HWSg0R22ShHOXKFoPzyTwU=
Subject key identifier: 28:71:65:A8:23:2D:CF:3D:5A:1A:0B:4D:A6:4D:94:03:7C:6E:C8:2B
Certificate issuer: /CN=A9167F0C/serialNumber=4E6142BD61B3EB5897CE01E8D45711DA50DCF565
Certificate serial: 09B8
Authority key identifier: 4E:61:42:BD:61:B3:EB:58:97:CE:01:E8:D4:57:11:DA:50:DC:F5:65
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/339E038C223B11EF8750653DC4F9AE02.roa
Signing time: Tue 31 Dec 2024 17:55:47 +0000
ROA not before: Tue 31 Dec 2024 17:55:47 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 134995
IP address blocks: 2402:6640::/32 maxlen: 32
2402:6640:5::/48 maxlen: 48
2402:6640:10::/48 maxlen: 48
2402:6640:11::/48 maxlen: 48
2402:6640:17::/48 maxlen: 48
2402:6640:18::/48 maxlen: 48
2402:6640:19::/48 maxlen: 48
2402:6640:20::/48 maxlen: 48
2402:6640:21::/48 maxlen: 48
2402:6640:22::/48 maxlen: 48
2402:6640:23::/48 maxlen: 48
2402:6640:24::/48 maxlen: 48
2402:6640:25::/48 maxlen: 48
2402:6640:26::/48 maxlen: 48
2402:6640:30::/48 maxlen: 48
2402:6640:fce::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2488 (0x9b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167F0C/serialNumber=4E6142BD61B3EB5897CE01E8D45711DA50DCF565
Validity
Not Before: Dec 31 17:55:47 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=67743023-1ffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6b:ec:3b:66:72:f8:fe:b3:dc:48:8f:ce:54:
f6:6e:dd:aa:9f:18:d3:e4:46:22:8c:57:77:d4:3f:
bf:69:88:b3:a9:32:26:07:d2:54:36:38:72:c8:76:
0e:1e:a3:ee:d8:23:0f:94:e9:79:ce:87:ea:70:96:
12:ac:c2:0a:ee:71:3c:c9:04:c0:70:41:c5:9d:e1:
ec:d3:dc:93:5f:f8:82:8a:bc:74:3d:20:96:9f:92:
84:33:fc:09:53:ff:df:0e:c2:81:b3:f6:60:eb:f1:
5c:9c:88:db:86:c4:5b:35:7d:30:4f:da:4c:51:ad:
0f:19:f8:b3:a0:cb:4a:74:f2:f2:47:6e:1d:0c:e5:
9b:48:05:d4:1d:b7:52:43:87:04:c7:83:e9:a0:e5:
06:89:d4:47:87:cc:e1:6e:48:24:45:56:f0:9a:f0:
6e:82:86:13:bd:72:93:27:62:f3:29:9d:e0:4e:7d:
35:8f:78:01:4d:37:0c:2e:55:5f:8e:1c:c1:6b:92:
e2:68:51:d9:d7:38:a6:36:c3:9a:73:3b:88:64:d6:
16:f6:c9:b0:73:0b:81:49:2b:1f:50:57:d2:16:59:
70:59:29:89:3e:29:a2:da:51:60:b3:a3:2c:74:0e:
ea:d0:0b:b9:bf:cf:0d:31:b7:5a:7e:6f:23:ad:e7:
5d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:71:65:A8:23:2D:CF:3D:5A:1A:0B:4D:A6:4D:94:03:7C:6E:C8:2B
X509v3 Authority Key Identifier:
keyid:4E:61:42:BD:61:B3:EB:58:97:CE:01:E8:D4:57:11:DA:50:DC:F5:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/339E038C223B11EF8750653DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:6640::/32
Signature Algorithm: sha256WithRSAEncryption
58:e8:9a:9a:b9:ee:c1:4a:66:a2:e5:a5:43:f7:ff:40:59:ed:
e7:8d:cf:f5:f6:b4:fb:e7:b4:eb:a7:66:39:5a:f7:9c:a3:5e:
f0:64:e2:65:cb:23:fc:0c:df:a9:57:7f:92:39:dc:be:a3:6b:
11:64:14:81:39:d5:1a:bd:e1:6a:79:4b:30:79:8c:07:78:83:
85:d5:00:b7:d2:99:12:c6:b1:9b:15:4e:b9:e6:a6:31:f3:71:
bd:3a:7e:25:95:58:23:de:5c:31:ae:0a:0e:d1:93:29:1b:a1:
60:29:05:87:74:93:73:19:91:84:7d:9f:ef:9d:f1:e3:f5:1d:
96:7f:4e:4f:83:c9:2a:93:18:34:80:65:e4:62:62:ad:2f:5e:
ae:d0:25:3f:92:52:51:8d:a8:c1:62:8d:ef:7a:06:05:46:a9:
0a:1f:90:32:eb:30:04:dd:38:07:ef:1b:d9:ab:db:d1:ee:82:
5d:74:fd:d8:d2:dc:15:82:af:70:91:18:9f:d1:07:56:52:b8:
b1:8b:3e:5b:0e:47:08:ad:bc:a5:4c:0a:11:ee:a8:ac:a8:f4:
a4:25:7b:22:a7:a4:ab:72:2b:94:5e:79:7c:92:73:b3:77:43:
ff:8d:f5:4a:b0:4b:e5:eb:99:0e:1e:57:49:57:36:42:2d:33:
06:ad:ec:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:14:49 2025 by rpki-client