Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/467B9370E1B311EE9D77BF36C4F9AE02.roa
File: 467B9370E1B311EE9D77BF36C4F9AE02.roa (raw, json)
Hash identifier: olYzUk3gwLC0xRa80SA0mb8yJeeTyjxH0wAAm7kRikA=
Subject key identifier: 90:60:8F:BC:9A:9E:AA:7E:39:D1:BD:F4:69:9D:CD:4C:EC:1E:87:B6
Certificate issuer: /CN=A917A66F/serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5
Certificate serial: 78
Authority key identifier: B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/467B9370E1B311EE9D77BF36C4F9AE02.roa
Signing time: Sun 11 Aug 2024 06:17:22 +0000
ROA not before: Sun 11 Aug 2024 06:17:22 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 137897
IP address blocks: 2403:27c0:c03::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120 (0x78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A66F/serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5
Validity
Not Before: Aug 11 06:17:22 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66b85771-d653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2e:cc:32:0f:16:ba:3e:ae:6e:20:a8:94:33:
6b:89:49:1c:4f:c4:49:5a:15:0d:56:07:5b:9f:e5:
b3:72:86:d3:f7:c5:fc:d1:01:df:97:ca:0c:b6:d0:
d7:b1:21:82:55:da:c7:82:ca:36:e9:ce:e5:32:fd:
7a:ee:d1:c7:89:dc:10:21:26:24:ac:27:e7:7f:81:
59:59:27:1b:3e:67:39:cb:50:7e:95:54:90:4a:bf:
d0:9e:c5:05:fe:38:21:02:6a:21:cc:38:31:57:12:
78:24:ba:f1:05:fd:af:cb:b5:f7:53:f5:eb:d8:60:
5b:30:f6:d5:7d:17:e0:f6:93:4e:55:c7:4e:4b:e6:
b9:93:9e:bb:9f:54:50:80:96:cc:cb:05:c8:f4:72:
81:47:03:10:72:18:f7:ec:6c:a2:5a:66:39:d1:9d:
2a:de:8e:aa:90:26:64:72:46:be:b6:38:14:90:b0:
84:cd:a2:4c:9d:7e:8b:ae:d7:8a:6e:f3:d4:4e:ec:
29:d5:ac:00:c2:75:03:5a:7f:7b:be:b4:f7:21:78:
d7:c2:08:12:da:cd:30:4d:f9:ee:a8:15:92:06:85:
23:53:9d:ac:90:20:9f:da:d5:ae:b3:3e:df:3c:df:
14:dc:00:e7:e2:98:fd:ea:a6:1e:d1:25:e7:58:a5:
58:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:60:8F:BC:9A:9E:AA:7E:39:D1:BD:F4:69:9D:CD:4C:EC:1E:87:B6
X509v3 Authority Key Identifier:
keyid:B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/467B9370E1B311EE9D77BF36C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:27c0:c03::/48
Signature Algorithm: sha256WithRSAEncryption
c8:40:e6:3b:1d:6a:bc:e1:b1:03:57:cc:07:bd:c0:d3:76:e7:
6b:19:32:57:f7:d7:ae:6c:36:5c:66:6d:47:7e:fa:4e:87:ba:
41:65:9e:b9:67:eb:75:8d:42:6c:6b:18:a5:c0:67:9e:56:4e:
5e:53:f5:46:29:80:ff:39:ad:3c:77:e1:7c:0b:ba:f9:aa:5e:
8e:f7:86:67:ce:fd:a0:c0:c5:51:d9:3f:51:39:43:b1:d2:87:
f6:57:b2:b1:06:9c:84:03:f9:56:ab:d2:47:32:7d:d4:33:e1:
38:d6:1c:d4:75:55:77:fc:67:99:f1:de:1d:a2:69:02:11:83:
97:8b:40:73:c6:09:b6:b1:eb:d8:c1:61:6d:30:58:c1:5b:ff:
cb:21:31:96:35:4a:54:95:61:1e:5e:fe:0e:b0:5b:6a:a3:98:
44:df:27:08:02:fd:3d:ed:a3:83:2a:31:b7:ee:74:2d:33:07:
76:fd:70:e0:85:75:f0:96:70:86:6e:5b:98:d7:1f:67:48:6e:
88:7f:d8:2d:92:8a:31:07:cb:ae:4e:f3:db:d3:eb:d5:61:67:
62:6f:cc:5f:26:3c:f2:fe:87:55:99:ef:c3:54:d4:5b:31:89:
a4:ed:3b:95:03:e4:56:3c:7a:55:cc:9c:40:4c:c6:c1:54:f7:
65:a3:24:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:12:12 2025 by rpki-client