Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/197526BC16C811EFAA6A4727C4F9AE02.roa
File: 197526BC16C811EFAA6A4727C4F9AE02.roa (raw, json)
Hash identifier: Q8edZ7GSWavQtYov8JfYCZ8r74V7vjihX5UsYaR0Fr0=
Subject key identifier: 98:BA:8D:65:08:5E:13:AD:C6:78:C7:19:BD:54:90:D9:7A:4C:A1:93
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 0D3F
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/197526BC16C811EFAA6A4727C4F9AE02.roa
Signing time: Sat 17 Aug 2024 04:32:19 +0000
ROA not before: Sat 17 Aug 2024 04:32:19 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 2406:840:e666::/47 maxlen: 48
2406:840:fd9f::/48 maxlen: 48
2406:840:fdd0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3391 (0xd3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: Aug 17 04:32:19 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66c027d2-aee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:92:e6:e2:8f:c2:4c:6c:6f:d7:3d:34:0c:22:
b9:52:00:26:65:8f:ed:8f:a0:2f:29:43:c2:86:a8:
f1:88:e1:5c:86:48:a4:14:76:b7:0d:04:d1:5d:ff:
cf:87:57:06:45:80:51:57:6a:82:e8:92:bd:6b:56:
4b:ae:a5:19:85:ad:8a:9e:02:a5:70:e2:55:65:a1:
d8:4c:3f:96:34:0b:53:40:3d:2b:4a:b8:7a:d7:0f:
55:61:af:db:43:94:e5:36:65:47:f7:da:42:f4:61:
dc:f4:41:58:54:3f:e4:e5:8f:99:2e:07:a9:28:2b:
1c:ee:48:de:f2:ea:c7:76:71:3f:4d:73:02:49:17:
18:2f:72:01:da:fe:7a:e3:7d:0c:19:c8:6e:10:28:
39:19:8c:fc:37:60:ff:58:74:cd:a4:07:04:60:f5:
6d:db:3c:a1:70:2d:58:d4:f8:59:44:af:d8:d3:ae:
a2:3f:51:36:eb:40:67:7e:11:e4:98:e4:39:0a:17:
59:f4:0d:82:5f:ba:90:5b:86:76:d6:26:a2:85:8d:
7e:21:27:ba:fd:94:80:91:6f:a0:a9:af:69:94:9c:
14:8f:f3:ac:ab:95:f8:28:53:3a:57:20:d5:b3:75:
71:52:69:3a:58:f3:60:99:0e:d7:e8:32:9a:43:de:
b8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:BA:8D:65:08:5E:13:AD:C6:78:C7:19:BD:54:90:D9:7A:4C:A1:93
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/197526BC16C811EFAA6A4727C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:840:e666::/47
2406:840:fd9f::/48
2406:840:fdd0::/44
Signature Algorithm: sha256WithRSAEncryption
0b:8e:ae:d5:05:7c:dc:8c:8f:83:bd:13:7d:04:5a:af:b8:c6:
90:8d:f7:06:e1:16:12:4d:dd:99:78:95:81:18:70:4b:45:d1:
7f:5c:1d:c3:bc:cf:8d:6b:f0:60:5b:ce:9d:f4:27:ff:19:f5:
84:31:18:7f:29:8e:2f:6e:0b:ba:9f:5b:1b:2b:57:80:67:e4:
bd:3a:09:ff:e6:bf:fa:09:93:53:c8:4b:fb:83:92:7a:56:53:
9a:e0:e8:60:1b:03:69:fb:98:51:e0:fc:56:31:76:1b:e3:c5:
ae:cd:d8:52:87:d9:56:0b:29:57:31:3a:8a:8e:ca:82:cc:ad:
7a:99:8b:b3:0e:6e:62:46:7b:02:5c:bd:d6:6c:01:4a:49:98:
ab:10:f5:a9:cd:93:aa:55:40:20:c6:30:d0:c9:6a:25:e9:1b:
79:32:c5:2c:3b:d6:f5:b9:46:74:a1:89:27:1d:02:bd:e4:7e:
73:94:c8:31:6a:f5:90:fc:47:d3:8f:2f:54:c2:74:12:03:eb:
b1:6e:71:39:e6:a7:05:43:ed:b8:9b:1b:e0:03:18:fe:8b:0a:
c3:91:db:9a:64:e6:de:0a:8d:bb:bc:d0:56:2c:da:77:d0:f4:
42:86:f3:8f:0c:26:e5:3f:f7:6c:6f:6b:ca:d5:95:a3:67:69:
2d:59:72:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:21:31 2025 by rpki-client