Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/A1A37268814211EDA138A00AC4F9AE02.roa
File: A1A37268814211EDA138A00AC4F9AE02.roa (raw, json)
Hash identifier: md+a0yjWgmb08e6MuXGug8+kGuIsgrD7luH2zqcNk/4=
Subject key identifier: B2:F1:0A:B2:31:95:6B:A2:2B:D6:35:1D:6E:69:09:3A:95:A5:A7:D8
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 0C9A
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/A1A37268814211EDA138A00AC4F9AE02.roa
Signing time: Sun 26 May 2024 21:32:37 +0000
ROA not before: Sun 26 May 2024 21:32:37 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 203472
IP address blocks: 2406:840:9840::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3226 (0xc9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: May 26 21:32:37 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6653aa75-547e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b0:62:58:6e:a9:8a:96:e3:f5:8c:44:ff:3f:
77:59:e3:4b:9a:8c:80:ae:c2:14:ef:1e:fe:7b:3e:
3c:97:dc:94:bb:64:2e:00:51:7b:b8:81:20:da:8a:
04:58:55:e4:e6:ca:12:af:2a:84:bc:58:d6:c2:b7:
f7:bd:20:a8:42:84:79:24:cc:b0:3d:a7:ed:55:43:
f8:59:e6:c8:17:c0:ed:b7:36:9a:22:3a:34:65:11:
a2:20:d6:57:6c:2a:01:62:36:2e:a8:2a:42:6a:ab:
0b:82:9a:bd:a3:b3:e5:aa:f7:12:9b:ff:45:ee:dd:
7c:0f:9f:3b:db:a7:0b:b7:27:1d:30:26:6e:30:df:
87:36:cc:93:c1:4c:ee:90:f3:f0:e4:5c:f4:74:6b:
dd:4b:87:2c:f6:85:b9:03:a7:54:3e:03:a3:97:e1:
72:c5:de:04:2d:6a:cb:f0:57:0e:13:bf:56:38:04:
9e:d9:3c:03:4a:d9:87:d0:7a:0b:06:49:62:82:22:
91:22:cd:98:b9:10:9e:bd:cc:ea:e0:b3:4d:b2:c0:
ca:29:8d:18:12:a7:0d:0b:52:1f:50:9e:7b:d8:98:
4d:c6:e1:f3:7d:06:5b:42:ed:86:96:18:8a:9b:15:
96:1c:6f:bf:46:8b:f8:fe:b0:d9:f5:a7:91:ff:7c:
21:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:F1:0A:B2:31:95:6B:A2:2B:D6:35:1D:6E:69:09:3A:95:A5:A7:D8
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/A1A37268814211EDA138A00AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:840:9840::/44
Signature Algorithm: sha256WithRSAEncryption
a3:6a:73:a0:07:bf:a8:c9:82:01:73:6a:c0:89:6d:91:a6:bd:
02:a4:26:67:f0:e1:5f:af:80:2e:45:55:5b:a5:84:c0:85:06:
67:5e:cb:b1:cc:78:89:ff:c4:37:b7:4d:a9:e4:b9:2d:f3:73:
bc:54:f9:e1:a5:b0:64:cc:0f:62:c7:b9:43:6e:22:15:35:8c:
72:9e:59:27:40:df:c1:1b:72:81:6c:ec:0e:15:82:55:89:d5:
56:2f:30:27:ba:c9:40:a1:0d:f0:6c:74:e6:99:27:bd:8d:ea:
3c:3a:b8:00:17:30:89:9a:72:53:03:bb:63:10:7f:fc:eb:de:
de:a2:05:a6:da:35:2a:74:99:9f:91:af:16:de:d9:8e:57:c4:
08:a0:31:de:c7:ea:90:7c:2d:07:f8:ea:2e:f3:73:37:fd:08:
6a:4f:1a:23:53:85:47:89:03:80:5c:f8:d0:88:75:25:60:72:
4b:8c:79:57:51:77:b1:43:f1:ca:b4:19:f0:9c:0f:70:73:b7:
92:75:be:6a:4b:5d:35:37:40:58:aa:28:6f:36:2f:90:9c:9e:
22:8b:87:e2:c5:c5:26:19:7f:63:10:4b:8d:bc:4b:b2:76:07:
dc:41:b1:95:f5:f3:c7:4d:92:b7:8e:3a:37:25:3e:a8:bb:ec:
bb:1a:c4:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:48:24 2025 by rpki-client