Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/ADED81322BF311EF839F2253C4F9AE02.roa
File: ADED81322BF311EF839F2253C4F9AE02.roa (raw, json)
Hash identifier: Iu0zEh0rvz+eM07IUYJUVEkoDhOhfe9x44bgbYI2W8g=
Subject key identifier: 8E:05:C5:E2:95:9B:7A:37:A0:49:64:95:0B:46:BE:95:5F:F9:F1:A6
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 0CD8
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/ADED81322BF311EF839F2253C4F9AE02.roa
Signing time: Sun 16 Jun 2024 15:18:27 +0000
ROA not before: Sun 16 Jun 2024 15:18:27 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 139888
IP address blocks: 2406:840:fc80::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3288 (0xcd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: Jun 16 15:18:27 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=666f0242-1411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5a:91:88:9c:48:c0:9c:22:08:77:f5:f8:7d:
d6:20:3b:8c:95:0e:3c:b5:0d:ca:25:00:be:67:26:
d1:0c:7e:2e:18:1c:09:85:79:c0:62:54:0c:70:f2:
f0:e0:cd:5b:7f:ce:ef:36:0a:16:e3:fd:11:65:e7:
b4:c7:43:ce:0a:df:29:8d:a6:f8:fc:a5:09:01:2b:
8a:5d:62:11:24:94:4f:75:52:61:a2:80:be:f3:26:
c7:5a:4e:2d:2c:f4:df:48:68:65:b0:95:ff:12:72:
58:d4:10:d6:e3:a6:8c:73:5c:22:c7:d5:4b:80:49:
ba:54:f1:d3:71:1f:e9:50:ee:94:17:d0:ee:bb:8c:
77:d6:24:6b:af:4a:d1:2b:c0:a4:25:22:21:49:9d:
83:48:ae:64:24:b5:cb:bd:52:06:6f:91:70:48:07:
4d:e9:26:50:9c:0b:8d:b4:ed:42:42:8f:4d:cb:a1:
74:4e:af:0a:9b:fc:f0:35:8e:34:5e:98:e5:fe:15:
92:fd:1c:56:fe:5f:22:07:0c:50:c2:96:ef:b8:be:
26:d1:8c:9e:d0:c8:a0:ce:32:34:ca:92:b9:5c:88:
ff:46:d5:0f:81:9c:af:a4:26:fe:91:a5:d6:c5:99:
40:e0:5e:34:1f:6d:49:1e:d5:97:b9:2a:e4:fd:9c:
b4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:05:C5:E2:95:9B:7A:37:A0:49:64:95:0B:46:BE:95:5F:F9:F1:A6
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/ADED81322BF311EF839F2253C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:840:fc80::/44
Signature Algorithm: sha256WithRSAEncryption
49:c2:af:f0:5a:3d:eb:e0:0d:6c:29:0b:15:ef:61:ab:8b:71:
e2:f1:c6:8f:dc:f7:ce:0a:98:02:97:d6:52:b3:c4:56:dd:09:
2c:de:b4:de:63:78:e2:82:aa:de:23:7b:88:2a:5e:ce:b5:aa:
b2:37:16:99:2d:a9:4c:d8:68:86:a2:7f:10:02:d0:5e:81:04:
aa:51:7f:b4:67:2b:4c:3d:32:6d:89:54:e9:67:91:51:b2:3b:
13:f2:00:08:3e:f9:e7:2f:36:5a:bf:95:05:14:5c:2a:1f:f3:
89:d9:df:4f:10:81:77:2f:27:d8:6d:e4:52:c6:d6:c1:d9:4e:
c2:e9:e7:3a:27:59:94:8b:f5:ea:5c:ac:06:38:ae:94:ac:5e:
d6:77:cf:2c:3f:97:de:7e:e7:cd:49:d2:d7:1b:fd:59:97:6d:
98:70:3d:23:3e:32:0b:62:36:83:c3:2d:58:b2:43:cc:01:7d:
10:fa:c0:c3:80:72:80:04:c6:99:20:45:4e:7e:93:b4:a9:20:
81:67:d7:28:9d:6c:1a:5c:e2:83:1f:d2:0e:98:bd:32:ff:d7:
88:9e:6a:d1:e1:c8:c8:40:3e:1c:e4:36:04:72:b0:fa:df:fe:
5a:2a:37:88:ef:55:47:d6:cf:7e:29:d4:ec:b6:f4:ae:3b:1c:
6f:1c:48:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:36:48 2025 by rpki-client