Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/9ED46D5C72F611EE857CC13FC4F9AE02.roa
File: 9ED46D5C72F611EE857CC13FC4F9AE02.roa (raw, json)
Hash identifier: ezRu4Wadjp9NH7xvxUm1SslQ6GZ7jqHMcsIlTCHPxl0=
Subject key identifier: 4D:6F:BF:C4:F6:0A:46:BB:8C:B2:3E:F7:46:EA:99:A4:09:C0:DE:17
Certificate issuer: /CN=A918754F/serialNumber=20CB58BB7CD424E761BC393BFCB8D676685F6C0D
Certificate serial: 257F
Authority key identifier: 20:CB:58:BB:7C:D4:24:E7:61:BC:39:3B:FC:B8:D6:76:68:5F:6C:0D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMtYu3zUJOdhvDk7_LjWdmhfbA0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/9ED46D5C72F611EE857CC13FC4F9AE02.roa
Signing time: Thu 12 Sep 2024 16:22:50 +0000
ROA not before: Thu 12 Sep 2024 16:22:50 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 58691
IP address blocks: 2407:1500::/33 maxlen: 36
2407:1500::/48 maxlen: 48
2407:1500:1::/48 maxlen: 48
2407:1500:2::/48 maxlen: 48
2407:1500:3::/48 maxlen: 48
2407:1500:4::/48 maxlen: 48
2407:1500:5::/48 maxlen: 48
2407:1500:6::/48 maxlen: 48
2407:1500:7::/48 maxlen: 48
2407:1500:8::/48 maxlen: 48
2407:1500:9::/48 maxlen: 48
2407:1500:10::/48 maxlen: 48
2407:1500:8000::/33 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9599 (0x257f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918754F/serialNumber=20CB58BB7CD424E761BC393BFCB8D676685F6C0D
Validity
Not Before: Sep 12 16:22:50 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66e31559-b0c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:de:34:13:e7:c3:1f:dd:6e:f8:ee:e9:06:53:
e9:e3:20:e7:ba:bd:fa:1e:7e:9f:b4:35:8e:a9:26:
ed:3a:16:b5:72:e1:7a:49:0f:5d:57:99:4b:a5:d2:
cf:40:a3:19:13:23:9a:2d:b6:c7:47:91:d3:82:00:
73:06:7a:a5:48:8d:1d:a8:e5:6f:87:a4:ad:82:db:
64:65:62:e3:70:c4:32:00:db:ca:7b:e1:53:b1:1e:
67:1a:24:c4:fb:70:ba:77:37:37:86:2f:68:b2:88:
18:cb:22:67:61:10:06:e5:8e:bb:e9:24:f5:36:21:
5e:d5:20:b8:fe:3e:36:be:9a:51:95:89:dd:26:cb:
b5:90:de:36:f1:21:02:86:ae:d0:e5:7f:1a:f9:23:
d0:b3:e1:1c:75:f6:20:0a:73:25:c7:72:ea:b3:85:
59:d5:b8:07:ab:e9:45:0d:f3:26:75:14:ca:9d:26:
56:12:36:08:5f:4f:d4:ce:ac:75:dc:d1:a8:dd:0a:
a0:42:63:95:f2:b6:09:88:93:7c:4e:28:20:e5:f1:
af:0f:c6:f3:b3:9f:3c:0b:c6:8b:8c:fa:90:60:2e:
86:1b:69:fa:d6:a3:f5:5f:4f:1a:7a:22:79:7b:26:
61:c6:02:3f:7e:77:21:fe:17:3f:31:6b:93:d7:c5:
30:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:6F:BF:C4:F6:0A:46:BB:8C:B2:3E:F7:46:EA:99:A4:09:C0:DE:17
X509v3 Authority Key Identifier:
keyid:20:CB:58:BB:7C:D4:24:E7:61:BC:39:3B:FC:B8:D6:76:68:5F:6C:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMtYu3zUJOdhvDk7_LjWdmhfbA0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/9ED46D5C72F611EE857CC13FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:1500::/32
Signature Algorithm: sha256WithRSAEncryption
0b:c1:84:8d:d2:7b:dd:66:25:c9:02:cd:d7:a0:0e:85:16:23:
40:07:4b:69:ab:e2:25:04:69:5e:e1:2d:67:8d:9e:56:b5:b6:
1c:70:61:cb:18:56:db:54:07:f9:16:37:7a:a7:78:14:f2:da:
48:85:b5:7b:3f:b6:bc:b4:28:6b:be:b9:07:cf:27:cc:0e:30:
d5:e6:9a:b0:d9:c1:6d:e2:be:3c:22:4b:e4:bb:a7:f9:d4:1b:
82:92:20:6e:92:d5:21:f4:75:15:ed:62:27:be:b1:d6:94:ca:
e9:48:01:fd:23:f8:5f:36:22:63:78:79:66:13:c1:91:9a:cc:
a6:4d:d5:4e:f4:5b:db:26:19:d3:ca:2a:87:c4:89:c5:04:1d:
bb:3e:94:5f:59:33:b1:56:7a:94:f9:6b:57:e0:a1:0d:73:2f:
7b:62:55:96:68:a9:5c:91:f1:ae:ec:c0:b9:cf:b3:94:ac:02:
b0:19:2f:ed:d1:3b:f1:f4:60:62:86:5d:4b:21:96:69:4f:ca:
f9:07:c2:b4:fb:7b:5c:c4:af:ea:58:e1:b6:64:ae:52:4d:76:
93:16:00:2c:35:ab:7f:ee:a3:44:54:57:86:cf:28:06:8f:27:
d4:42:6c:f8:24:9f:e6:90:50:b0:bd:f8:cf:35:01:b7:d4:a5:
a6:a2:64:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:28:52 2025 by rpki-client