Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/76E5D6AE727411EFAD2ACD27C4F9AE02.roa
File: 76E5D6AE727411EFAD2ACD27C4F9AE02.roa (raw, json)
Hash identifier: seqCKD6Db6uHjZMFtslvwJ+ELyFHvSU96+t1eEuQ2I0=
Subject key identifier: 41:7B:5F:07:E2:CD:18:E2:FE:44:D8:A7:EC:CC:3C:F1:C2:0C:75:A4
Certificate issuer: /CN=A9199BDF/serialNumber=6A4F43110050F0681964D858F9144E052BB8899A
Certificate serial: 0EC5
Authority key identifier: 6A:4F:43:11:00:50:F0:68:19:64:D8:58:F9:14:4E:05:2B:B8:89:9A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak9DEQBQ8GgZZNhY-RROBSu4iZo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/76E5D6AE727411EFAD2ACD27C4F9AE02.roa
Signing time: Sat 14 Sep 2024 08:36:41 +0000
ROA not before: Sat 14 Sep 2024 08:36:41 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 104
IP address blocks: 2406:2c0:1132::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3781 (0xec5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199BDF/serialNumber=6A4F43110050F0681964D858F9144E052BB8899A
Validity
Not Before: Sep 14 08:36:41 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66e54b19-d5ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ce:2b:60:e9:61:47:f7:c2:8c:8c:9a:89:3e:
67:bd:13:07:6f:74:0d:d0:d8:9f:6d:35:ec:d5:3f:
fd:13:84:3d:fe:af:5b:47:4b:bb:d1:d3:40:50:26:
24:8a:c9:b9:0e:39:8f:b7:db:08:bc:a9:f9:4b:50:
97:29:4d:2f:e3:67:9c:c5:f5:e4:be:43:48:a1:57:
13:60:62:13:67:14:d0:45:c9:5b:91:5f:93:5e:b1:
52:de:4e:15:97:d2:84:66:09:11:93:14:84:57:bd:
f1:42:a8:76:78:ec:12:99:60:c5:da:05:45:ac:2a:
ce:a8:c3:6c:d6:09:1f:40:e1:f4:0c:69:ec:50:8e:
19:14:e2:ab:17:8d:fe:58:b1:e5:b1:9c:28:8c:24:
04:9e:06:3c:c2:40:57:13:6a:ec:90:c2:9e:de:00:
b1:ca:8c:f2:a4:32:fb:81:fd:c8:ca:6a:98:fe:6f:
2e:8d:df:73:d0:b4:0c:b2:ad:c1:c5:a9:6b:92:68:
f4:fe:f0:5b:89:1f:b4:6a:45:8f:f9:29:15:9c:e9:
cf:be:51:51:f1:01:b8:c1:64:dd:e2:71:5e:f8:81:
06:02:89:9e:da:bf:c1:d4:d8:e4:66:db:e9:75:95:
c7:8f:0d:df:bc:0e:06:ec:6f:5c:bd:52:19:9f:c4:
26:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:7B:5F:07:E2:CD:18:E2:FE:44:D8:A7:EC:CC:3C:F1:C2:0C:75:A4
X509v3 Authority Key Identifier:
keyid:6A:4F:43:11:00:50:F0:68:19:64:D8:58:F9:14:4E:05:2B:B8:89:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak9DEQBQ8GgZZNhY-RROBSu4iZo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/76E5D6AE727411EFAD2ACD27C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:2c0:1132::/48
Signature Algorithm: sha256WithRSAEncryption
40:53:7f:b7:a2:f8:b6:35:4b:0a:03:97:c6:f9:08:d0:39:65:
44:63:41:91:b7:f1:1a:12:42:59:63:e8:b9:c3:e5:cf:c2:47:
16:13:e5:85:5d:ad:1d:70:7f:72:2f:07:17:1d:2e:77:74:de:
36:0e:d2:2f:24:00:7b:bd:b8:75:c3:cd:77:a3:40:b1:21:c1:
8a:28:de:eb:43:82:d9:bd:57:96:35:47:fa:df:b9:5f:e2:5f:
8d:08:e3:43:43:88:21:09:0b:b1:7a:2a:b8:32:ea:e1:7d:03:
d0:7f:4e:a1:a7:36:17:cc:d8:6a:0b:34:be:66:b9:8f:a1:cb:
57:b6:c7:29:18:e4:3e:a8:55:83:c6:8b:54:2a:8b:b2:f3:bf:
fc:97:da:96:32:e9:b0:71:fe:5e:59:27:ca:cd:66:3a:f0:95:
b5:0f:de:b5:c0:7c:40:e7:dd:e5:9a:71:74:a9:a7:7d:1b:33:
7b:c8:b1:9a:2a:25:e8:7b:31:7e:13:ea:b0:98:86:4c:ca:a9:
12:08:3c:a7:d8:ea:c8:e7:4b:93:07:db:34:2f:60:28:38:be:
82:2c:37:a8:69:c9:dc:ed:44:f5:9f:a1:b3:bb:af:24:88:7d:
c7:ac:b4:b1:fa:1a:ef:51:75:de:ee:20:4d:99:7a:3f:c6:05:
e8:63:83:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:11:50 2025 by rpki-client