Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/7879B24A3BA611EC8737B534C4F9AE02.roa
File: 7879B24A3BA611EC8737B534C4F9AE02.roa (raw, json)
Hash identifier: /NNSrkw0/Mb+wg39zz0HMBaPlsqc85X/IL/r2mMHDUM=
Subject key identifier: 33:9A:3F:17:0C:94:30:2E:8E:3E:C4:2B:9B:5F:FA:97:CF:F3:15:BB
Certificate issuer: /CN=A91F4268/serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857
Certificate serial: 044B
Authority key identifier: 93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/7879B24A3BA611EC8737B534C4F9AE02.roa
Signing time: Tue 13 Feb 2024 01:53:53 +0000
ROA not before: Tue 13 Feb 2024 01:53:53 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 26506
IP address blocks: 2402:6800:6::/48 maxlen: 48
2402:6800:100::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1099 (0x44b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4268/serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857
Validity
Not Before: Feb 13 01:53:53 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=65cacbb1-2edc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a8:18:07:39:ef:d9:d3:48:95:01:91:73:ff:
97:e3:81:4c:1d:0d:27:35:b4:73:a9:e8:31:3b:b1:
bf:80:6b:d2:9b:34:65:bc:f3:52:a3:fd:63:a3:e6:
ad:23:8b:9d:55:2f:3e:e9:b6:3f:e5:2b:7e:3f:07:
a5:a2:9d:8c:9d:15:af:c4:c8:40:fc:ce:8c:d9:fa:
30:29:af:bb:0f:99:37:31:d4:13:68:76:98:af:81:
e1:63:ce:93:57:93:fd:ab:94:74:6f:67:1f:21:32:
18:a2:6d:d1:5e:70:b0:71:12:f9:33:54:a2:0e:5d:
f3:03:f5:6e:05:a3:90:d9:8c:75:58:88:0a:1a:ff:
b7:58:39:41:d4:d4:29:79:d6:b9:b2:65:55:e2:ad:
e7:93:1f:fa:ba:81:0a:c5:7d:69:48:11:28:b0:ac:
54:6a:17:19:5e:88:17:a0:8c:41:f3:72:98:9f:93:
69:ff:d7:a3:41:5d:2b:bf:02:81:4c:e3:1b:7c:39:
10:62:e2:ed:a6:14:13:61:5d:54:69:f0:42:17:04:
9b:f6:b0:e0:1d:61:cc:3d:56:a6:1a:aa:b5:a4:6b:
3f:73:fa:77:db:24:09:f4:32:df:1b:f8:92:69:1f:
a4:05:ae:0e:9b:be:0e:77:0f:9f:d1:d6:69:fc:89:
d8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:9A:3F:17:0C:94:30:2E:8E:3E:C4:2B:9B:5F:FA:97:CF:F3:15:BB
X509v3 Authority Key Identifier:
keyid:93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/7879B24A3BA611EC8737B534C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:6800:6::/48
2402:6800:100::/48
Signature Algorithm: sha256WithRSAEncryption
33:01:0d:c9:ad:92:41:b4:7f:7b:4e:cf:78:31:29:b5:00:93:
a2:0f:2b:f9:98:83:30:08:33:75:49:e8:f6:e9:86:1a:d5:54:
95:89:2b:6b:55:fb:30:4f:f3:9a:78:4b:8f:24:13:42:b6:de:
5a:86:fb:d4:0e:9c:42:ee:85:f5:b2:1d:bd:a5:8a:d1:96:1d:
3e:08:ff:0d:1d:02:eb:e8:6c:fe:a8:5d:73:ee:63:be:c9:ad:
2d:22:d0:0b:a6:f6:8c:3c:cb:b0:fb:54:df:89:07:86:69:33:
3a:10:88:b0:0f:f7:4f:a8:a1:86:26:61:83:cd:cb:0f:e4:3f:
7d:09:21:29:3b:13:fb:fb:d1:cc:e4:e0:65:ad:ad:a7:85:e4:
73:ef:3d:d2:cb:84:2c:a9:94:86:40:46:5e:1a:b9:fe:a3:89:
99:f6:9d:95:15:6a:ca:d2:93:6b:c0:df:e1:8d:37:1c:ea:4e:
c4:7b:48:9e:48:5d:33:97:40:e0:30:8b:a3:bd:6c:96:23:fb:
c4:37:c5:a7:c8:db:b9:d1:05:4e:fb:04:de:3c:e4:17:b5:08:
5a:3c:2a:d4:09:1e:be:26:11:d4:bf:7e:cf:9e:25:58:9c:28:
0c:90:83:c1:62:94:2b:62:8d:8e:81:34:b2:32:ad:20:9f:9c:
4d:a9:7d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:09:25 2025 by rpki-client