Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/07756D907BE711EEA2370F69C4F9AE02.roa
File: 07756D907BE711EEA2370F69C4F9AE02.roa (raw, json)
Hash identifier: OIdu5GTOIKyXblmYaWauLJj4oru9rOP0XZY4qGDcBtk=
Subject key identifier: 9D:68:37:64:97:88:B4:C3:E7:7D:F2:04:3C:10:81:B7:A7:89:98:C0
Certificate issuer: /CN=A91187FD/serialNumber=68852AB7F2714FCF54D75F0AAE3068ADC38B35CC
Certificate serial: 68
Authority key identifier: 68:85:2A:B7:F2:71:4F:CF:54:D7:5F:0A:AE:30:68:AD:C3:8B:35:CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/07756D907BE711EEA2370F69C4F9AE02.roa
Signing time: Sun 05 Nov 2023 14:24:29 +0000
ROA not before: Sun 05 Nov 2023 14:24:29 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 150368
IP address blocks: 2401:3fa0:100::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104 (0x68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91187FD
Validity
Not Before: Nov 5 14:24:29 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=6547a59d-2ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:92:6c:89:66:ef:24:26:eb:ea:d9:fc:8f:e4:
dd:af:68:05:ec:3a:19:b6:b9:f7:b6:cd:bc:68:6d:
a2:a6:76:aa:31:41:74:ea:68:0e:7d:75:43:78:16:
3c:93:86:7e:a7:c9:2a:54:d0:c7:b0:24:72:0f:bb:
19:e5:9b:62:bf:d4:e9:1d:7e:9a:2e:ff:bd:20:f6:
b8:d3:c3:d9:a0:14:a6:a5:43:b6:a3:7b:24:18:23:
43:4b:e9:4e:5f:85:07:29:b4:a1:37:13:b2:b1:4a:
5e:ca:fa:5b:f7:97:1f:f2:02:46:2f:29:ac:96:ee:
9b:42:9a:fa:89:ae:61:52:58:8f:eb:c0:17:20:be:
6c:c4:aa:fd:93:73:df:be:b3:8c:33:2d:83:1d:d2:
ee:29:38:d2:c6:46:cc:1a:59:4f:19:fb:31:af:b4:
ab:52:5d:d5:1e:69:9d:ce:8f:a7:0c:d5:ac:df:52:
aa:8e:09:1f:c7:bc:b3:3e:6a:8f:f9:5c:a7:d8:c3:
53:22:9f:b2:cb:cf:88:ef:c9:60:7e:13:57:dc:97:
95:ba:66:79:16:92:9a:83:2d:54:2d:57:8c:aa:79:
ec:12:a1:f2:94:0c:b6:bd:16:cd:1c:2f:6e:52:e8:
91:d8:b5:b8:05:bf:dc:c1:94:94:93:a7:82:a8:1b:
d0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:68:37:64:97:88:B4:C3:E7:7D:F2:04:3C:10:81:B7:A7:89:98:C0
X509v3 Authority Key Identifier:
keyid:68:85:2A:B7:F2:71:4F:CF:54:D7:5F:0A:AE:30:68:AD:C3:8B:35:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/07756D907BE711EEA2370F69C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:3fa0:100::/44
Signature Algorithm: sha256WithRSAEncryption
20:77:ae:0a:45:fc:8b:05:e1:f5:18:f9:4f:81:4e:03:38:89:
24:bc:a2:9a:30:c3:2a:69:69:eb:05:85:0a:20:68:d0:90:d7:
82:9d:96:7d:99:bf:37:ac:89:3f:61:dd:e6:55:3b:8b:f8:a3:
48:bf:23:c8:4f:5f:2d:2d:1c:b8:f5:a5:29:fc:cc:7c:62:77:
9f:4a:52:16:26:b1:98:1e:d8:4a:66:e9:7d:09:0f:c9:de:84:
bf:1c:90:3b:30:2c:68:50:54:72:e9:2c:68:9a:ca:4b:50:39:
21:b5:77:c5:3b:69:6e:1a:96:c0:bf:45:5f:f3:3a:74:f5:2e:
67:1c:2e:70:04:33:b2:33:fb:5f:27:c6:f0:ad:31:23:c6:61:
f9:52:13:ac:8d:58:93:31:05:ec:3c:48:33:86:b5:3d:ef:0a:
2e:83:a7:b7:92:fa:7e:c8:33:ff:87:c8:b2:93:97:dc:e5:76:
2a:2f:b2:13:eb:d8:db:12:9f:37:67:ab:46:32:cf:f1:1c:ee:
6f:f2:1f:00:93:eb:e3:49:49:d5:6d:33:71:d8:ba:78:3b:9f:
02:ad:f4:5b:0e:c9:f3:bd:c8:39:af:3d:53:68:86:a9:9c:e7:
5c:e4:85:d6:41:63:d7:d9:1b:4c:d8:1e:64:d6:bd:00:56:e7:
cf:e1:95:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:36:34 2025 by rpki-client