Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/A085C546F64511EAAF5AD93BC4F9AE02.roa
File: A085C546F64511EAAF5AD93BC4F9AE02.roa (raw, json)
Hash identifier: db0U/TsFANPOKCaSANYPTiaFmXaAI4B890DaAhbxEP0=
Subject key identifier: 52:7F:3A:74:99:FC:5C:D3:CB:14:EC:F2:C8:9C:FB:38:70:9A:95:89
Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial: 2752
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/A085C546F64511EAAF5AD93BC4F9AE02.roa
Signing time: Tue 30 Jul 2024 16:03:55 +0000
ROA not before: Tue 30 Jul 2024 16:03:55 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 138408
IP address blocks: 2402:9e80:12::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10066 (0x2752)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C28D
Validity
Not Before: Jul 30 16:03:55 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66a90eeb-549d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:dc:f0:05:23:45:3d:25:1e:3c:9a:89:7f:c5:
87:08:aa:cd:41:90:69:f5:2a:fb:7f:20:67:21:4d:
6c:a9:9d:a8:20:72:70:48:f1:1d:5f:73:a2:00:48:
82:76:32:f2:af:05:e7:24:0b:a2:1e:e6:f8:3a:3f:
67:b5:07:0f:c2:f6:33:8c:a9:70:37:6b:03:4f:93:
66:bd:79:63:a5:22:ca:8d:d3:87:9f:f5:ab:c3:18:
52:55:11:3c:25:aa:ba:2b:97:0b:c4:e7:ee:b6:4a:
e9:44:4c:98:36:90:21:7a:9e:75:e7:dd:38:6a:d9:
b7:dd:1a:f1:d7:f9:7b:e6:ba:52:ef:06:41:56:c1:
de:35:15:e7:37:26:c4:b7:94:09:ee:48:fa:1e:0a:
50:bd:94:63:be:6f:75:e3:e4:25:b2:f8:d8:88:16:
0e:75:24:2a:b6:33:3e:8b:f8:47:ee:e9:af:fd:01:
7b:a7:5a:76:e0:85:a7:0a:9e:ce:1b:71:fe:32:a9:
0a:09:75:ad:38:1a:cd:cd:27:41:29:84:e3:62:df:
84:f3:28:d1:f8:31:66:22:00:88:ef:ba:7b:3e:b1:
18:86:fc:7e:74:0b:ec:79:3c:a9:ec:dd:ae:ff:e7:
d0:31:7b:ad:e8:5e:e2:1a:45:cb:7f:e6:3c:d8:db:
1e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:7F:3A:74:99:FC:5C:D3:CB:14:EC:F2:C8:9C:FB:38:70:9A:95:89
X509v3 Authority Key Identifier:
keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/A085C546F64511EAAF5AD93BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:9e80:12::/48
Signature Algorithm: sha256WithRSAEncryption
79:cb:6c:9f:bc:9d:91:5c:57:5d:3a:14:ee:c5:7e:c9:9d:ac:
e9:52:79:99:77:2e:db:c8:8d:3d:e5:27:e7:90:75:44:c3:78:
22:46:eb:8e:59:cc:14:61:01:c4:ac:18:7b:f8:ca:be:c5:a0:
99:27:08:9f:d5:0e:99:24:32:91:c4:ed:32:44:9d:17:c1:05:
40:6c:be:af:6d:6d:2f:b5:77:55:aa:15:2b:d7:5f:4a:78:22:
2d:d3:4b:a2:89:b2:c4:cd:de:c2:0f:3e:62:ab:df:ba:96:e8:
a6:ce:92:d6:4a:79:34:fd:45:22:af:15:96:1c:b3:cb:b3:da:
21:40:55:0f:ad:0d:a7:d5:04:b6:21:d7:19:1d:36:b4:fa:fa:
b9:a8:8e:82:32:ac:4a:46:7f:47:e4:04:9e:39:5e:7c:5b:7a:
8b:72:dd:f7:27:ff:20:82:60:41:2d:de:51:2a:60:aa:fd:78:
b9:17:8d:a6:d6:55:58:b2:94:91:1d:28:71:ac:f1:a1:1d:47:
b7:d1:85:e4:73:cd:48:60:c9:9e:53:6e:0f:38:e3:dd:c3:e9:
6f:93:ae:23:72:68:29:fe:27:24:87:8a:1a:39:55:17:2a:47:
b8:5e:70:62:79:37:85:43:6b:92:61:35:ef:f7:26:b3:45:68:
e3:4d:e0:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:10:34 2025 by rpki-client