Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/727F33429FAD11EAAD1A6744C4F9AE02.roa
File: 727F33429FAD11EAAD1A6744C4F9AE02.roa (raw, json)
Hash identifier: 9E3TgDbI6+GnKMrsNMcyKe+QTJ6ByggMBzDm7xSwD4c=
Subject key identifier: A4:D2:C3:41:F6:B6:1F:D3:84:2C:AB:01:6F:71:CD:8C:99:81:BB:12
Certificate issuer: /CN=A9123D9C/serialNumber=5B2CF0FB62F160F1838AEE3E6CDE07544DFF8BFF
Certificate serial: 1029
Authority key identifier: 5B:2C:F0:FB:62:F1:60:F1:83:8A:EE:3E:6C:DE:07:54:4D:FF:8B:FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/727F33429FAD11EAAD1A6744C4F9AE02.roa
Signing time: Wed 12 Feb 2025 18:06:11 +0000
ROA not before: Wed 12 Feb 2025 18:06:11 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 140679
IP address blocks: 2404:9ec0:7::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4137 (0x1029)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123D9C
Validity
Not Before: Feb 12 18:06:11 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67ace313-a7a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:95:99:ac:5b:fa:4e:cb:7d:c4:fb:9b:c8:fa:
73:90:69:a2:bf:53:9b:ab:28:20:1d:32:b6:6c:b8:
43:9e:3d:4e:1d:50:ba:0e:03:9b:6e:64:5d:08:8a:
90:6b:90:ca:7c:c7:a5:ec:5a:be:6d:ce:a6:75:e0:
a0:a3:28:91:f6:67:1f:9f:23:d8:da:b8:2d:b5:6f:
0d:ad:72:c0:b5:6e:d9:b4:ef:60:f4:0c:fc:f0:fb:
b9:e0:46:8c:f2:02:32:0b:07:fd:b8:87:27:2a:e6:
9a:da:58:ed:4b:74:fd:d6:57:0f:e2:6b:bc:5c:9f:
99:13:67:e8:be:b7:f7:46:1e:3a:50:25:84:93:74:
16:ef:ef:1a:8f:36:55:2a:28:41:87:76:68:3c:db:
bd:be:81:0d:a8:7a:63:cb:ab:47:06:47:f7:e1:68:
81:2b:75:f9:77:34:00:1d:f0:9a:39:ef:bb:d4:d7:
a7:e6:22:f7:84:17:72:9d:a3:8b:1e:4b:dc:b5:5b:
38:5e:b2:6d:63:a7:f8:6d:9d:9a:2c:8d:2f:dd:ef:
17:70:e9:6c:b7:79:3e:ff:4c:18:ca:f1:42:1c:0b:
2e:47:d4:52:52:75:d7:bf:f0:5e:2d:0d:f7:3e:1b:
ec:e4:20:47:d7:b8:01:4b:b8:18:97:0c:57:bd:69:
55:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D2:C3:41:F6:B6:1F:D3:84:2C:AB:01:6F:71:CD:8C:99:81:BB:12
X509v3 Authority Key Identifier:
keyid:5B:2C:F0:FB:62:F1:60:F1:83:8A:EE:3E:6C:DE:07:54:4D:FF:8B:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/727F33429FAD11EAAD1A6744C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:9ec0:7::/48
Signature Algorithm: sha256WithRSAEncryption
84:ab:cd:e6:8f:e6:ed:78:95:f0:91:5a:f3:77:35:e6:df:8b:
dd:31:0c:c1:0c:20:bf:43:3c:e6:eb:9e:36:2a:f8:7d:d7:d4:
95:cd:3b:06:36:6e:ef:a5:08:d6:08:e0:28:1b:3f:18:57:a4:
58:ff:1d:f2:7b:38:14:db:7a:2e:31:7f:a1:26:32:7f:c7:e6:
bf:71:61:23:8f:57:ad:2b:54:42:6a:18:0b:04:70:37:82:3c:
b5:6c:51:58:f2:8d:48:76:db:87:70:1d:67:81:88:5b:d9:57:
06:2e:7d:19:bc:21:7b:f8:cc:33:20:7b:79:6f:13:55:ff:02:
92:da:db:68:ee:15:6a:be:f8:63:70:0f:58:aa:54:6f:a2:7e:
96:1b:a0:eb:9d:35:75:84:77:20:8a:56:5c:03:e5:93:19:7c:
73:5c:6c:b4:e5:9c:7b:c7:da:36:b4:16:0b:e0:8b:4d:b3:14:
2c:38:61:a3:4d:17:8e:88:93:f6:82:ff:af:81:bb:1b:8d:33:
b9:9c:eb:07:34:f7:98:e9:a2:32:3a:8e:76:6e:d3:af:7c:a0:
b3:b5:53:b3:94:39:cb:15:95:15:08:90:74:47:d8:fc:c0:78:
9e:28:63:af:a7:c0:36:b0:c9:aa:fb:56:06:53:7b:26:64:d7:
be:22:2c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:26:21 2025 by rpki-client