Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/68979DAE337B11EA9A024941C4F9AE02.roa
File: 68979DAE337B11EA9A024941C4F9AE02.roa (raw, json)
Hash identifier: yknf5baNHpdbQw+5+DV1Hf8P1RfW3RXTHE9Kk1UXKho=
Subject key identifier: BB:B9:7F:AA:F6:12:5C:43:40:A5:63:41:84:34:66:53:47:A4:72:23
Certificate issuer: /CN=A912A3E1/serialNumber=F35268F976E8AE71FEFA66CA4516361C58AE1D91
Certificate serial: 0C0C
Authority key identifier: F3:52:68:F9:76:E8:AE:71:FE:FA:66:CA:45:16:36:1C:58:AE:1D:91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81Jo-XbornH--mbKRRY2HFiuHZE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/68979DAE337B11EA9A024941C4F9AE02.roa
Signing time: Tue 17 Dec 2024 00:35:56 +0000
ROA not before: Tue 17 Dec 2024 00:35:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24305
IP address blocks: 2405:b640::/32 maxlen: 32
2405:b640::/48 maxlen: 48
2405:b640:1::/48 maxlen: 48
2405:b640:2::/48 maxlen: 48
2405:b640:3::/48 maxlen: 48
2405:b640:4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3084 (0xc0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A3E1
Validity
Not Before: Dec 17 00:35:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6760c76c-a63c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c1:ec:4b:b6:99:ff:c2:6d:c9:1a:48:d5:70:
3c:e0:33:ff:47:b7:d6:52:f2:d5:6c:ae:55:7c:6a:
5d:2a:e7:f4:56:a8:b1:4e:05:d5:27:4b:2d:1a:7d:
6a:90:0f:ee:c8:24:42:af:7b:4d:09:d3:86:c6:f9:
00:15:5d:f0:26:a8:28:32:c7:55:3b:31:f6:d6:f6:
03:40:bf:a5:fe:2a:c0:80:52:bf:b9:f4:1a:ab:db:
6b:d1:32:ea:7b:bd:2f:e3:8b:d2:64:78:76:e0:0d:
9c:d8:9d:75:cc:46:7e:46:73:17:dc:aa:8f:96:a5:
c4:aa:a4:07:06:71:ce:30:b2:78:97:1e:7d:f9:80:
8b:33:ab:d7:f2:69:ba:d3:3c:74:27:30:1b:ef:dd:
12:77:8f:0c:48:f6:50:51:eb:80:f8:07:f1:24:1c:
67:99:15:9a:15:73:18:72:ca:e9:84:e5:75:2d:dc:
e1:0f:c6:c2:78:a6:77:34:17:4c:76:ec:01:eb:ed:
32:d0:5b:c0:bd:e7:67:09:78:16:ec:3b:96:e2:1b:
d9:44:9a:48:2b:c7:3d:ad:c8:0a:73:10:bb:78:b3:
69:7e:c1:f6:8f:5c:96:c3:d0:11:3e:09:1a:c4:ef:
19:e6:97:df:5c:00:58:c5:c1:25:22:84:74:ba:eb:
99:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:B9:7F:AA:F6:12:5C:43:40:A5:63:41:84:34:66:53:47:A4:72:23
X509v3 Authority Key Identifier:
keyid:F3:52:68:F9:76:E8:AE:71:FE:FA:66:CA:45:16:36:1C:58:AE:1D:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81Jo-XbornH--mbKRRY2HFiuHZE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/68979DAE337B11EA9A024941C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2405:b640::/32
Signature Algorithm: sha256WithRSAEncryption
7e:70:6e:cb:f2:4e:16:f3:f7:c8:4b:62:16:4b:f9:06:96:45:
e0:0b:97:bc:2f:b5:d3:38:ec:2e:23:0e:07:16:b7:4e:c9:7e:
67:18:1a:66:ad:70:6e:74:44:1f:de:66:58:fb:bf:2c:af:41:
19:c6:52:f1:1e:ad:ae:7d:9d:d6:73:e2:22:86:bd:ff:50:e7:
83:92:61:32:6f:6c:33:28:77:bf:6d:56:fe:ec:81:42:00:6d:
0b:3e:77:a7:0a:93:89:c5:0c:b3:d0:88:71:3a:d0:8b:a3:71:
6a:be:3a:1e:ad:81:7e:d1:ee:52:69:8a:95:b8:10:2d:dc:4f:
15:34:65:e5:11:b6:00:1d:50:99:0e:2f:32:95:af:4e:29:4b:
63:89:26:b8:ba:e5:b2:ce:89:0b:2c:02:62:d3:15:56:2b:09:
1e:e2:d3:a2:a3:9d:a3:11:a8:04:b2:27:db:73:f1:d2:23:3f:
7c:e9:24:f7:b9:1c:98:07:1e:5e:51:44:46:12:2d:ea:e2:f0:
12:2a:66:df:1f:c7:41:cc:38:b8:83:8a:61:55:0b:65:5d:10:
69:87:8e:be:cb:41:54:ed:ac:6b:9b:bf:a8:58:ff:a0:b8:98:
d9:92:2b:ad:8e:4b:3a:20:ef:9c:07:7e:0a:c2:51:b7:b5:23:
2d:c8:0a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 20:59:51 2025 by rpki-client