Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/671FC40EE29211EE94348874C4F9AE02.roa
File: 671FC40EE29211EE94348874C4F9AE02.roa (raw, json)
Hash identifier: zylwlyfQcRU6ehbr04cNoWE1AgSNT1tCrRy3GfEdHx0=
Subject key identifier: D8:89:01:54:05:48:11:DF:D0:2C:B1:DA:5F:AD:19:BD:D9:3E:7E:8D
Certificate issuer: /CN=A912BE9D/serialNumber=BF6AD1ABC9D91619A09287FB6C64F4647B9FD31C
Certificate serial: 0616
Authority key identifier: BF:6A:D1:AB:C9:D9:16:19:A0:92:87:FB:6C:64:F4:64:7B:9F:D3:1C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2rRq8nZFhmgkof7bGT0ZHuf0xw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/671FC40EE29211EE94348874C4F9AE02.roa
Signing time: Sat 10 Aug 2024 23:31:07 +0000
ROA not before: Sat 10 Aug 2024 23:31:07 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 17762
IP address blocks: 2403:8600:c0::/44 maxlen: 44
2403:8600:d0::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1558 (0x616)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912BE9D
Validity
Not Before: Aug 10 23:31:07 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66b7f83b-5004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c6:aa:17:7e:2f:77:38:f9:9e:cf:2f:67:86:
e8:b0:e0:71:d8:66:19:9f:fa:73:ba:f5:53:7d:f4:
b3:cb:eb:c0:18:5f:17:5d:d0:32:c7:1c:db:4e:61:
70:51:16:91:3d:d5:a5:b4:e2:07:35:fb:35:6c:c9:
f7:3c:ff:bc:89:1c:6d:c2:13:47:99:45:83:3e:3e:
cc:5f:52:0c:02:71:88:04:29:d5:bd:86:f7:19:38:
c2:86:15:a6:fa:97:30:4a:43:96:cb:8a:80:b0:59:
72:9b:8e:99:67:f2:61:a5:1b:a0:a6:f8:2f:31:df:
c0:46:d8:11:a7:71:c1:18:bd:b0:d0:96:e5:e4:54:
6d:43:45:2a:65:ff:cc:ad:4b:82:6a:8c:d2:e5:3c:
c5:f9:f8:f5:4e:9e:32:09:4e:17:c7:57:e8:26:ec:
48:9e:4b:34:ee:4d:c3:15:8c:f7:cd:6c:62:52:af:
be:b0:30:d0:0b:dc:2d:3b:0d:e8:b5:5a:f1:e4:3e:
7f:5e:d1:1f:90:a3:de:48:ab:c5:de:65:3e:df:d7:
4b:ff:3e:e8:ec:6b:75:15:96:08:d2:10:f8:18:35:
8a:d6:c8:c4:40:31:c6:cd:cb:36:e2:9a:21:27:40:
56:0f:c4:40:3e:75:de:c6:bd:d4:95:f5:4b:4e:29:
81:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:89:01:54:05:48:11:DF:D0:2C:B1:DA:5F:AD:19:BD:D9:3E:7E:8D
X509v3 Authority Key Identifier:
keyid:BF:6A:D1:AB:C9:D9:16:19:A0:92:87:FB:6C:64:F4:64:7B:9F:D3:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2rRq8nZFhmgkof7bGT0ZHuf0xw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/671FC40EE29211EE94348874C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:8600:c0::/43
Signature Algorithm: sha256WithRSAEncryption
8c:86:cf:ac:db:fc:2b:5f:bb:46:21:dd:15:a4:7b:76:d9:e8:
39:b9:62:9e:35:1f:39:16:24:7d:33:fd:38:94:56:79:eb:01:
79:89:e7:8e:d9:d9:22:98:ab:b1:38:0e:14:fc:f8:15:8f:b1:
33:b4:b2:8e:b8:d3:f9:14:36:27:97:b5:63:94:b5:46:1a:fd:
d5:f7:b7:e0:62:9f:fe:33:02:ae:00:e5:74:f3:2f:35:65:dc:
fb:03:64:c1:c3:27:5a:55:61:34:cd:45:0a:fe:05:1e:87:42:
48:94:23:7a:e5:78:8f:d9:ad:12:2b:88:91:51:61:6f:d8:0d:
09:39:c6:a4:b6:33:4a:c5:c7:69:1a:f0:70:3a:02:d3:13:52:
04:51:11:6a:b2:d9:d0:04:e7:76:d8:8c:54:e0:a6:18:9d:8c:
65:68:0e:85:dc:c3:75:3a:b3:b4:ab:05:fe:21:01:b6:8d:88:
ca:a0:ac:1b:2b:a3:e9:a5:9a:19:5c:84:b9:90:43:33:f0:55:
73:a4:ac:84:ef:95:11:09:6d:46:45:43:14:85:20:44:47:c9:
d4:6b:2d:12:b8:d3:6d:4d:42:76:02:4e:a5:4c:7e:dc:c1:ce:
08:06:00:f9:34:8f:62:5d:29:28:4c:fa:b7:98:d8:44:1d:18:
b3:df:35:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 18:28:15 2025 by rpki-client