Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91330C8/555D3F2E1BD711EBA880824EC4F9AE02/37D64178356511EC9715F015C4F9AE02.roa
File: 37D64178356511EC9715F015C4F9AE02.roa (raw, json)
Hash identifier: xucJ4qW8wQNPs6PfJeF+OnZzPI66k16NDColpwrCuvQ=
Subject key identifier: 37:E1:78:DD:26:E5:08:E2:92:DA:19:DE:9C:C5:83:C0:34:BA:2B:C7
Certificate issuer: /CN=A91330C8/serialNumber=5A982F136FE678F55E904427766B1D513519A594
Certificate serial: 05E3
Authority key identifier: 5A:98:2F:13:6F:E6:78:F5:5E:90:44:27:76:6B:1D:51:35:19:A5:94
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpgvE2_mePVekEQndmsdUTUZpZQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91330C8/555D3F2E1BD711EBA880824EC4F9AE02/37D64178356511EC9715F015C4F9AE02.roa
Signing time: Wed 01 Mar 2023 00:30:32 +0000
ROA not before: Wed 01 Mar 2023 00:30:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7492
IP address blocks: 2404:c80::/32 maxlen: 32
2404:c80:f000::/36 maxlen: 36
2404:c80:f000::/48 maxlen: 48
2404:c80:f000::/54 maxlen: 54
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1507 (0x5e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91330C8/serialNumber=5A982F136FE678F55E904427766B1D513519A594
Validity
Not Before: Mar 1 00:30:31 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63fe9ca7-5613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:73:3a:e4:f5:d7:50:83:b2:2d:6c:95:ba:cb:
56:84:47:3a:0e:ac:b1:9f:4e:df:91:ff:df:91:4b:
66:ff:c3:2a:33:fe:be:06:76:b1:a1:a2:b6:b7:bb:
03:89:df:2c:ea:42:d1:9c:1e:f2:5a:1b:d3:3d:0f:
79:af:0f:7a:c6:37:02:f7:97:92:ea:91:fd:42:af:
24:6e:39:2d:f0:d7:47:59:8e:11:0b:2a:4f:6d:62:
be:07:17:32:e9:e3:1d:13:7f:20:29:c2:5a:e6:d1:
9d:76:2c:57:d8:8f:52:60:0c:aa:db:3a:02:62:bf:
67:5f:97:1a:3b:91:99:2b:b8:95:ff:8d:60:ad:2c:
ed:6d:b9:d5:0d:49:86:10:ec:8a:ed:c2:1e:44:d1:
84:48:5c:63:4e:6a:79:f2:b1:1b:f4:45:df:03:51:
ac:34:98:43:ca:ec:be:b8:b9:1d:ae:c7:d1:9d:dd:
04:85:b8:30:b2:54:fa:18:cc:42:d4:1c:ac:b6:8d:
72:c2:42:a8:e0:24:a8:09:15:38:3c:7e:4b:cb:21:
b8:e3:6c:74:72:80:84:bf:2f:0d:8c:2c:5c:a6:d2:
b0:25:7a:15:09:5e:ed:79:bd:3e:0c:c5:cd:07:8d:
bd:04:99:7b:e9:1c:b1:87:11:da:2a:dc:bc:06:25:
d5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E1:78:DD:26:E5:08:E2:92:DA:19:DE:9C:C5:83:C0:34:BA:2B:C7
X509v3 Authority Key Identifier:
keyid:5A:98:2F:13:6F:E6:78:F5:5E:90:44:27:76:6B:1D:51:35:19:A5:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91330C8/555D3F2E1BD711EBA880824EC4F9AE02/WpgvE2_mePVekEQndmsdUTUZpZQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpgvE2_mePVekEQndmsdUTUZpZQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91330C8/555D3F2E1BD711EBA880824EC4F9AE02/37D64178356511EC9715F015C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:c80::/32
Signature Algorithm: sha256WithRSAEncryption
85:dc:da:75:00:ab:6c:c5:0b:de:51:b6:d8:c1:ba:8b:7d:d5:
51:d4:5d:1b:0c:b3:8c:7a:72:9f:c5:88:48:0d:15:1d:35:38:
1c:e8:ec:15:bc:e2:19:d9:81:f5:63:f6:41:50:6e:e0:50:08:
29:f5:eb:76:bb:fa:39:d6:f9:a7:e5:88:9d:3c:80:90:83:c9:
f0:39:59:a2:be:b1:e8:f3:a0:64:6a:85:7c:92:2f:4c:68:3f:
f5:4f:48:32:62:79:43:d5:2c:68:0f:5b:14:35:fa:9b:6a:7d:
21:58:80:0e:58:17:01:68:0c:0b:44:f0:e0:20:20:df:05:22:
69:34:06:1f:5f:96:48:1a:6a:ab:ab:43:08:1b:1b:eb:d4:26:
1c:80:83:4c:11:0a:e2:b9:12:12:0e:5c:39:22:9a:e1:22:c8:
60:38:4d:92:c6:2d:98:30:76:12:e9:e0:a2:c8:32:ab:c2:41:
33:3c:f7:f6:6d:f5:ca:4b:b9:c5:87:b7:ef:d2:90:4b:0b:a4:
5a:3b:a3:17:23:a4:e2:ff:61:51:be:df:33:6b:4f:77:aa:d4:
1a:29:d6:83:ad:11:85:58:37:78:13:25:ff:f8:cc:4a:60:2d:
a0:eb:31:0f:eb:c0:3f:99:eb:cc:b4:5b:6c:ef:30:ec:ba:5f:
ac:f7:e6:9a
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgICBeMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzMwQzgxMTAvBgNVBAUTKDVBOTgyRjEzNkZFNjc4RjU1RTkwNDQyNzc2NkIxRDUx
MzUxOUE1OTQwHhcNMjMwMzAxMDAzMDMxWhcNMjMwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02M2ZlOWNhNy01NjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA13M65PXXUIOyLWyVustWhEc6Dqyxn07fkf/fkUtm/8MqM/6+BnaxoaK2t7sD
id8s6kLRnB7yWhvTPQ95rw96xjcC95eS6pH9Qq8kbjkt8NdHWY4RCypPbWK+Bxcy
6eMdE38gKcJa5tGddixX2I9SYAyq2zoCYr9nX5caO5GZK7iV/41grSztbbnVDUmG
EOyK7cIeRNGESFxjTmp58rEb9EXfA1GsNJhDyuy+uLkdrsfRnd0EhbgwslT6GMxC
1Bysto1ywkKo4CSoCRU4PH5LyyG442x0coCEvy8NjCxcptKwJXoVCV7teb0+DMXN
B429BJl76RyxhxHaKty8BiXVpQIDAQABo4ICljCCApIwHQYDVR0OBBYEFDfheN0m
5QjiktoZ3pzFg8A0uivHMB8GA1UdIwQYMBaAFFqYLxNv5nj1XpBEJ3ZrHVE1GaWU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzBDOC81NTVEM0YyRTFC
RDcxMUVCQTg4MDgyNEVDNEY5QUUwMi9XcGd2RTJfbWVQVmVrRVFuZG1zZFVUVVpw
WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dwZ3ZFMl9tZVBWZWtFUW5kbXNkVVRVWnBaUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzMwQzgvNTU1RDNGMkUxQkQ3MTFFQkE4ODA4MjRFQzRGOUFFMDIvMzdENjQxNzgz
NTY1MTFFQzk3MTVGMDE1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAkBAyAMA0GCSqGSIb3DQEBCwUAA4IBAQCF3Np1AKtsxQve
UbbYwbqLfdVR1F0bDLOMenKfxYhIDRUdNTgc6OwVvOIZ2YH1Y/ZBUG7gUAgp9et2
u/o51vmn5YidPICQg8nwOVmivrHo86BkaoV8ki9MaD/1T0gyYnlD1SxoD1sUNfqb
an0hWIAOWBcBaAwLRPDgICDfBSJpNAYfX5ZIGmqrq0MIGxvr1CYcgINMEQriuRIS
Dlw5IprhIshgOE2Sxi2YMHYS6eCiyDKrwkEzPPf2bfXKS7nFh7fv0pBLC6RaO6MX
I6Ti/2FRvt8za093qtQaKdaDrRGFWDd4EyX/+MxKYC2g6zEP68A/mevMtFts7zDs
ul+s9+aa
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:58 2024 by rpki-client on console-fra.rpki-client.org