Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/EF1D0466455311E98FA31F68C4F9AE02.roa
File: EF1D0466455311E98FA31F68C4F9AE02.roa (raw, json)
Hash identifier: OqgL79PVwss/L9YJSqF29Xvq2wNOU6UYyi3JyoLgqms=
Subject key identifier: 11:2F:0C:B2:D3:3A:47:75:2F:6A:94:37:25:00:28:20:4D:5F:5B:5A
Certificate issuer: /CN=A914BC7A/serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09
Certificate serial: 3434
Authority key identifier: 53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/EF1D0466455311E98FA31F68C4F9AE02.roa
Signing time: Tue 20 Aug 2024 15:31:18 +0000
ROA not before: Tue 20 Aug 2024 15:31:18 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 55433
IP address blocks: 2405:8a00:6029::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13364 (0x3434)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BC7A
Validity
Not Before: Aug 20 15:31:18 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66c4b6c6-465a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:78:1e:ac:76:4b:ec:29:eb:39:76:6f:f4:f9:
f6:2f:4a:02:a5:35:8f:98:fd:a0:de:aa:6c:f3:56:
f8:07:ee:02:2b:4b:2b:87:22:a1:a2:d1:ea:60:dd:
ff:bc:c0:da:37:6e:ba:af:a6:fc:23:8a:47:50:9a:
14:ad:65:6a:64:13:da:bd:47:9d:65:ef:fd:5f:11:
38:b2:e2:41:b8:55:24:71:d3:27:fc:8b:90:f8:6f:
42:2d:fe:94:68:d7:ce:1e:8d:d0:08:6a:79:64:44:
12:18:b1:30:dc:42:fc:5c:48:2f:1e:99:6f:e8:dc:
d2:72:e1:2e:79:ae:6a:0b:08:d6:72:30:9c:51:38:
1e:36:0f:26:5c:ab:16:40:4f:ae:74:25:74:77:6f:
00:99:05:48:0e:93:e6:58:45:2f:b7:a7:77:94:8c:
65:f2:9c:7e:39:18:57:5a:39:66:e1:6d:80:10:19:
9e:cb:41:f0:11:3a:4b:09:1f:ff:b1:40:19:02:83:
04:a3:26:15:6b:a1:f7:2e:f2:ec:aa:c3:e9:20:3c:
d4:7c:1c:6a:6d:c5:58:cf:f7:d1:fc:ea:ac:ea:74:
13:14:8c:c7:9a:2e:1e:cc:e0:b1:17:04:63:15:81:
0a:52:65:3b:3b:36:be:a5:ab:e7:5e:be:93:fb:ac:
c3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:2F:0C:B2:D3:3A:47:75:2F:6A:94:37:25:00:28:20:4D:5F:5B:5A
X509v3 Authority Key Identifier:
keyid:53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/EF1D0466455311E98FA31F68C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2405:8a00:6029::/48
Signature Algorithm: sha256WithRSAEncryption
93:5c:cc:84:84:00:0d:03:27:85:a1:e2:ed:48:9e:0c:11:54:
9f:50:e3:56:49:36:13:77:f1:65:83:30:9e:a6:e0:1c:b9:43:
91:cc:6b:e6:e5:69:42:48:49:11:9e:e8:cd:21:47:2e:46:03:
99:7d:f0:85:73:98:f4:bf:e9:30:2b:26:8f:64:45:e3:10:85:
ea:42:98:d0:59:1d:04:d0:a6:3d:1b:89:f9:aa:73:de:7e:8a:
8d:a6:11:e2:88:3e:9e:fc:92:b6:ec:80:66:0f:fb:b2:62:0b:
5e:79:61:08:d1:3e:81:dc:9f:58:8b:8e:1e:c8:7c:fd:68:34:
62:50:1b:47:8d:7a:76:1c:0e:29:a7:e4:f5:be:05:6c:3d:e1:
43:4c:34:c9:92:99:6c:e6:cb:e5:c8:e1:f8:5a:42:18:2a:16:
47:93:1a:96:6d:ab:94:82:81:75:28:6d:28:6b:76:9f:bc:9a:
77:c6:e1:4e:81:0d:fc:0c:11:6d:51:c1:31:fe:6f:f7:d2:e3:
87:46:71:43:16:d9:c0:76:95:ab:36:85:d7:f3:e9:b5:28:d6:
94:f9:2e:46:ea:2f:83:9b:4c:18:d2:03:d8:85:94:87:33:30:
b4:22:1c:52:70:b6:c5:5e:13:6f:6b:18:c8:6c:a3:20:2e:62:
ca:bb:4b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:23:11 2025 by rpki-client