Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160476/61CD5DFA9AC911EA96BCF33BC4F9AE02/913402383C8511EC8DB49727C4F9AE02.roa
File: 913402383C8511EC8DB49727C4F9AE02.roa (raw, json)
Hash identifier: z/QmtoW84yzbrNPfTQlU5fC5p4DpI2Awg5s4dZ5iQ7o=
Subject key identifier: 6A:F3:F1:04:3D:63:B4:53:3F:B2:C9:19:BE:56:E4:BA:60:02:FB:1C
Certificate issuer: /CN=A9160476/serialNumber=367E4A6BA966F43992414A777D3DA1DAB4BE3E8F
Certificate serial: 0774
Authority key identifier: 36:7E:4A:6B:A9:66:F4:39:92:41:4A:77:7D:3D:A1:DA:B4:BE:3E:8F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nn5Ka6lm9DmSQUp3fT2h2rS-Po8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160476/61CD5DFA9AC911EA96BCF33BC4F9AE02/913402383C8511EC8DB49727C4F9AE02.roa
Signing time: Mon 31 Oct 2022 22:48:34 +0000
ROA not before: Mon 31 Oct 2022 22:48:34 +0000
ROA not after: Wed 01 Mar 2023 00:00:00 +0000
asID: 44592
IP address blocks: 2407:2580::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1908 (0x774)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160476/serialNumber=367E4A6BA966F43992414A777D3DA1DAB4BE3E8F
Validity
Not Before: Oct 31 22:48:34 2022 GMT
Not After : Mar 1 00:00:00 2023 GMT
Subject: CN=636050c2-e13f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:60:2f:f2:7d:79:17:93:7c:d9:b3:8f:be:e1:
85:ad:ec:ef:a7:d8:a6:3f:0f:ea:89:15:5c:0b:c5:
0c:f2:8a:34:41:73:c2:14:61:50:8f:64:14:a7:9b:
cd:ed:b9:ac:36:fe:4c:2d:dc:33:e4:da:f3:81:94:
13:57:53:3c:73:2b:4e:0d:06:59:30:0a:ae:54:e9:
4a:2d:32:bf:7f:f1:f9:f3:ac:76:3f:4f:d0:3c:6b:
30:4e:70:0c:77:2a:c7:2b:4b:4c:8c:ec:c5:bb:89:
7a:34:80:f3:b3:63:63:04:35:00:61:6c:e1:a9:a0:
60:2c:18:24:ae:5e:58:24:e3:4a:17:7c:fa:7a:b5:
ca:64:c0:82:03:43:b5:58:00:a4:c3:af:6e:11:5b:
4f:50:79:82:3d:95:37:f2:50:bf:4b:16:bf:b6:69:
f0:65:45:fb:39:35:84:20:81:9a:7b:06:30:48:6d:
a2:be:bc:1d:e0:39:a5:9d:97:0f:f6:08:96:1d:88:
e3:17:6a:81:30:f6:06:18:40:04:5a:2d:13:10:ba:
3b:fd:72:b7:15:82:26:e3:e3:a6:37:18:34:f6:c4:
15:f4:2a:82:bb:90:cc:b1:0f:29:c3:d8:46:0e:45:
7c:26:a7:c8:cb:a7:c3:a8:20:3f:6a:6d:f6:cb:69:
51:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F3:F1:04:3D:63:B4:53:3F:B2:C9:19:BE:56:E4:BA:60:02:FB:1C
X509v3 Authority Key Identifier:
keyid:36:7E:4A:6B:A9:66:F4:39:92:41:4A:77:7D:3D:A1:DA:B4:BE:3E:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160476/61CD5DFA9AC911EA96BCF33BC4F9AE02/Nn5Ka6lm9DmSQUp3fT2h2rS-Po8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nn5Ka6lm9DmSQUp3fT2h2rS-Po8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160476/61CD5DFA9AC911EA96BCF33BC4F9AE02/913402383C8511EC8DB49727C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:2580::/33
Signature Algorithm: sha256WithRSAEncryption
8b:e6:6e:0d:7f:40:f4:ac:1a:6a:72:63:96:5c:89:b8:0c:48:
71:c0:39:f1:20:14:fe:28:df:be:0d:5b:59:5c:0e:62:ce:c5:
3d:e0:58:b7:5d:ce:92:e4:4b:08:ca:2d:24:f4:11:46:93:45:
66:84:a7:ed:0a:16:21:43:ed:7e:0d:17:63:87:a0:63:a4:bf:
76:65:93:06:b1:f5:57:49:56:ee:fd:92:cd:49:20:99:c8:05:
57:bd:da:d5:b2:b4:1b:a9:87:de:bc:3f:20:29:b9:fe:ff:55:
f0:a6:90:9e:73:5e:c6:58:d8:34:b2:94:51:fd:42:73:47:bc:
f8:14:15:80:11:e7:d0:e4:27:da:3a:70:15:4e:f0:a9:40:41:
9a:5d:e7:34:da:36:a6:b9:56:62:3f:c3:b4:ec:cd:74:e4:48:
89:48:81:3b:1d:e5:ed:76:38:6f:e2:ee:fc:f2:ea:7d:d9:4c:
cd:e9:5a:97:f9:4e:d7:ad:62:34:2d:c2:11:29:c2:a8:84:e7:
93:ec:2e:fa:f4:fc:a8:fe:99:ee:49:96:7c:4c:4c:53:25:74:
57:8c:a1:90:b6:40:f7:20:18:85:91:62:cd:d2:38:6a:34:71:
4d:15:57:cb:ad:d5:92:95:ef:de:38:c9:9c:ae:46:0b:f4:a8:
37:e5:8e:22
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgICB3QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjA0NzYxMTAvBgNVBAUTKDM2N0U0QTZCQTk2NkY0Mzk5MjQxNEE3NzdEM0RBMURB
QjRCRTNFOEYwHhcNMjIxMDMxMjI0ODM0WhcNMjMwMzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MzYwNTBjMi1lMTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp2Av8n15F5N82bOPvuGFrezvp9imPw/qiRVcC8UM8oo0QXPCFGFQj2QUp5vN
7bmsNv5MLdwz5NrzgZQTV1M8cytODQZZMAquVOlKLTK/f/H586x2P0/QPGswTnAM
dyrHK0tMjOzFu4l6NIDzs2NjBDUAYWzhqaBgLBgkrl5YJONKF3z6erXKZMCCA0O1
WACkw69uEVtPUHmCPZU38lC/Sxa/tmnwZUX7OTWEIIGaewYwSG2ivrwd4DmlnZcP
9giWHYjjF2qBMPYGGEAEWi0TELo7/XK3FYIm4+OmNxg09sQV9CqCu5DMsQ8pw9hG
DkV8JqfIy6fDqCA/am32y2lRKwIDAQABo4IClzCCApMwHQYDVR0OBBYEFGrz8QQ9
Y7RTP7LJGb5W5LpgAvscMB8GA1UdIwQYMBaAFDZ+SmupZvQ5kkFKd309odq0vj6P
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDQ3Ni82MUNENURGQTlB
QzkxMUVBOTZCQ0YzM0JDNEY5QUUwMi9ObjVLYTZsbTlEbVNRVXAzZlQyaDJyUy1Q
bzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05uNUthNmxtOURtU1FVcDNmVDJoMnJTLVBvOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjA0NzYvNjFDRDVERkE5QUM5MTFFQTk2QkNGMzNCQzRGOUFFMDIvOTEzNDAyMzgz
Qzg1MTFFQzhEQjQ5NzI3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8E
EjAQMA4EAgACMAgDBgckByWAADANBgkqhkiG9w0BAQsFAAOCAQEAi+ZuDX9A9Kwa
anJjllyJuAxIccA58SAU/ijfvg1bWVwOYs7FPeBYt13OkuRLCMotJPQRRpNFZoSn
7QoWIUPtfg0XY4egY6S/dmWTBrH1V0lW7v2SzUkgmcgFV73a1bK0G6mH3rw/ICm5
/v9V8KaQnnNexljYNLKUUf1Cc0e8+BQVgBHn0OQn2jpwFU7wqUBBml3nNNo2prlW
Yj/DtOzNdORIiUiBOx3l7XY4b+Lu/PLqfdlMzelal/lO161iNC3CESnCqITnk+wu
+vT8qP6Z7kmWfExMUyV0V4yhkLZA9yAYhZFizdI4ajRxTRVXy63VkpXv3jjJnK5G
C/SoN+WOIg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:08 2024 by rpki-client on console-ams.rpki-client.org