Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160EEF/6C4CD690F88811E98FA00A7CC4F9AE02/C2911C74E6A711EFA8D1A077C4F9AE02.roa
File: C2911C74E6A711EFA8D1A077C4F9AE02.roa (raw, json)
Hash identifier: 7uzXUSClxgsZqYNV6os8g6TMOvQ9tK2i5DS7Dqxq1Is=
Subject key identifier: 66:9B:00:1D:6C:2D:7A:C1:54:7E:99:E8:6C:DA:69:BD:0B:A4:EA:A5
Certificate issuer: /CN=A9160EEF/serialNumber=958A4ED9D7D64FAC87BD16EC8A36571E1A2F508A
Certificate serial: 0C75
Authority key identifier: 95:8A:4E:D9:D7:D6:4F:AC:87:BD:16:EC:8A:36:57:1E:1A:2F:50:8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYpO2dfWT6yHvRbsijZXHhovUIo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160EEF/6C4CD690F88811E98FA00A7CC4F9AE02/C2911C74E6A711EFA8D1A077C4F9AE02.roa
Signing time: Sun 09 Feb 2025 05:36:07 +0000
ROA not before: Sun 09 Feb 2025 05:36:07 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 138398
IP address blocks: 2404:ddc0:6000::/36 maxlen: 36
2404:ddc0:aa00::/40 maxlen: 40
2404:ddc0:af00::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3189 (0xc75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160EEF
Validity
Not Before: Feb 9 05:36:07 2025 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=67a83ec7-c126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:94:1a:49:9f:1e:65:99:6e:9e:38:b9:7c:25:
c4:68:8c:25:b3:a5:48:3b:15:e8:44:fe:d2:b2:d9:
3d:bd:2d:1c:cb:ca:01:b4:0e:3b:cd:b0:67:c2:55:
6d:ce:f0:19:54:e0:39:2a:fa:d1:3d:b7:7e:ea:6f:
c3:3b:a2:4c:7d:f9:36:45:18:1c:40:4d:46:c3:a9:
3a:92:6c:1d:0e:1d:14:31:61:1e:f6:3c:d3:63:6e:
01:ce:ea:85:57:af:0d:b0:04:8f:f5:a8:cc:73:79:
1d:5c:d3:5f:7b:2f:15:31:53:3f:4c:f0:ff:9d:f4:
60:49:44:27:cf:c7:3e:4d:28:fe:aa:ee:0e:9c:81:
71:e9:56:8b:35:a7:cc:10:a9:2a:28:c7:87:30:32:
af:0d:06:e9:69:1e:63:70:a5:fc:48:98:00:c3:c8:
22:7d:33:18:fe:9f:56:09:90:c1:ec:3d:5e:a8:e6:
e5:87:56:65:e8:d8:69:57:14:3b:72:48:93:b6:22:
ff:94:21:f5:9b:5e:bd:f7:7a:8d:fd:e2:13:25:e0:
4f:12:90:a1:30:de:7d:42:bc:32:89:d9:9f:92:10:
51:ab:52:aa:0d:44:95:55:c4:f7:e7:15:d5:4a:86:
8d:8f:ef:5c:8e:7f:33:39:69:5e:9e:d4:d7:08:05:
43:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:9B:00:1D:6C:2D:7A:C1:54:7E:99:E8:6C:DA:69:BD:0B:A4:EA:A5
X509v3 Authority Key Identifier:
keyid:95:8A:4E:D9:D7:D6:4F:AC:87:BD:16:EC:8A:36:57:1E:1A:2F:50:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160EEF/6C4CD690F88811E98FA00A7CC4F9AE02/lYpO2dfWT6yHvRbsijZXHhovUIo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYpO2dfWT6yHvRbsijZXHhovUIo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160EEF/6C4CD690F88811E98FA00A7CC4F9AE02/C2911C74E6A711EFA8D1A077C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:ddc0:6000::/36
2404:ddc0:aa00::/40
2404:ddc0:af00::/40
Signature Algorithm: sha256WithRSAEncryption
40:ea:19:41:9f:9a:b2:18:f9:80:36:9e:fa:44:3f:b0:a8:71:
60:4a:3e:8d:b6:7e:ab:1d:b9:5b:e5:e1:0e:e7:e8:84:5c:f5:
2b:a2:dc:77:28:c9:84:5c:a9:9a:0d:d8:1a:86:31:49:d6:00:
57:77:4c:0b:b7:96:cf:4c:71:72:c8:6c:43:b3:46:e8:1c:36:
05:40:be:c3:41:9b:41:b0:32:fe:2f:1c:ea:58:c2:2b:5e:26:
79:a5:e6:37:7d:86:01:9a:5e:9a:7f:f3:d4:f9:7f:c0:85:2c:
56:c1:bf:be:ff:0a:7e:30:dc:2b:ff:9d:36:0f:a4:46:b2:68:
ee:12:c1:ef:fe:3c:7f:18:70:29:ec:7b:d7:45:b8:36:bd:e1:
97:5b:fb:1b:6e:b7:e8:7d:5d:b4:d9:b8:20:3d:ae:62:97:57:
68:86:5b:2c:c6:88:ad:13:34:7a:b2:0b:c4:3c:70:4c:33:9f:
c1:ab:d2:01:c7:4f:6d:a9:27:f0:17:4b:7f:65:9f:08:9e:e7:
4f:d9:d7:2d:94:37:2a:d1:78:fe:5d:6b:32:a8:ce:9c:b0:9c:
70:74:df:da:30:e2:30:4a:0f:16:17:f4:de:59:6e:cd:40:05:
56:fc:3e:62:1b:4c:2c:8b:2e:39:5a:86:91:f8:8f:98:28:7a:
51:50:cc:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:47:01 2025 by rpki-client