Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/A6449CBA54A011EFB35AED26C4F9AE02.roa
File: A6449CBA54A011EFB35AED26C4F9AE02.roa (raw, json)
Hash identifier: MkKraPCVKYSh4EUGWEmc6lPBWcmV9tHqmd6kNTqMDpY=
Subject key identifier: 3E:F5:5E:D9:D2:9E:82:EC:90:A8:31:D4:DE:CC:F8:12:80:7C:31:A2
Certificate issuer: /CN=A9163EB9/serialNumber=3CC7790E2037665EF4962B81DAD2FD07ED46F8B2
Certificate serial: 02
Authority key identifier: 3C:C7:79:0E:20:37:66:5E:F4:96:2B:81:DA:D2:FD:07:ED:46:F8:B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PMd5DiA3Zl70liuB2tL9B-1G-LI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/A6449CBA54A011EFB35AED26C4F9AE02.roa
Signing time: Wed 07 Aug 2024 09:37:23 +0000
ROA not before: Wed 07 Aug 2024 09:37:23 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 131108
IP address blocks: 2401:b860::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9163EB9
Validity
Not Before: Aug 7 09:37:23 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66b34053-f5d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3e:84:8b:c4:cc:0a:bb:d2:1d:53:1f:9e:c4:
32:46:57:79:db:29:e8:62:43:3e:d6:9a:89:da:a8:
f0:99:89:97:aa:9d:70:e2:77:6a:02:54:60:eb:38:
07:58:fa:e0:24:e2:2c:a4:94:a9:5f:fc:b5:59:18:
f4:eb:8f:be:3b:62:08:3e:ec:03:c0:63:7d:e3:b3:
2c:b9:81:cf:7d:c9:d5:25:44:6e:e0:93:03:d4:d7:
41:5f:3a:dd:b7:b8:42:89:72:0f:9a:c7:d7:1b:71:
3a:fb:b0:5a:87:0e:50:2e:44:ca:67:a8:5f:b9:b7:
08:b9:40:2e:b8:e7:a0:ff:bc:f7:0b:97:17:b3:7a:
d3:af:af:cf:43:7a:35:9e:c0:73:9c:6e:57:e1:4e:
30:e0:96:9d:b0:bd:1c:29:0f:db:e9:f8:a1:35:41:
74:e0:a9:5b:04:be:9f:56:bb:3e:a9:6e:c4:02:59:
89:8f:a0:14:13:27:41:23:67:4c:cc:af:e3:5e:23:
7d:90:53:66:8f:73:b1:8f:53:89:52:32:33:35:ab:
d0:df:13:e6:28:18:46:5e:f2:90:65:4a:9d:f0:9c:
30:ca:60:76:ef:eb:e5:55:5a:6e:a5:d6:25:0a:3c:
d7:e0:84:3a:3c:c1:5a:5d:3d:39:75:0c:c9:c8:56:
70:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F5:5E:D9:D2:9E:82:EC:90:A8:31:D4:DE:CC:F8:12:80:7C:31:A2
X509v3 Authority Key Identifier:
keyid:3C:C7:79:0E:20:37:66:5E:F4:96:2B:81:DA:D2:FD:07:ED:46:F8:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PMd5DiA3Zl70liuB2tL9B-1G-LI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/A6449CBA54A011EFB35AED26C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:b860::/32
Signature Algorithm: sha256WithRSAEncryption
a7:41:e6:94:fb:f9:96:7e:e2:f3:ef:36:2f:56:f5:d7:b1:32:
50:70:87:6d:f1:cd:fc:74:fc:c1:0e:eb:b3:0f:61:56:ba:5e:
59:48:f2:d9:49:1b:fe:00:2b:bf:a9:f3:68:c1:4c:71:ad:60:
74:a7:33:27:23:34:ae:b8:d7:54:f5:81:f7:4e:1c:e7:56:73:
bf:c8:2b:ff:13:7f:2e:d0:2f:59:bf:f1:f7:7b:a3:09:9c:e6:
2a:15:b6:5a:75:43:9d:47:66:52:73:f1:99:ac:7f:a2:f7:7c:
4c:cf:a4:fd:b5:dd:61:82:57:fc:82:6c:56:dd:f4:2c:9e:8a:
75:61:f6:99:7a:5a:20:1d:5a:dc:56:66:4d:74:70:d5:4c:5d:
a2:0c:f3:09:91:cd:e1:8c:cb:2a:84:57:e1:36:49:cf:ce:e9:
30:44:60:8d:33:67:60:29:c6:69:22:08:0c:be:92:03:88:21:
22:a1:4f:10:ba:d0:4f:56:b3:05:0b:db:bb:b6:4d:65:dc:60:
2c:95:9e:3f:c2:f4:01:94:2d:66:7e:e8:5c:29:13:58:e9:1b:
27:36:c6:79:d7:30:85:0f:b5:07:af:98:56:fd:b4:dd:fc:e1:
4e:33:eb:47:0c:8c:3f:51:5d:75:a3:8e:62:bf:e2:0c:8c:9c:
e0:47:78:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:06:52 2025 by rpki-client