Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B8B3/A1131D6C666611E98753E47AC4F9AE02/6840DA0E663911EB9492E836C4F9AE02.roa
File: 6840DA0E663911EB9492E836C4F9AE02.roa (raw, json)
Hash identifier: M/bgsIV8OAy/+sKaJaxLIB5sckco0vsCJXe5K04L2NY=
Subject key identifier: EB:29:DF:75:B6:71:FC:DF:57:4C:74:1B:ED:D7:67:DA:D0:9E:98:38
Certificate issuer: /CN=A916B8B3/serialNumber=F2C052E0C573AB0580EB06F3F90025646E6F32CF
Certificate serial: 0F69
Authority key identifier: F2:C0:52:E0:C5:73:AB:05:80:EB:06:F3:F9:00:25:64:6E:6F:32:CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8sBS4MVzqwWA6wbz-QAlZG5vMs8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B8B3/A1131D6C666611E98753E47AC4F9AE02/6840DA0E663911EB9492E836C4F9AE02.roa
Signing time: Sat 30 Nov 2024 18:06:25 +0000
ROA not before: Sat 30 Nov 2024 18:06:25 +0000
ROA not after: Sun 30 Mar 2025 00:00:00 +0000
asID: 138145
IP address blocks: 2403:a040:c001::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3945 (0xf69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B8B3
Validity
Not Before: Nov 30 18:06:25 2024 GMT
Not After : Mar 30 00:00:00 2025 GMT
Subject: CN=674b5421-dad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b2:34:26:ed:e0:68:82:1d:be:3f:56:1f:cc:
c3:99:d6:5d:bf:16:b0:86:c7:62:87:cd:85:93:ee:
93:09:eb:71:ea:ed:6f:01:84:0d:52:7f:e2:b7:36:
7d:f0:3a:5d:da:9e:b0:c2:3a:a3:00:7f:d8:2c:0e:
16:93:8c:b2:a7:cb:ea:bb:bc:e8:69:1a:a1:05:d2:
83:8c:42:71:1c:19:f8:fd:dc:13:8a:7b:16:b1:f1:
08:38:f0:f8:78:a6:2c:e6:40:20:f9:95:91:4f:82:
b4:6b:ba:a4:69:53:37:be:3a:d6:1f:67:f2:47:cc:
30:b4:a9:0d:71:bc:45:5e:48:48:cc:d8:93:a9:4f:
c6:be:6a:fd:15:8c:97:5f:65:7d:56:4d:70:f3:57:
93:fe:dc:88:64:98:27:6f:76:02:66:e2:34:9e:27:
77:7c:bf:11:cc:88:42:ab:d7:2c:18:9f:08:02:62:
42:65:36:8c:d4:c2:4b:96:b2:6b:5a:b5:be:44:27:
fb:2b:bb:88:76:58:72:2b:6a:aa:79:68:29:48:cc:
42:62:72:a9:ea:c6:80:e9:a9:81:c4:21:20:10:aa:
42:81:b0:bc:1c:0e:0f:64:a4:41:69:79:6b:93:7f:
0e:e5:b2:9d:45:89:a8:b5:e7:86:7b:7e:74:02:30:
60:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:29:DF:75:B6:71:FC:DF:57:4C:74:1B:ED:D7:67:DA:D0:9E:98:38
X509v3 Authority Key Identifier:
keyid:F2:C0:52:E0:C5:73:AB:05:80:EB:06:F3:F9:00:25:64:6E:6F:32:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B8B3/A1131D6C666611E98753E47AC4F9AE02/8sBS4MVzqwWA6wbz-QAlZG5vMs8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8sBS4MVzqwWA6wbz-QAlZG5vMs8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B8B3/A1131D6C666611E98753E47AC4F9AE02/6840DA0E663911EB9492E836C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:a040:c001::/48
Signature Algorithm: sha256WithRSAEncryption
ac:2e:e2:91:7d:88:5e:a2:07:ed:3c:d4:bf:f9:90:7f:a8:ea:
a7:37:b9:3e:bb:d5:7a:3b:e8:95:44:f2:9e:c3:cd:a8:88:ea:
27:8e:db:8c:ea:f5:b2:45:29:15:3c:76:98:b0:d2:8a:8e:14:
ed:c0:38:6d:3d:1f:8c:a6:73:19:ef:24:c4:4c:30:8e:ec:97:
e2:44:00:49:cf:54:30:96:e1:14:10:cd:40:a9:d5:2b:0e:a9:
5e:56:95:a4:ec:bb:fe:b5:df:d9:10:3b:bc:a4:6e:91:a8:54:
e3:4a:40:6b:58:5a:93:63:86:e3:ce:0a:47:1f:b2:de:d9:76:
0c:a9:0b:d8:af:d9:31:52:e2:94:ca:5a:92:a8:f5:3f:3b:86:
92:87:0e:13:cf:44:94:98:f2:1a:0c:26:3f:5b:72:a2:16:ec:
ac:3a:50:df:16:ac:56:ad:27:38:ef:49:a1:6c:00:b4:97:5b:
f4:3e:74:5a:ae:43:92:fe:b3:1a:4a:2e:d1:6c:af:29:03:f8:
0a:4e:a8:6e:cb:ee:ba:5f:e0:6c:a8:f7:08:0a:7b:1b:1c:0b:
1d:a0:48:e6:b3:63:4e:ff:33:bd:fc:6a:c4:48:e9:d7:a2:9a:
b8:8c:32:f6:5c:d3:73:ab:61:13:21:b6:9e:40:64:17:96:eb:
2f:77:c8:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:08:28 2025 by rpki-client