Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9111318/CFDD3DFA1D9111E298E746F408B02CD2/8A1D7DA0332611E9A1CACD59C4F9AE02.roa
File: 8A1D7DA0332611E9A1CACD59C4F9AE02.roa (raw, json)
Hash identifier: 8pvgveNJo/4KPBCasb6fupnueflu8wmTNgM1VjyHLf8=
Subject key identifier: 0F:7F:CD:05:A9:0F:75:C8:0D:EF:FF:EB:EC:97:B0:EE:B5:43:12:00
Certificate issuer: /CN=A9111318/serialNumber=EC730E73C0E8A1CEEAAA98274384B4FDCBFC9ABA
Certificate serial: 31DA
Authority key identifier: EC:73:0E:73:C0:E8:A1:CE:EA:AA:98:27:43:84:B4:FD:CB:FC:9A:BA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7HMOc8Dooc7qqpgnQ4S0_cv8mro.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9111318/CFDD3DFA1D9111E298E746F408B02CD2/8A1D7DA0332611E9A1CACD59C4F9AE02.roa
Signing time: Tue 21 Jun 2022 15:20:35 +0000
ROA not before: Tue 21 Jun 2022 15:20:35 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 38022
IP address blocks: 140.200.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12762 (0x31da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9111318
Validity
Not Before: Jun 21 15:20:35 2022 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=62b1e1c2-6696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1c:47:eb:4d:8a:47:44:07:05:1e:b1:eb:0f:
d5:fa:b3:43:e9:3b:c9:04:30:9f:74:bd:c1:a3:25:
8e:76:72:10:b6:90:c4:4e:2e:71:1e:92:00:d9:ae:
27:91:30:5d:43:3a:c6:b9:55:cc:23:bb:70:d2:08:
93:52:77:8c:0a:43:13:16:3b:96:1f:7c:56:af:13:
c8:23:cf:a2:22:33:39:03:18:c2:54:02:dc:78:f3:
21:0f:88:b9:40:49:52:c9:82:cc:03:52:aa:dd:e2:
a5:d8:a6:26:4a:44:26:27:44:a8:97:dc:6c:87:83:
67:14:99:e3:bd:40:d9:db:9b:e2:f8:f0:e0:af:b5:
4a:58:fd:39:0e:30:02:b7:74:c8:98:34:2c:5b:14:
c3:3b:9c:37:bc:78:33:21:cf:d7:40:0a:64:be:10:
c0:0b:de:ea:6d:6d:c0:6d:a7:36:99:47:fd:29:43:
08:0a:26:b7:d2:a1:d5:c1:d1:fc:92:fe:c2:8a:08:
c0:8c:69:8d:e9:ec:e6:b5:e9:3c:52:f0:28:c9:1e:
82:4f:e6:11:70:ad:43:6d:52:50:34:0c:ec:71:14:
0b:30:29:32:f8:e9:a3:08:ba:4d:cf:68:20:1e:4e:
9b:7a:1e:9a:51:de:c6:76:49:a0:1e:96:db:3e:3d:
f8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:7F:CD:05:A9:0F:75:C8:0D:EF:FF:EB:EC:97:B0:EE:B5:43:12:00
X509v3 Authority Key Identifier:
keyid:EC:73:0E:73:C0:E8:A1:CE:EA:AA:98:27:43:84:B4:FD:CB:FC:9A:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9111318/CFDD3DFA1D9111E298E746F408B02CD2/7HMOc8Dooc7qqpgnQ4S0_cv8mro.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7HMOc8Dooc7qqpgnQ4S0_cv8mro.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111318/CFDD3DFA1D9111E298E746F408B02CD2/8A1D7DA0332611E9A1CACD59C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
140.200.0.0/16
Signature Algorithm: sha256WithRSAEncryption
78:78:95:dd:5f:00:cf:2f:c2:f1:a6:29:ba:d1:b7:d8:6d:7b:
61:43:ae:93:51:7c:8c:e3:8c:b1:bc:fa:06:0a:e2:37:a5:28:
6c:d2:db:4d:d8:0a:a7:a4:f9:ba:37:ce:89:f9:aa:7a:a0:20:
83:13:9d:08:ee:20:12:4b:ee:a5:07:e2:17:96:98:99:da:5f:
51:b1:63:fc:ea:71:b7:4e:a7:a5:73:0c:c1:d6:f0:eb:f1:b6:
90:9c:fd:54:fe:fd:5c:55:0e:26:52:7f:4a:5f:0c:5c:46:8b:
51:0c:23:2b:9e:88:a4:32:4f:60:5b:1a:39:76:86:7f:7f:7e:
cb:bb:fd:10:5d:d5:21:e8:41:f4:ca:ec:55:35:8e:9a:a7:a6:
c9:9f:97:c3:0a:00:f5:83:ae:00:6a:36:da:d8:9a:1f:cc:7f:
29:89:f1:44:c6:3b:8c:6e:52:8a:d3:f9:67:b5:93:8b:b1:df:
10:a8:95:e3:8c:14:3d:c7:47:6d:a7:15:c8:e1:6a:70:a5:3a:
9e:22:b5:2d:b5:64:f3:7a:6c:36:ab:85:e9:57:b9:95:44:1b:
83:77:a3:bb:34:4c:e4:52:f7:bd:11:3d:0e:ba:9d:7c:6a:9e:
e6:8b:d7:e3:7e:50:ff:b6:5e:92:70:93:96:6c:81:4f:70:d7:
03:f1:80:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:27 2025 by rpki-client