Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911662A/B0937498002511ECBBDA2D12C4F9AE02/B7A65FE8B1B711EE97717A0FC4F9AE02.roa
File: B7A65FE8B1B711EE97717A0FC4F9AE02.roa (raw, json)
Hash identifier: V6rdoLGtvIEtzE1ZIwoFh4ReE5wamo26N7AZIQfqZEs=
Subject key identifier: 20:92:4B:75:09:A0:89:14:69:17:1D:9F:D9:93:C3:87:B0:E5:2D:14
Certificate issuer: /CN=A911662A/serialNumber=D3E475DE9BA7B7372BD1936A906E86697C7EA33B
Certificate serial: 045B
Authority key identifier: D3:E4:75:DE:9B:A7:B7:37:2B:D1:93:6A:90:6E:86:69:7C:7E:A3:3B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0-R13puntzcr0ZNqkG6GaXx-ozs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911662A/B0937498002511ECBBDA2D12C4F9AE02/B7A65FE8B1B711EE97717A0FC4F9AE02.roa
Signing time: Sat 13 Jan 2024 02:01:51 +0000
ROA not before: Sat 13 Jan 2024 02:01:51 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 137897
IP address blocks: 2403:27c0:c03::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1115 (0x45b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911662A/serialNumber=D3E475DE9BA7B7372BD1936A906E86697C7EA33B
Validity
Not Before: Jan 13 02:01:51 2024 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=65a1ef0f-26d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d3:72:b2:08:3d:43:7f:b9:85:08:e5:7d:8b:
ee:1a:87:41:75:c1:97:41:a5:b9:3e:bb:ae:b4:5e:
1f:a2:be:c5:4e:92:63:2e:17:73:3b:11:23:b9:bd:
07:aa:db:64:42:38:0f:3d:11:80:19:f1:65:14:ea:
f0:97:16:d3:40:6b:bd:7b:64:94:70:dc:c8:07:bf:
cd:8e:b8:fb:59:75:db:1b:2d:5d:a0:cd:e7:01:12:
af:5b:7d:6c:e2:2d:f9:48:27:31:24:73:a9:d1:dd:
96:45:c6:d1:9b:89:9f:ac:9d:27:e6:c4:9c:55:f4:
d8:1f:3e:ae:c6:61:23:d9:16:a2:06:78:20:c4:94:
c4:93:cb:a5:66:61:f6:eb:b2:32:1b:88:e5:16:e6:
d1:7e:a5:0b:63:b6:8b:07:d4:b9:ae:a6:d9:49:3b:
50:24:90:05:2b:9d:93:50:27:dd:ff:b4:9e:9e:f1:
bc:4b:01:ab:6c:20:a9:cf:77:54:43:2b:fe:4d:39:
8c:56:58:85:dc:e5:37:1f:17:63:8d:26:94:60:db:
14:97:66:39:75:47:84:b4:64:1c:2f:19:87:42:03:
c4:3f:cf:3d:35:ab:cb:4a:fc:b1:01:be:fd:0e:7d:
4a:f8:17:ae:8f:7e:8a:f9:21:50:f1:0b:28:a7:21:
9e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:92:4B:75:09:A0:89:14:69:17:1D:9F:D9:93:C3:87:B0:E5:2D:14
X509v3 Authority Key Identifier:
keyid:D3:E4:75:DE:9B:A7:B7:37:2B:D1:93:6A:90:6E:86:69:7C:7E:A3:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911662A/B0937498002511ECBBDA2D12C4F9AE02/0-R13puntzcr0ZNqkG6GaXx-ozs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0-R13puntzcr0ZNqkG6GaXx-ozs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911662A/B0937498002511ECBBDA2D12C4F9AE02/B7A65FE8B1B711EE97717A0FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:27c0:c03::/48
Signature Algorithm: sha256WithRSAEncryption
31:fc:a6:e7:06:eb:b0:2d:7e:cd:94:26:71:cd:0e:ee:4b:97:
7d:9d:e1:fb:8f:57:bc:84:46:8a:5e:32:de:35:9f:de:94:d8:
3a:ba:12:49:33:8e:6e:c4:e0:6e:ab:56:01:d0:b9:4a:5b:3a:
e3:21:36:77:61:0f:cd:90:12:76:a2:88:d2:e9:d2:cd:cf:7b:
7c:32:eb:33:a8:79:47:0e:7e:18:39:8d:d5:75:2b:c8:c9:f1:
49:07:cb:f3:72:70:4b:f3:90:38:f2:a0:d7:36:74:c0:c9:30:
33:bf:16:a6:ab:94:c3:30:0f:c0:1c:66:32:89:7f:ff:d2:ec:
77:95:f0:7f:d2:73:d0:ca:7e:a7:92:1b:de:2e:22:0a:63:1a:
70:8c:f6:93:b8:eb:f5:15:10:f9:8e:ca:25:65:a4:78:e2:1a:
24:44:b2:76:09:2b:99:24:62:5e:f7:28:c9:8d:24:91:9d:4d:
68:34:9c:e9:0e:b0:fc:3b:e9:3e:a5:ea:ac:d5:4a:10:b6:e6:
7a:b9:bc:1b:eb:c7:83:d3:04:bf:11:06:6b:bf:00:0e:09:da:
01:69:df:a1:9c:05:a2:e1:5e:5d:c2:8a:1d:80:34:84:a0:31:
b6:9e:87:b9:53:0c:6b:c6:42:9e:36:70:48:b1:ff:7d:d3:f3:
99:a0:3e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:46 2024 by rpki-client on console-ams.rpki-client.org