Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911662A/B0937498002511ECBBDA2D12C4F9AE02/C2251F94BFF011EE89C8281BC4F9AE02.roa
File: C2251F94BFF011EE89C8281BC4F9AE02.roa (raw, json)
Hash identifier: Sh2CFkgA/A8nPEJXHl/JSYww8zs73G3MgFCNlrChEso=
Subject key identifier: 26:FA:72:3E:28:05:BF:46:96:D1:4F:3C:14:6E:2A:49:26:B6:30:1B
Certificate issuer: /CN=A911662A/serialNumber=D3E475DE9BA7B7372BD1936A906E86697C7EA33B
Certificate serial: 0468
Authority key identifier: D3:E4:75:DE:9B:A7:B7:37:2B:D1:93:6A:90:6E:86:69:7C:7E:A3:3B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0-R13puntzcr0ZNqkG6GaXx-ozs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911662A/B0937498002511ECBBDA2D12C4F9AE02/C2251F94BFF011EE89C8281BC4F9AE02.roa
Signing time: Wed 31 Jan 2024 04:25:26 +0000
ROA not before: Wed 31 Jan 2024 04:25:26 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 7586
IP address blocks: 2403:27c0:1000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1128 (0x468)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911662A/serialNumber=D3E475DE9BA7B7372BD1936A906E86697C7EA33B
Validity
Not Before: Jan 31 04:25:26 2024 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=65b9cbb6-f179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3d:7c:e3:c5:b3:2c:8e:20:05:97:82:5c:c4:
e7:37:a1:55:26:75:f2:98:9f:8f:a6:5a:43:14:9b:
45:d1:a8:c0:fd:5d:e5:e8:e7:75:db:1b:7f:0c:0a:
52:bf:d9:29:d8:83:84:b2:95:fc:a3:f9:e2:2a:b8:
93:24:7d:dc:81:97:05:96:78:9e:84:2e:27:28:5a:
94:04:c7:4f:c6:6a:25:5e:62:0b:cb:76:f5:ec:02:
6f:84:eb:6a:2a:dc:85:1d:8e:60:8f:6a:99:b6:2e:
fe:5b:b2:fb:52:72:df:51:61:fc:d5:79:b7:14:73:
bc:87:82:46:80:14:09:9d:86:0f:2e:ec:04:12:ea:
4e:70:0c:ad:8b:4d:79:cc:77:92:be:6e:88:dc:d5:
ea:3f:be:32:44:3c:c3:16:a4:56:14:31:c0:06:a7:
1a:8f:47:51:59:cd:0b:d8:45:d0:be:16:0c:72:d3:
a1:f2:91:a0:6f:a3:8a:84:d3:4a:26:d3:8c:92:0d:
84:3b:a3:86:e7:20:66:d0:4a:26:08:fb:2f:6d:96:
16:41:8c:62:e5:97:f1:d5:c0:50:cc:35:ff:d6:9b:
5e:56:44:12:0d:2c:ed:aa:98:cb:45:50:b4:8f:41:
a4:9d:1e:c8:c0:88:19:cf:7e:3f:e3:81:9e:94:9c:
ae:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:FA:72:3E:28:05:BF:46:96:D1:4F:3C:14:6E:2A:49:26:B6:30:1B
X509v3 Authority Key Identifier:
keyid:D3:E4:75:DE:9B:A7:B7:37:2B:D1:93:6A:90:6E:86:69:7C:7E:A3:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911662A/B0937498002511ECBBDA2D12C4F9AE02/0-R13puntzcr0ZNqkG6GaXx-ozs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0-R13puntzcr0ZNqkG6GaXx-ozs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911662A/B0937498002511ECBBDA2D12C4F9AE02/C2251F94BFF011EE89C8281BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:27c0:1000::/48
Signature Algorithm: sha256WithRSAEncryption
1b:22:68:98:a6:d6:bc:70:24:3a:a1:a3:38:b3:d3:1c:e2:47:
e7:40:a8:80:79:95:ab:f8:76:89:5c:bb:68:0a:b6:84:79:63:
ea:b3:85:09:46:5c:e2:9f:01:19:60:e3:17:c7:3f:3b:e6:00:
b7:8c:a4:9e:f3:f3:ad:58:b2:3c:67:f2:12:79:fa:22:2b:26:
f0:87:35:dc:4a:39:a3:ad:bc:b0:9c:da:44:ac:c6:3d:fd:00:
cc:ca:89:f5:f5:1c:c2:81:cc:e5:c6:7d:e9:14:84:3a:9c:c3:
fe:40:66:c3:ce:1d:b1:b0:b6:41:99:14:f7:37:33:7a:57:76:
e8:cf:bf:be:1c:f5:08:bc:43:6b:6e:11:2f:6b:3f:66:ef:72:
ed:f0:55:66:ca:21:28:90:62:c5:0b:80:48:53:7c:99:c3:c5:
1b:97:78:65:5f:fc:62:25:49:0c:dd:fe:c9:41:88:1a:e6:69:
c7:f4:0e:7f:b4:65:8b:2d:ee:de:d1:68:dc:2a:39:b0:91:5b:
01:af:13:52:20:01:8e:e3:66:a3:0c:08:dc:74:6e:9f:fe:93:
38:d6:cd:e1:8d:63:63:f1:65:a1:4b:1e:25:a8:32:d4:77:a3:
ef:34:a1:8d:91:27:9a:70:1d:c5:e7:29:7e:81:af:5c:ec:79:
a1:bf:71:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:46 2024 by rpki-client on console-ams.rpki-client.org