Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9129AAC/DB9101D0391011E9A0E25B52C4F9AE02/9CC6F4D0391211E99E31F655C4F9AE02.roa
File: 9CC6F4D0391211E99E31F655C4F9AE02.roa (raw, json)
Hash identifier: MOZYZmadJ2Utkqr57jINqY6NF21sU7grgFyGSt1mf2E=
Subject key identifier: EB:90:6B:AD:9E:FB:4A:84:AB:D5:C0:A4:D4:84:7F:9D:44:FE:BB:13
Certificate issuer: /CN=A9129AAC/serialNumber=3380B4CFEE3AF81F8CFDB96025D51088A129640B
Certificate serial: 0EC3
Authority key identifier: 33:80:B4:CF:EE:3A:F8:1F:8C:FD:B9:60:25:D5:10:88:A1:29:64:0B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M4C0z-46-B-M_blgJdUQiKEpZAs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129AAC/DB9101D0391011E9A0E25B52C4F9AE02/9CC6F4D0391211E99E31F655C4F9AE02.roa
Signing time: Sat 01 Oct 2022 18:55:22 +0000
ROA not before: Sat 01 Oct 2022 18:55:22 +0000
ROA not after: Tue 31 Jan 2023 00:00:00 +0000
asID: 138038
IP address blocks: 2403:5180:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3779 (0xec3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129AAC/serialNumber=3380B4CFEE3AF81F8CFDB96025D51088A129640B
Validity
Not Before: Oct 1 18:55:22 2022 GMT
Not After : Jan 31 00:00:00 2023 GMT
Subject: CN=63388d1a-9933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:b3:d4:29:98:65:54:35:68:de:66:51:82:a0:
e9:fb:44:e9:2a:8b:02:35:a8:6c:b6:e9:b2:4d:90:
24:4b:4f:4d:c2:93:77:78:de:95:0f:1e:7f:10:af:
ce:d9:46:32:b2:89:59:2d:26:80:b7:e7:4f:09:94:
82:a5:46:66:2a:dd:3b:f6:bd:7b:07:e9:15:2c:7d:
df:fc:7d:6d:41:8a:31:9b:ad:c2:fb:ff:7a:47:1d:
ea:1e:97:36:6d:2c:20:c9:6a:3e:0f:1d:79:12:82:
9c:37:bf:c5:73:f7:61:73:16:7f:e9:f3:08:16:40:
a7:72:eb:9e:ed:67:49:f7:d1:a9:d1:e1:f9:d9:42:
ee:b4:85:39:6a:e8:59:bf:43:29:e0:d4:e1:e3:44:
85:7e:db:75:a3:84:f6:5a:22:be:67:88:89:ea:29:
1f:61:5b:cb:65:a7:f9:89:c8:2b:73:ec:56:6f:a3:
9d:47:c4:90:79:4c:48:6c:66:76:43:8e:6b:be:ab:
a2:d1:d9:ad:ab:13:86:8d:aa:c0:0f:b2:27:42:73:
9d:66:1b:e0:a4:d2:2a:42:7a:de:c6:d4:01:52:7a:
0e:51:7d:12:6b:06:29:dd:39:ad:02:b0:9e:7c:e4:
74:d1:d2:26:56:5b:80:32:bb:6a:df:07:cf:0a:ae:
cb:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:90:6B:AD:9E:FB:4A:84:AB:D5:C0:A4:D4:84:7F:9D:44:FE:BB:13
X509v3 Authority Key Identifier:
keyid:33:80:B4:CF:EE:3A:F8:1F:8C:FD:B9:60:25:D5:10:88:A1:29:64:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129AAC/DB9101D0391011E9A0E25B52C4F9AE02/M4C0z-46-B-M_blgJdUQiKEpZAs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M4C0z-46-B-M_blgJdUQiKEpZAs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129AAC/DB9101D0391011E9A0E25B52C4F9AE02/9CC6F4D0391211E99E31F655C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:5180:1::/48
Signature Algorithm: sha256WithRSAEncryption
44:07:2a:c2:2c:55:cf:2e:2a:8d:f0:d8:6e:24:2c:49:d5:28:
67:e1:e2:dc:d4:25:c1:f0:b7:89:c0:ff:01:55:f3:2f:aa:2d:
35:d1:62:b8:98:97:28:48:9a:d1:05:09:82:29:8d:29:ae:9c:
43:b2:bb:35:d0:48:63:28:81:91:c6:bb:3e:94:50:99:89:7f:
39:96:92:10:7c:2d:2f:51:40:12:b8:e1:69:c0:f6:9e:ea:92:
3a:42:20:52:09:57:c1:02:07:ac:6b:d1:b2:c6:ff:bb:42:de:
3c:ed:b2:e6:22:5d:27:43:2f:5d:c9:e3:c7:01:87:50:16:35:
de:d1:56:ee:02:a9:80:01:ef:9a:10:a1:99:bc:5e:29:45:10:
52:b5:ea:89:dd:6d:65:c7:29:12:14:85:1e:44:8f:2e:89:c6:
f1:51:5c:4c:0f:0e:b7:82:b3:94:2f:c6:13:11:13:3c:5f:a1:
24:c0:06:41:29:03:ba:5b:b4:81:37:0c:82:f5:bf:d7:f1:c2:
01:3e:f3:69:d2:23:2d:3b:8e:d0:c0:24:80:d7:94:a1:6a:fb:
25:14:62:36:c9:b8:bc:de:1f:bb:52:10:6b:5b:b0:a9:65:42:
29:e6:7a:b3:49:e3:e7:c6:50:9a:38:d3:ff:a6:43:de:11:cf:
8e:e8:1c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:49 2024 by rpki-client on console-ams.rpki-client.org