Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9129AAC/DB9101D0391011E9A0E25B52C4F9AE02/9EDE39D6391211E99E31F655C4F9AE02.roa
File: 9EDE39D6391211E99E31F655C4F9AE02.roa (raw, json)
Hash identifier: M0qM/v8nPJCFJtMvg0CE3TfpLxupUIkfeJLq5msM2RY=
Subject key identifier: 9D:32:52:44:70:C0:35:E4:42:F2:86:65:D8:12:AA:60:53:F9:7D:19
Certificate issuer: /CN=A9129AAC/serialNumber=3380B4CFEE3AF81F8CFDB96025D51088A129640B
Certificate serial: 0EC5
Authority key identifier: 33:80:B4:CF:EE:3A:F8:1F:8C:FD:B9:60:25:D5:10:88:A1:29:64:0B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M4C0z-46-B-M_blgJdUQiKEpZAs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129AAC/DB9101D0391011E9A0E25B52C4F9AE02/9EDE39D6391211E99E31F655C4F9AE02.roa
Signing time: Sat 01 Oct 2022 18:55:24 +0000
ROA not before: Sat 01 Oct 2022 18:55:24 +0000
ROA not after: Tue 31 Jan 2023 00:00:00 +0000
asID: 138330
IP address blocks: 2403:5180:8::/48 maxlen: 48
2403:5180:9::/48 maxlen: 48
2403:5180:10::/48 maxlen: 48
2403:5180:11::/48 maxlen: 48
2403:5180:15::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3781 (0xec5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129AAC/serialNumber=3380B4CFEE3AF81F8CFDB96025D51088A129640B
Validity
Not Before: Oct 1 18:55:24 2022 GMT
Not After : Jan 31 00:00:00 2023 GMT
Subject: CN=63388d1c-17c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d0:64:40:0c:4a:01:3b:93:38:96:d9:41:c7:
44:70:58:12:aa:53:73:69:35:eb:27:0e:ed:d6:94:
67:53:69:d1:ca:b1:f6:a7:37:72:f8:e7:bd:1a:a6:
3c:8c:58:91:a0:ea:47:a5:42:92:57:c6:81:0f:9c:
1a:39:16:40:e4:51:27:35:57:5e:34:12:65:a5:01:
0f:5b:32:16:3c:0c:44:3b:ed:91:5e:1e:e3:28:30:
7a:7f:83:d3:06:02:c4:ce:6c:6b:f3:6d:66:51:34:
9a:c7:5a:06:2b:33:a3:3a:1a:46:6c:48:b0:f7:d3:
35:d4:5e:0f:51:f2:96:ac:87:18:28:58:23:dc:2c:
b6:a0:ac:f2:f2:30:86:b8:20:0f:fc:fe:e3:83:cd:
b0:44:70:fe:7e:09:46:2d:7c:48:59:ad:03:eb:d2:
80:e0:9c:3b:ea:f9:a5:34:e9:89:e6:cf:3c:0d:c6:
95:22:ff:54:c2:bf:4f:cb:d5:79:52:dd:03:ef:76:
6f:d6:ac:41:3f:ed:f6:fe:23:5b:45:ee:db:ef:59:
cc:0d:72:72:04:88:bb:81:97:86:6d:a4:42:36:75:
98:c7:ae:e4:cb:0e:24:7e:f5:f6:61:9e:05:8f:9a:
af:c2:45:26:46:cc:58:3d:a0:96:75:50:01:02:80:
ab:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:32:52:44:70:C0:35:E4:42:F2:86:65:D8:12:AA:60:53:F9:7D:19
X509v3 Authority Key Identifier:
keyid:33:80:B4:CF:EE:3A:F8:1F:8C:FD:B9:60:25:D5:10:88:A1:29:64:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129AAC/DB9101D0391011E9A0E25B52C4F9AE02/M4C0z-46-B-M_blgJdUQiKEpZAs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M4C0z-46-B-M_blgJdUQiKEpZAs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129AAC/DB9101D0391011E9A0E25B52C4F9AE02/9EDE39D6391211E99E31F655C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:5180:8::/47
2403:5180:10::/47
2403:5180:15::/48
Signature Algorithm: sha256WithRSAEncryption
53:67:b7:99:15:7d:7b:3a:0f:11:71:24:e5:d5:9b:fe:40:86:
6a:48:78:3a:df:fa:cf:01:ca:d7:f5:ce:bb:b3:da:77:08:44:
58:4d:64:ac:ef:03:52:92:7f:7a:8d:4f:7b:af:08:13:2c:5e:
8e:53:b7:4f:3f:2b:be:82:c5:1a:95:5f:18:c2:b0:0d:90:73:
b3:82:66:b6:8c:27:0b:67:4e:8f:6f:db:e9:0c:23:eb:8f:f4:
f2:ff:7e:6d:16:02:44:dd:94:9f:46:ec:5f:b2:2d:b9:13:b6:
e4:07:ce:5d:01:f5:87:27:74:72:4b:ab:99:9f:07:43:25:68:
ea:53:43:29:20:43:bf:6b:f9:72:68:b6:ec:e3:13:48:71:52:
ec:23:0a:f4:1b:ad:12:9c:f6:6c:51:63:74:b5:75:be:f5:0a:
8d:13:eb:46:fd:2c:fa:41:bb:14:ee:f9:b4:90:50:3e:7c:1c:
66:bd:23:a6:40:b9:b9:59:55:22:48:b6:b7:3b:ff:df:36:91:
66:fa:14:16:1f:d0:45:91:7e:f2:40:79:9b:94:bb:91:1e:ec:
ab:2d:16:21:2e:10:2e:0a:3f:52:1a:64:d0:10:4c:2a:27:ca:
bc:52:00:45:2c:3f:c4:51:82:bf:ec:cc:7e:23:80:31:7a:e9:
93:8f:4b:16
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgICDsUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjlBQUMxMTAvBgNVBAUTKDMzODBCNENGRUUzQUY4MUY4Q0ZEQjk2MDI1RDUxMDg4
QTEyOTY0MEIwHhcNMjIxMDAxMTg1NTI0WhcNMjMwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MzM4OGQxYy0xN2MwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3tBkQAxKATuTOJbZQcdEcFgSqlNzaTXrJw7t1pRnU2nRyrH2pzdy+Oe9GqY8
jFiRoOpHpUKSV8aBD5waORZA5FEnNVdeNBJlpQEPWzIWPAxEO+2RXh7jKDB6f4PT
BgLEzmxr821mUTSax1oGKzOjOhpGbEiw99M11F4PUfKWrIcYKFgj3Cy2oKzy8jCG
uCAP/P7jg82wRHD+fglGLXxIWa0D69KA4Jw76vmlNOmJ5s88DcaVIv9Uwr9Py9V5
Ut0D73Zv1qxBP+32/iNbRe7b71nMDXJyBIi7gZeGbaRCNnWYx67kyw4kfvX2YZ4F
j5qvwkUmRsxYPaCWdVABAoCrbwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFJ0yUkRw
wDXkQvKGZdgSqmBT+X0ZMB8GA1UdIwQYMBaAFDOAtM/uOvgfjP25YCXVEIihKWQL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUFBQy9EQjkxMDFEMDM5
MTAxMUU5QTBFMjVCNTJDNEY5QUUwMi9NNEMwei00Ni1CLU1fYmxnSmRVUWlLRXBa
QXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL000QzB6LTQ2LUItTV9ibGdKZFVRaUtFcFpBcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjlBQUMvREI5MTAxRDAzOTEwMTFFOUEwRTI1QjUyQzRGOUFFMDIvOUVERTM5RDYz
OTEyMTFFOTlFMzFGNjU1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E
JTAjMCEEAgACMBsDBwEkA1GAAAgDBwEkA1GAABADBwAkA1GAABUwDQYJKoZIhvcN
AQELBQADggEBAFNnt5kVfXs6DxFxJOXVm/5AhmpIeDrf+s8Bytf1zruz2ncIRFhN
ZKzvA1KSf3qNT3uvCBMsXo5Tt08/K76CxRqVXxjCsA2Qc7OCZraMJwtnTo9v2+kM
I+uP9PL/fm0WAkTdlJ9G7F+yLbkTtuQHzl0B9YcndHJLq5mfB0MlaOpTQykgQ79r
+XJotuzjE0hxUuwjCvQbrRKc9mxRY3S1db71Co0T60b9LPpBuxTu+bSQUD58HGa9
I6ZAublZVSJItrc7/982kWb6FBYf0EWRfvJAeZuUu5Ee7KstFiEuEC4KP1IaZNAQ
TConyrxSAEUsP8RRgr/szH4jgDF66ZOPSxY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:49 2024 by rpki-client on console-ams.rpki-client.org