Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9129AAC/DB9101D0391011E9A0E25B52C4F9AE02/A3D165F8391211E99E31F655C4F9AE02.roa
File: A3D165F8391211E99E31F655C4F9AE02.roa (raw, json)
Hash identifier: z8X1amEqm1GXE9fF7nzvi9NpZzfZe2vw4OZRyIYzeLw=
Subject key identifier: 06:2F:F5:9D:29:00:A7:6B:30:BC:F2:99:10:37:22:6E:03:E6:F2:52
Certificate issuer: /CN=A9129AAC/serialNumber=3380B4CFEE3AF81F8CFDB96025D51088A129640B
Certificate serial: 0EC8
Authority key identifier: 33:80:B4:CF:EE:3A:F8:1F:8C:FD:B9:60:25:D5:10:88:A1:29:64:0B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M4C0z-46-B-M_blgJdUQiKEpZAs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129AAC/DB9101D0391011E9A0E25B52C4F9AE02/A3D165F8391211E99E31F655C4F9AE02.roa
Signing time: Sat 01 Oct 2022 18:55:27 +0000
ROA not before: Sat 01 Oct 2022 18:55:27 +0000
ROA not after: Tue 31 Jan 2023 00:00:00 +0000
asID: 35536
IP address blocks: 2403:5180:22::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3784 (0xec8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129AAC/serialNumber=3380B4CFEE3AF81F8CFDB96025D51088A129640B
Validity
Not Before: Oct 1 18:55:27 2022 GMT
Not After : Jan 31 00:00:00 2023 GMT
Subject: CN=63388d1f-4c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2e:e2:9b:a8:fc:68:2a:35:6f:dc:3e:92:8c:
39:ab:e5:fd:2c:53:35:3f:fe:14:54:c1:29:b6:9b:
77:8e:5c:1b:a1:74:c8:d9:19:f6:f0:79:ab:db:48:
d1:c0:18:2b:4d:65:89:06:5a:c5:39:46:17:e4:51:
8d:40:49:9e:42:f5:a9:b8:3b:b8:39:31:52:8f:c0:
a5:a6:dd:26:46:34:53:ba:b9:18:80:cf:61:47:9f:
35:d8:bc:e0:79:5f:e9:c7:0f:38:1b:cf:b3:34:3a:
51:7c:4b:e4:bc:34:f7:7a:c7:0a:a6:22:7a:a3:c7:
cc:92:14:43:c5:d9:21:7f:13:36:9b:c5:d8:24:89:
24:02:41:b2:73:67:7c:ea:a2:de:5a:1a:f1:83:d1:
1e:5a:53:81:1d:93:8f:64:c8:fd:e4:c0:15:54:a7:
11:cf:e8:df:f9:c7:e6:21:e4:b4:ad:3e:2d:72:3f:
2a:50:6a:71:46:96:64:88:53:09:d3:78:f8:e5:0b:
8d:f8:fa:f3:44:70:2a:ff:18:05:8b:a2:4e:36:ad:
39:91:86:07:47:c5:ed:88:fa:0b:64:34:93:84:71:
89:79:9b:ed:d7:fa:55:e0:2a:0b:0c:4b:df:5f:da:
32:e7:51:82:c2:99:fd:0f:ef:43:a8:25:f1:6e:21:
23:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:2F:F5:9D:29:00:A7:6B:30:BC:F2:99:10:37:22:6E:03:E6:F2:52
X509v3 Authority Key Identifier:
keyid:33:80:B4:CF:EE:3A:F8:1F:8C:FD:B9:60:25:D5:10:88:A1:29:64:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129AAC/DB9101D0391011E9A0E25B52C4F9AE02/M4C0z-46-B-M_blgJdUQiKEpZAs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M4C0z-46-B-M_blgJdUQiKEpZAs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129AAC/DB9101D0391011E9A0E25B52C4F9AE02/A3D165F8391211E99E31F655C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:5180:22::/48
Signature Algorithm: sha256WithRSAEncryption
69:13:1b:31:d8:04:f6:95:c6:78:5d:c6:62:76:3a:4b:7a:7a:
03:7f:c9:b9:0a:4d:ae:8a:a9:d6:75:ac:08:33:9f:6e:60:29:
6d:26:7f:c9:67:12:86:c1:68:52:65:e2:a3:17:82:b2:18:c1:
3d:04:28:f6:2f:05:35:1a:4f:73:a6:95:19:62:8b:27:f3:e1:
c1:3e:9f:d7:a5:59:32:a5:4b:fd:e5:c0:05:68:41:94:1b:d8:
82:53:8a:51:31:b5:5a:b1:66:52:48:df:ee:3e:8a:f1:09:09:
0a:1c:82:0a:b4:7f:6d:5b:1c:f5:cc:20:26:95:3e:34:a2:d6:
8b:30:25:4a:12:1c:af:c9:df:75:eb:c3:cc:c2:10:fa:2a:9c:
1f:51:72:b2:7f:06:60:b4:c6:0f:20:7e:d1:7d:dc:fc:6e:fd:
85:ab:e5:c7:0c:52:3d:33:ba:35:3c:a3:6f:a5:77:c5:5e:78:
7e:04:eb:9c:54:0d:0a:c5:0a:46:40:a7:07:ce:67:7d:96:32:
f1:f6:70:e2:fc:50:38:66:c6:cd:59:c1:f8:57:05:9a:00:04:
6c:20:47:40:6f:8e:f7:39:34:01:1d:8b:34:ed:20:70:c7:da:
2e:fa:c4:e8:fd:da:97:6d:30:df:ba:12:61:57:09:a0:34:8d:
f3:c2:37:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:49 2024 by rpki-client on console-ams.rpki-client.org