Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9129AAC/DB9101D0391011E9A0E25B52C4F9AE02/A60DBEFC391211E99E31F655C4F9AE02.roa
File: A60DBEFC391211E99E31F655C4F9AE02.roa (raw, json)
Hash identifier: TKX/N6Pez5RKTLQ7Ltsa60Vo6IlTunHvkry36fq1umk=
Subject key identifier: 58:35:4F:42:38:0F:08:6D:00:C0:2B:BC:6C:CD:CB:3D:B7:92:0A:AF
Certificate issuer: /CN=A9129AAC/serialNumber=3380B4CFEE3AF81F8CFDB96025D51088A129640B
Certificate serial: 0ECB
Authority key identifier: 33:80:B4:CF:EE:3A:F8:1F:8C:FD:B9:60:25:D5:10:88:A1:29:64:0B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M4C0z-46-B-M_blgJdUQiKEpZAs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129AAC/DB9101D0391011E9A0E25B52C4F9AE02/A60DBEFC391211E99E31F655C4F9AE02.roa
Signing time: Sat 01 Oct 2022 18:55:30 +0000
ROA not before: Sat 01 Oct 2022 18:55:30 +0000
ROA not after: Tue 31 Jan 2023 00:00:00 +0000
asID: 43992
IP address blocks: 2403:5180:24::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3787 (0xecb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129AAC/serialNumber=3380B4CFEE3AF81F8CFDB96025D51088A129640B
Validity
Not Before: Oct 1 18:55:30 2022 GMT
Not After : Jan 31 00:00:00 2023 GMT
Subject: CN=63388d22-1151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d2:3e:68:3f:98:43:7c:9c:3d:6f:40:ee:e3:
3a:10:5e:da:85:74:04:5c:a8:68:67:9e:d7:33:48:
ba:ec:95:7f:c6:36:c6:84:24:3f:6f:0d:5a:49:64:
a7:a6:b3:65:15:f2:f3:66:b3:78:d8:e9:59:fd:bf:
9c:bc:4d:07:1f:86:9f:91:c2:4c:4b:88:51:72:42:
5b:a8:13:4b:42:c2:95:50:2d:39:10:a1:ec:8c:5b:
47:0a:15:f5:41:11:99:78:95:65:f1:be:5e:ad:c5:
be:dc:e2:8f:59:fd:e5:cc:fa:c5:ab:56:0c:b3:fd:
03:8c:4d:00:33:70:1e:1f:29:c1:da:c4:13:a6:01:
0f:e6:2b:4a:0e:8c:99:c5:32:7e:4d:0f:85:33:ce:
92:9d:45:d1:97:6d:eb:6a:72:11:e8:f1:1c:a5:92:
4e:c7:9a:df:62:27:6a:f3:ed:92:d0:35:d4:1c:36:
c0:61:e0:59:42:48:93:3e:7f:ff:59:9e:5b:a2:5b:
be:b1:f7:3d:7f:03:c8:4c:47:dc:3c:ea:c5:6e:25:
db:d9:43:c1:f7:1f:fb:85:65:f9:f8:99:4a:20:ca:
6b:23:7c:48:67:7d:2b:55:e8:b8:2a:5b:f8:1a:d9:
68:8b:4f:d4:54:21:9d:3d:b6:78:23:a6:0e:71:f4:
7f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:35:4F:42:38:0F:08:6D:00:C0:2B:BC:6C:CD:CB:3D:B7:92:0A:AF
X509v3 Authority Key Identifier:
keyid:33:80:B4:CF:EE:3A:F8:1F:8C:FD:B9:60:25:D5:10:88:A1:29:64:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129AAC/DB9101D0391011E9A0E25B52C4F9AE02/M4C0z-46-B-M_blgJdUQiKEpZAs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M4C0z-46-B-M_blgJdUQiKEpZAs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129AAC/DB9101D0391011E9A0E25B52C4F9AE02/A60DBEFC391211E99E31F655C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:5180:24::/48
Signature Algorithm: sha256WithRSAEncryption
72:4f:59:ab:1b:d1:46:ed:4a:aa:ef:e9:68:e5:14:df:f8:05:
59:82:ba:91:e7:1f:67:88:40:86:b5:83:7d:e1:c6:4d:13:a3:
b9:82:a4:21:75:96:71:fc:cd:97:4e:82:b6:fd:b6:b0:81:d9:
b6:88:3e:20:cb:f7:21:2c:b7:ec:42:e9:54:c5:4d:68:55:17:
e6:30:4d:87:d1:58:71:6b:b1:1e:ed:8f:e2:c5:96:e0:cd:14:
06:31:14:73:45:03:a8:dd:89:c7:a4:1c:33:c6:a6:1d:86:ec:
59:2d:55:f7:1e:96:f2:fb:69:5d:6f:b5:5e:2e:a7:64:d7:8c:
25:07:e0:ef:2b:3e:ef:9d:f7:b3:3b:3d:3c:ec:47:35:7f:44:
e7:5d:a7:79:4a:c8:bf:90:45:54:50:86:2b:49:fc:c8:ee:0a:
95:9a:1f:a4:e2:bf:3e:e2:8f:14:05:da:32:c9:f9:9f:2b:4f:
dd:bd:c0:ec:6f:51:ad:fa:d6:38:f8:5e:9d:e9:99:07:70:d6:
5e:32:11:86:ff:1c:c4:5b:ef:8d:b5:e8:9d:d6:8d:3f:c6:13:
ed:71:86:c0:77:8c:0e:39:41:7d:c2:58:a2:c6:91:b0:5b:72:
3c:c9:f4:e4:e5:e3:8f:ba:5a:8a:7a:5b:28:5b:9a:fa:d4:12:
c6:07:88:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:49 2024 by rpki-client on console-ams.rpki-client.org