Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9129AAC/DB9101D0391011E9A0E25B52C4F9AE02/A6C791CE391211E99E31F655C4F9AE02.roa
File: A6C791CE391211E99E31F655C4F9AE02.roa (raw, json)
Hash identifier: noUSHxmM1rj45jTjY++rARc7sdw7e9YrMFVK6pldErU=
Subject key identifier: 13:EB:DC:B2:1A:BB:DB:E1:36:7E:DA:06:DF:3F:48:E2:43:F7:DC:FB
Certificate issuer: /CN=A9129AAC/serialNumber=3380B4CFEE3AF81F8CFDB96025D51088A129640B
Certificate serial: 0ECC
Authority key identifier: 33:80:B4:CF:EE:3A:F8:1F:8C:FD:B9:60:25:D5:10:88:A1:29:64:0B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M4C0z-46-B-M_blgJdUQiKEpZAs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129AAC/DB9101D0391011E9A0E25B52C4F9AE02/A6C791CE391211E99E31F655C4F9AE02.roa
Signing time: Sat 01 Oct 2022 18:55:31 +0000
ROA not before: Sat 01 Oct 2022 18:55:31 +0000
ROA not after: Tue 31 Jan 2023 00:00:00 +0000
asID: 57969
IP address blocks: 2403:5180:21::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3788 (0xecc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129AAC/serialNumber=3380B4CFEE3AF81F8CFDB96025D51088A129640B
Validity
Not Before: Oct 1 18:55:31 2022 GMT
Not After : Jan 31 00:00:00 2023 GMT
Subject: CN=63388d23-7a98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3e:c4:91:e7:c9:34:dc:8c:47:b0:3a:d0:1b:
5b:be:64:9c:5f:59:45:b3:7a:56:d9:df:eb:7a:c5:
e3:2f:81:bb:7d:79:aa:c9:84:d4:88:34:ee:e6:a4:
2a:10:42:6a:dd:ba:e1:ae:3e:f5:37:6f:0a:7b:5e:
bb:b2:3d:78:ab:1f:c1:79:3d:7f:48:92:d4:c1:49:
32:7b:82:a3:b1:d4:8b:d0:32:7a:18:99:cc:7a:1d:
4f:a3:51:3d:0c:16:9d:27:63:c6:86:1c:eb:44:48:
53:55:7d:0d:97:c0:60:dd:a8:4b:b5:08:ff:e7:1b:
e4:af:37:6e:47:88:0e:ea:a7:fb:90:36:55:8f:e1:
11:bb:57:fd:5f:83:dc:2c:b9:fd:21:42:79:28:26:
bc:0a:a8:b1:b5:25:44:c3:e7:1d:6a:3d:a7:68:54:
83:72:a0:0e:67:63:69:33:4f:c6:e0:66:18:9a:1b:
61:d3:62:ed:d6:88:98:f4:a3:c4:ea:15:6e:9b:59:
71:50:a5:8e:5c:75:85:dd:a6:c4:b9:bb:06:42:8a:
a8:38:fa:b0:ec:7a:11:0f:31:71:48:bb:a4:04:bc:
1d:f7:a5:c4:cc:d8:11:87:af:1b:5d:32:20:34:26:
7c:92:bd:3c:ad:bd:6c:3e:3b:3a:58:bd:3d:2d:42:
2a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:EB:DC:B2:1A:BB:DB:E1:36:7E:DA:06:DF:3F:48:E2:43:F7:DC:FB
X509v3 Authority Key Identifier:
keyid:33:80:B4:CF:EE:3A:F8:1F:8C:FD:B9:60:25:D5:10:88:A1:29:64:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129AAC/DB9101D0391011E9A0E25B52C4F9AE02/M4C0z-46-B-M_blgJdUQiKEpZAs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M4C0z-46-B-M_blgJdUQiKEpZAs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129AAC/DB9101D0391011E9A0E25B52C4F9AE02/A6C791CE391211E99E31F655C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:5180:21::/48
Signature Algorithm: sha256WithRSAEncryption
4c:ad:e0:16:ce:c3:d7:ea:09:95:79:92:86:e8:a2:6b:90:77:
05:7a:cf:f9:cf:49:55:2d:ad:92:09:27:ab:22:3f:0a:56:f6:
64:44:de:25:11:69:0f:c9:bf:a0:33:57:30:64:73:25:47:70:
4f:e9:82:fd:1d:e2:32:5c:68:7d:0e:3b:d3:26:00:d9:d6:f0:
f7:db:7d:87:50:70:3a:8a:5b:98:c3:1a:2d:2a:2b:cc:21:a7:
62:6f:a1:40:8a:ef:10:46:00:c5:62:fe:1b:66:ea:1b:ab:01:
7d:c3:67:0a:ea:81:34:c6:8a:ff:bf:1b:26:2d:19:e9:21:f3:
31:d5:59:89:cf:cd:e6:7c:24:b9:e4:91:b6:12:a0:97:cc:41:
db:ed:37:cb:5a:2a:6d:bb:37:35:88:93:65:1c:fb:25:06:c9:
0c:22:49:86:51:a5:58:da:ac:d4:96:78:6f:93:fb:2b:6a:a4:
6b:21:83:cf:76:a4:fe:56:9b:4a:c3:44:07:0c:88:f5:41:a6:
32:12:b2:67:d4:1a:1e:d5:72:94:2c:b9:1c:5a:1a:66:13:13:
1f:68:73:be:e2:76:43:27:ac:96:51:71:2e:39:fb:a2:86:6c:
2c:8c:28:51:a8:6d:eb:fe:40:e5:6a:30:8e:10:59:8d:d7:ad:
11:dd:d7:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:49 2024 by rpki-client on console-ams.rpki-client.org