Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9138B7F/6CDE8998FF4111EB82B31F5DC4F9AE02/01D25040918911EDA3426975C4F9AE02.roa
File: 01D25040918911EDA3426975C4F9AE02.roa (raw, json)
Hash identifier: xk8HNl86eThLS8EmxMhCtgnNymx8UFZ7hpA7wsdkyHQ=
Subject key identifier: 19:9B:15:B7:DC:7E:FA:21:EF:2F:7D:3D:1B:B1:09:75:51:C4:2C:07
Certificate issuer: /CN=A9138B7F/serialNumber=9BE1FB19438390E5170818EAFAF00BB323A00C48
Certificate serial: 03A0
Authority key identifier: 9B:E1:FB:19:43:83:90:E5:17:08:18:EA:FA:F0:0B:B3:23:A0:0C:48
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-H7GUODkOUXCBjq-vALsyOgDEg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9138B7F/6CDE8998FF4111EB82B31F5DC4F9AE02/01D25040918911EDA3426975C4F9AE02.roa
Signing time: Wed 11 Jan 2023 08:21:55 +0000
ROA not before: Wed 11 Jan 2023 08:21:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9400
IP address blocks: 2401:1740::/40 maxlen: 40
2401:1740:100::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 928 (0x3a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9138B7F
Validity
Not Before: Jan 11 08:21:55 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63be71a2-8dc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:35:21:81:b1:ac:eb:0f:c6:80:43:c4:21:9d:
03:79:ab:7b:02:2c:a7:0e:7f:5f:6c:71:0f:dd:ef:
5a:72:4f:9c:0b:ea:c4:b8:ee:f8:c5:c8:55:8f:c5:
a7:11:42:26:22:3d:0c:0b:55:0b:40:51:20:ba:58:
db:50:3a:41:d2:5e:38:9b:70:98:9c:c2:43:a2:e8:
30:05:f5:95:18:71:01:83:f4:be:d8:c8:b4:37:14:
8c:0d:48:7e:2a:dd:2c:23:ad:fc:f9:2a:97:ed:cf:
4b:f3:05:cb:77:e7:36:0b:ea:0c:25:09:10:ef:79:
ff:d9:21:f4:25:9b:42:d3:c9:ff:47:ad:83:15:0b:
28:0c:83:ab:9c:da:f8:6c:5e:56:84:38:13:0c:8e:
1e:3f:c0:6d:c7:9c:6e:8f:8f:31:ed:1b:7d:78:71:
2f:9a:b7:74:0d:63:0f:f0:15:b7:70:2a:b3:78:d2:
1b:5e:60:03:ad:a8:27:eb:e0:e2:30:e7:15:29:a9:
db:2d:61:cb:fc:58:90:d2:5c:75:af:35:a0:7b:25:
63:02:35:83:c3:00:76:7e:9e:82:72:6a:08:ed:b7:
f9:eb:de:e4:7d:7e:19:0d:7f:92:86:83:77:92:50:
58:16:ce:35:f9:e4:20:fe:a8:ae:61:a7:4f:45:de:
74:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:9B:15:B7:DC:7E:FA:21:EF:2F:7D:3D:1B:B1:09:75:51:C4:2C:07
X509v3 Authority Key Identifier:
keyid:9B:E1:FB:19:43:83:90:E5:17:08:18:EA:FA:F0:0B:B3:23:A0:0C:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9138B7F/6CDE8998FF4111EB82B31F5DC4F9AE02/m-H7GUODkOUXCBjq-vALsyOgDEg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-H7GUODkOUXCBjq-vALsyOgDEg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138B7F/6CDE8998FF4111EB82B31F5DC4F9AE02/01D25040918911EDA3426975C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:1740::/39
Signature Algorithm: sha256WithRSAEncryption
71:43:51:40:fd:83:12:c3:0c:07:14:79:dc:88:53:04:b4:38:
74:22:2e:e9:a8:81:3f:b0:4c:33:97:2b:24:27:75:ae:7f:a2:
87:e8:4a:bd:4d:fa:40:c6:86:0e:eb:a4:99:1f:fa:33:67:ec:
18:9b:46:4a:fc:5c:53:1e:a7:89:7c:6a:46:75:b2:d4:f6:8f:
e9:6c:de:44:6d:75:61:ab:7f:6a:81:b8:1c:4e:fb:e5:c7:0b:
cc:3b:fa:77:49:89:b0:8d:25:59:67:8b:ac:2c:dd:a1:2a:f8:
fb:64:97:14:7b:4c:e6:d3:7d:a4:61:87:37:ad:93:0e:cd:56:
55:d1:7a:f2:4b:13:1e:d5:52:cd:d1:ac:22:22:fe:26:10:99:
29:56:0e:2a:23:cb:3e:b3:2b:91:8b:02:d6:f3:65:be:4b:8b:
ae:57:3f:af:94:63:67:2c:e5:b8:ec:96:51:ac:46:1b:2e:b4:
ca:6e:aa:b6:d3:18:12:e6:3f:66:4d:d2:18:a2:78:62:54:f2:
a6:75:70:6b:c7:c2:e7:56:32:5e:a3:bc:d1:72:c8:ed:3a:78:
b3:c4:a7:85:9b:6a:71:12:f3:0a:a9:f2:71:25:d1:1f:72:3e:
65:59:d8:bf:b2:bb:ed:d8:79:c9:94:c0:62:57:5c:75:4d:b1:
25:e9:95:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:53 2025 by rpki-client