Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9138B7F/6CDE8998FF4111EB82B31F5DC4F9AE02/0A3B7D12704011ECBD6F2E5BC4F9AE02.roa
File: 0A3B7D12704011ECBD6F2E5BC4F9AE02.roa (raw, json)
Hash identifier: /JV+VyjG6zUgWZxc9pGYV3LwDcZdCtfe3sver80LbdU=
Subject key identifier: 76:84:CE:85:0F:78:9F:45:14:78:8F:63:4B:2C:DE:EE:C1:18:C8:5A
Certificate issuer: /CN=A9138B7F/serialNumber=9BE1FB19438390E5170818EAFAF00BB323A00C48
Certificate serial: 01F4
Authority key identifier: 9B:E1:FB:19:43:83:90:E5:17:08:18:EA:FA:F0:0B:B3:23:A0:0C:48
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-H7GUODkOUXCBjq-vALsyOgDEg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9138B7F/6CDE8998FF4111EB82B31F5DC4F9AE02/0A3B7D12704011ECBD6F2E5BC4F9AE02.roa
Signing time: Mon 11 Apr 2022 14:53:29 +0000
ROA not before: Mon 11 Apr 2022 14:53:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 38439
IP address blocks: 2401:1740:800::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 500 (0x1f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9138B7F/serialNumber=9BE1FB19438390E5170818EAFAF00BB323A00C48
Validity
Not Before: Apr 11 14:53:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=625440e8-4bdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:da:e9:44:3e:9a:33:87:30:24:7f:61:3b:bf:
eb:5f:5e:c8:41:29:fd:e1:96:d7:ec:70:25:58:18:
ba:37:8b:8e:a8:fc:fb:d5:6c:57:40:0f:62:06:05:
af:60:8c:d4:43:b8:a9:60:44:7d:63:9e:18:2a:0f:
f9:04:0f:ba:b9:b8:fd:f2:15:de:8a:96:2a:4b:a3:
29:4a:a6:21:48:50:34:9d:16:ed:20:69:fb:d6:30:
c1:b4:5c:31:24:a9:78:d8:2d:ea:08:1d:10:8e:f3:
74:1f:e3:14:8f:aa:e9:da:4e:ab:0d:09:94:68:cd:
8c:c4:a2:f7:75:d9:35:a0:5d:80:cb:97:50:41:30:
57:66:bf:94:8a:de:9b:ef:4e:a1:42:e9:34:79:04:
e9:fc:70:3f:60:bb:5e:ef:eb:b8:74:6e:5e:b4:ab:
ce:eb:ea:c2:b1:45:9a:26:57:2c:f6:3c:47:91:32:
0d:9a:ae:4e:11:79:88:56:89:2e:8d:8b:d5:08:bc:
b5:4d:1b:59:be:d9:a4:59:f1:c7:8d:c6:49:1c:11:
03:ea:28:89:cb:d7:fe:d1:f6:69:99:5c:22:77:0d:
cb:ff:9d:f7:e0:3e:11:27:7c:b5:53:d3:aa:b6:b0:
99:20:dd:fc:f9:a8:39:59:6e:0c:aa:17:67:1a:91:
14:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:84:CE:85:0F:78:9F:45:14:78:8F:63:4B:2C:DE:EE:C1:18:C8:5A
X509v3 Authority Key Identifier:
keyid:9B:E1:FB:19:43:83:90:E5:17:08:18:EA:FA:F0:0B:B3:23:A0:0C:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9138B7F/6CDE8998FF4111EB82B31F5DC4F9AE02/m-H7GUODkOUXCBjq-vALsyOgDEg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-H7GUODkOUXCBjq-vALsyOgDEg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138B7F/6CDE8998FF4111EB82B31F5DC4F9AE02/0A3B7D12704011ECBD6F2E5BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:1740:800::/48
Signature Algorithm: sha256WithRSAEncryption
3e:7a:74:da:db:72:7c:c7:10:61:b5:e5:b5:66:32:47:b4:38:
aa:67:a0:7d:d6:c4:10:ef:a1:b1:a0:c7:0f:7e:11:86:8e:9e:
3a:ce:0d:82:b7:e9:be:21:99:61:a3:d8:ec:61:38:65:7d:b9:
c6:eb:c2:23:28:10:45:0c:bc:08:3b:0d:19:61:fb:fe:ea:45:
8a:4a:43:28:41:d5:93:1d:7a:47:5c:90:9e:c9:c2:e1:d0:88:
47:90:a9:1d:11:08:d8:e2:db:a3:0f:30:e8:78:eb:14:90:89:
7a:11:10:b4:04:8c:13:7f:07:c6:9a:f2:70:d0:4e:b1:79:cd:
d4:dc:d8:3f:c3:fb:64:a1:2e:de:7b:8f:6e:e7:f9:7d:cf:f3:
6f:d8:85:10:e3:a5:b7:80:cf:51:b1:ab:9e:2b:e9:65:32:1d:
62:51:a2:08:a5:58:cf:85:f6:49:dc:b9:70:87:61:61:fb:d6:
43:60:92:9d:4d:a0:61:4a:b4:b7:26:1b:74:9b:19:b1:35:39:
9a:68:27:c2:1a:c3:0b:9b:18:6b:b5:4d:47:1c:d2:0d:bb:87:
5c:90:59:99:fd:68:00:ea:73:74:35:c8:1f:b1:7d:87:b8:1a:
c3:78:8d:f2:6f:07:a1:d7:c5:d5:b3:2d:4f:66:6c:15:f6:dc:
10:4e:95:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:02 2024 by rpki-client on console-fra.rpki-client.org