Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9138B7F/6CDE8998FF4111EB82B31F5DC4F9AE02/34A920427D5811EDBB4E9F6CC4F9AE02.roa
File: 34A920427D5811EDBB4E9F6CC4F9AE02.roa (raw, json)
Hash identifier: YRxVeC5VRS7t3Qs81q7Kd4DrAom6Qw/uHRL0rhW1ruE=
Subject key identifier: 5D:9F:B4:A1:12:D6:06:A2:D8:F9:53:C8:C8:0E:08:47:15:89:19:11
Certificate issuer: /CN=A9138B7F/serialNumber=9BE1FB19438390E5170818EAFAF00BB323A00C48
Certificate serial: 0387
Authority key identifier: 9B:E1:FB:19:43:83:90:E5:17:08:18:EA:FA:F0:0B:B3:23:A0:0C:48
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-H7GUODkOUXCBjq-vALsyOgDEg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9138B7F/6CDE8998FF4111EB82B31F5DC4F9AE02/34A920427D5811EDBB4E9F6CC4F9AE02.roa
Signing time: Fri 16 Dec 2022 15:42:11 +0000
ROA not before: Fri 16 Dec 2022 15:42:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 134176
IP address blocks: 2401:1740:1000::/48 maxlen: 48
2401:1740:3000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 903 (0x387)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9138B7F/serialNumber=9BE1FB19438390E5170818EAFAF00BB323A00C48
Validity
Not Before: Dec 16 15:42:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=639c91d3-7020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ea:d3:3f:ad:97:60:e1:b3:80:22:21:c7:15:
42:d0:9a:91:5f:08:0e:cc:40:90:57:4f:7c:b5:7c:
62:18:b9:9d:67:84:ca:b8:92:00:29:ba:46:de:65:
55:f0:59:60:24:07:a0:d5:24:4a:37:0e:4a:1c:00:
35:cf:9d:bf:2b:ed:db:e5:77:c1:94:b6:3a:7b:c9:
24:82:e7:ed:9f:69:cd:1d:21:95:e1:0c:17:d7:67:
07:fb:6c:d7:86:cb:ee:bc:96:ae:fb:5a:45:d8:a0:
5c:79:77:b7:3e:27:06:ea:98:3f:4d:96:7d:d2:bf:
3b:39:b3:5c:a1:57:5f:2f:e8:56:40:e9:39:e4:63:
ca:94:e8:d1:5a:71:f4:ed:0a:56:42:27:a5:20:81:
0f:30:51:2f:c7:fe:14:10:da:e8:2e:9d:52:79:f8:
45:01:84:b5:17:c1:66:00:d5:36:d9:da:91:12:f8:
11:f2:b3:0b:70:7d:82:7c:bb:46:51:ac:23:c1:45:
47:55:c5:80:73:84:c8:63:4a:ec:fc:c1:83:35:ac:
5f:a4:79:88:8a:2d:77:ba:6c:4e:11:d1:19:8b:21:
70:7b:2e:81:a3:f9:27:bd:f1:d0:cd:5c:92:4e:9e:
b3:95:a0:2e:cc:f6:c0:7d:54:ee:ac:37:96:d4:48:
ac:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:9F:B4:A1:12:D6:06:A2:D8:F9:53:C8:C8:0E:08:47:15:89:19:11
X509v3 Authority Key Identifier:
keyid:9B:E1:FB:19:43:83:90:E5:17:08:18:EA:FA:F0:0B:B3:23:A0:0C:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9138B7F/6CDE8998FF4111EB82B31F5DC4F9AE02/m-H7GUODkOUXCBjq-vALsyOgDEg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-H7GUODkOUXCBjq-vALsyOgDEg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138B7F/6CDE8998FF4111EB82B31F5DC4F9AE02/34A920427D5811EDBB4E9F6CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:1740:1000::/48
2401:1740:3000::/48
Signature Algorithm: sha256WithRSAEncryption
07:af:8a:e3:6d:a0:9b:69:8b:6f:44:96:83:8a:82:f2:a4:62:
df:73:80:52:a5:5a:ad:dc:0a:9a:01:e9:6e:d7:f5:eb:77:0f:
f0:d4:76:3b:ac:7e:06:a4:be:0c:17:67:cf:6b:84:4b:63:18:
a1:77:b3:77:34:51:02:63:62:15:b0:92:41:3a:3d:fd:53:85:
10:6a:6d:f7:93:aa:84:96:7e:58:a4:de:2b:1d:22:08:43:97:
c5:e7:a6:c9:34:8e:c0:ea:83:12:85:ba:03:b6:b9:4a:26:cb:
0a:92:99:c4:d9:47:5f:9f:1a:00:2a:ce:fb:e4:2b:0e:c4:3b:
b6:7b:d2:5e:e9:da:6f:2f:7f:61:9e:d1:e8:75:b9:fc:32:ca:
78:b9:a0:8d:7f:72:3e:a2:61:50:8f:6d:18:b9:86:ce:4d:28:
9e:d8:fd:82:71:a7:9e:57:11:a2:31:20:35:53:bf:ba:52:51:
5e:0c:c8:7c:2d:2d:5e:58:ba:28:b1:bd:1f:6e:4d:e9:c5:ff:
22:64:d5:ee:99:4b:d8:ba:4e:3e:88:63:1a:10:57:4b:44:1c:
6b:ef:c0:db:14:0d:87:d8:12:34:97:c1:ee:28:8c:d1:af:ef:
f3:cb:85:ac:82:f1:a3:2c:ea:41:c0:2b:33:36:a8:3e:93:98:
02:a1:61:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:54 2024 by rpki-client on console-ams.rpki-client.org