Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9138B7F/6CDE8998FF4111EB82B31F5DC4F9AE02/BD370E868CF011ED94DBDA18C4F9AE02.roa
File: BD370E868CF011ED94DBDA18C4F9AE02.roa (raw, json)
Hash identifier: WRARCP5WaPBW6Q4cUjF9SJnusJmEZ0wbsqEwjhzAyDk=
Subject key identifier: 18:CE:D9:A8:99:25:B2:1F:1F:6D:AC:8F:92:66:E4:1C:DB:6A:F8:FC
Certificate issuer: /CN=A9138B7F/serialNumber=9BE1FB19438390E5170818EAFAF00BB323A00C48
Certificate serial: 0395
Authority key identifier: 9B:E1:FB:19:43:83:90:E5:17:08:18:EA:FA:F0:0B:B3:23:A0:0C:48
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-H7GUODkOUXCBjq-vALsyOgDEg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9138B7F/6CDE8998FF4111EB82B31F5DC4F9AE02/BD370E868CF011ED94DBDA18C4F9AE02.roa
Signing time: Thu 05 Jan 2023 12:01:52 +0000
ROA not before: Thu 05 Jan 2023 12:01:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9400
IP address blocks: 2401:1740::/40 maxlen: 40
2401:1740:100::/40 maxlen: 40
2401:1740:1000::/48 maxlen: 48
2401:1740:3000::/48 maxlen: 48
2401:1740:4000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 917 (0x395)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9138B7F/serialNumber=9BE1FB19438390E5170818EAFAF00BB323A00C48
Validity
Not Before: Jan 5 12:01:51 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63b6bc2f-c306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:58:8b:22:45:44:fb:0a:00:9c:bd:34:8e:00:
c0:09:38:2f:50:dd:8c:67:d8:32:f9:3d:b7:46:71:
5e:99:84:ff:e9:4b:f2:32:4c:4f:84:2b:22:36:cc:
67:49:46:20:0f:7e:42:47:c8:b8:a4:30:69:8b:47:
67:1b:37:14:0e:81:7d:82:91:25:35:ae:1b:b8:b0:
bd:62:41:c3:bb:92:7a:a8:84:ba:81:24:1e:8e:4c:
0f:5b:75:3c:1a:08:7c:52:7f:92:49:b9:7a:ac:ce:
87:19:eb:47:5f:6d:ff:5c:a4:96:0a:ff:3b:22:b7:
f1:9b:51:0b:de:b4:42:c4:b7:74:b4:2c:8b:f3:23:
6d:33:3b:2b:fd:1a:5f:77:b2:9c:0a:5d:e4:5f:42:
58:42:5f:58:2f:c9:72:c3:75:67:0f:95:5c:1b:fd:
4d:f7:3b:e5:2b:80:25:8c:b7:79:0a:9f:07:50:8a:
94:ee:a4:43:24:a3:c9:eb:a6:2c:7f:3d:d1:9b:ed:
f1:27:63:03:0e:dd:79:aa:53:6f:28:bb:9c:57:07:
32:2b:88:76:61:ac:ea:ea:1a:87:b9:63:94:bc:c2:
67:40:60:a1:ae:5b:5f:23:af:4d:5f:a4:7f:83:83:
04:63:94:ec:48:20:db:05:48:fa:34:0d:34:a8:21:
d6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:CE:D9:A8:99:25:B2:1F:1F:6D:AC:8F:92:66:E4:1C:DB:6A:F8:FC
X509v3 Authority Key Identifier:
keyid:9B:E1:FB:19:43:83:90:E5:17:08:18:EA:FA:F0:0B:B3:23:A0:0C:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9138B7F/6CDE8998FF4111EB82B31F5DC4F9AE02/m-H7GUODkOUXCBjq-vALsyOgDEg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-H7GUODkOUXCBjq-vALsyOgDEg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138B7F/6CDE8998FF4111EB82B31F5DC4F9AE02/BD370E868CF011ED94DBDA18C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:1740::/39
2401:1740:1000::/48
2401:1740:3000::/48
2401:1740:4000::/48
Signature Algorithm: sha256WithRSAEncryption
02:de:1c:2d:2d:c5:f3:f4:08:ac:dc:a7:3d:48:06:73:0a:26:
27:54:43:3a:45:e3:72:10:01:2d:2a:62:77:0b:c4:8c:cc:dd:
4f:cb:c9:5f:e0:1a:fb:55:85:0e:6f:38:f6:9b:1d:0a:7f:fe:
30:9e:53:e5:80:85:ae:a4:b8:33:9d:8b:59:74:99:0d:6a:2d:
e6:87:a8:ee:3f:22:ac:f6:58:ef:de:9f:27:40:29:ad:99:36:
48:a2:b3:3a:62:e5:2f:1b:9b:9a:69:ea:c0:f3:a4:e6:cd:49:
10:92:0e:da:50:3e:51:54:4e:a9:eb:15:27:96:9a:d9:d3:35:
0b:9e:4e:ea:48:03:6a:85:1e:4b:f5:c8:82:d1:b6:f5:44:fe:
a4:30:b6:e9:27:c1:32:ab:0e:59:01:75:07:ba:b9:f5:c2:35:
89:dc:e8:4d:6e:8c:25:ba:a5:fa:91:7b:be:a1:ea:bb:41:b1:
d3:ed:a5:6d:f6:db:f7:2d:cd:6f:09:9f:a7:d1:73:f9:05:34:
ed:6a:42:b9:51:c5:04:30:df:79:87:30:32:4d:f4:48:53:e3:
2f:e4:2c:f2:35:1f:90:39:1d:6a:55:0b:df:de:35:f6:26:48:
ca:e3:03:77:21:b3:c2:60:2d:f7:0f:f5:0f:c5:9d:10:e5:6a:
84:a0:e1:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:54 2024 by rpki-client on console-ams.rpki-client.org