Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9138B7F/6CDE8998FF4111EB82B31F5DC4F9AE02/FABB59F8FF3111EC83D99C6AC4F9AE02.roa
File: FABB59F8FF3111EC83D99C6AC4F9AE02.roa (raw, json)
Hash identifier: CmHyYrp6z9B+dwOfRu8xPOuR23L71VpAO38J2xl51R4=
Subject key identifier: 60:D4:E0:0D:97:DC:53:44:55:38:0D:C8:40:A5:F6:42:AB:40:A1:5B
Certificate issuer: /CN=A9138B7F/serialNumber=9BE1FB19438390E5170818EAFAF00BB323A00C48
Certificate serial: 02B4
Authority key identifier: 9B:E1:FB:19:43:83:90:E5:17:08:18:EA:FA:F0:0B:B3:23:A0:0C:48
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-H7GUODkOUXCBjq-vALsyOgDEg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9138B7F/6CDE8998FF4111EB82B31F5DC4F9AE02/FABB59F8FF3111EC83D99C6AC4F9AE02.roa
Signing time: Sat 09 Jul 2022 02:51:07 +0000
ROA not before: Sat 09 Jul 2022 02:51:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 137951
IP address blocks: 2401:1740:4000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 692 (0x2b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9138B7F/serialNumber=9BE1FB19438390E5170818EAFAF00BB323A00C48
Validity
Not Before: Jul 9 02:51:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62c8ed1b-ab1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c7:b7:51:43:c4:61:28:ae:83:f5:e7:62:68:
b8:30:81:13:48:5f:a0:de:3c:9e:03:a5:0d:9e:64:
55:1a:47:0d:7e:c8:9b:7d:b8:53:1c:ab:e2:7a:6a:
55:3c:ea:bb:78:c2:ff:6d:bd:51:2c:39:2a:72:65:
d7:48:dc:ee:fe:1c:83:b7:a6:7b:76:60:76:20:74:
3e:d2:99:2e:70:24:8a:45:dd:37:f8:09:04:e2:6c:
ae:9f:a3:43:28:8c:c0:3e:73:db:e2:ce:ae:fa:ca:
8b:7b:c9:1b:d0:06:6f:6d:89:d4:0c:77:7f:98:76:
a3:4e:72:f6:69:2e:0b:23:92:73:b6:04:cb:07:8e:
fa:7c:4b:a3:de:c2:65:85:48:3b:f6:cb:c4:c2:50:
ef:83:eb:05:eb:f4:37:24:9c:ad:d9:eb:7e:7e:d2:
84:cb:52:e4:eb:96:cd:47:73:16:88:00:c6:c6:62:
f5:87:b1:d1:58:74:57:fc:43:e4:c5:00:85:0d:87:
30:d2:25:0c:2a:31:2e:94:d5:c8:5e:8d:8e:ed:38:
4c:05:a6:63:66:c4:ec:09:8e:29:f4:2e:fe:04:84:
95:81:64:74:1f:bd:c7:52:43:10:6b:31:be:76:23:
48:08:ea:2f:b1:15:80:6c:aa:5a:a3:02:40:2b:2a:
19:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:D4:E0:0D:97:DC:53:44:55:38:0D:C8:40:A5:F6:42:AB:40:A1:5B
X509v3 Authority Key Identifier:
keyid:9B:E1:FB:19:43:83:90:E5:17:08:18:EA:FA:F0:0B:B3:23:A0:0C:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9138B7F/6CDE8998FF4111EB82B31F5DC4F9AE02/m-H7GUODkOUXCBjq-vALsyOgDEg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-H7GUODkOUXCBjq-vALsyOgDEg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138B7F/6CDE8998FF4111EB82B31F5DC4F9AE02/FABB59F8FF3111EC83D99C6AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:1740:4000::/48
Signature Algorithm: sha256WithRSAEncryption
2c:e1:54:49:13:7d:fd:f7:d4:53:e2:63:0f:d1:d1:90:96:08:
f7:ae:83:54:d5:d6:0f:da:3e:28:82:d3:d4:ae:30:e5:b4:c1:
49:bd:b0:0d:31:6f:18:2a:b9:70:ce:68:32:8b:99:b5:86:66:
9a:2a:0a:cc:ee:a2:bc:a6:91:c7:9c:2f:01:2e:14:6d:12:3a:
72:07:98:7e:7b:fb:3c:83:b2:0a:19:fc:d9:e9:10:71:77:33:
97:82:82:c0:d1:bf:84:9e:fd:45:d1:52:d4:8c:3a:3f:9e:61:
c0:05:de:50:b6:9e:35:7a:35:74:e8:0a:de:b4:ae:c4:d4:77:
2a:cc:53:5c:59:88:54:b5:6e:ea:11:50:1d:a6:47:9b:17:dd:
c9:d1:4d:79:23:39:b4:3e:a5:b3:4a:72:ff:35:cd:b8:2c:05:
d3:a7:4c:b2:4f:c2:75:c4:5e:55:22:a3:68:ab:30:ea:a0:82:
2b:34:d8:5a:07:ea:64:0a:ac:ee:12:a0:73:9f:94:ed:21:60:
a7:39:64:5d:ca:37:04:01:c9:5a:a4:13:09:86:0e:12:b2:f5:
ce:eb:9a:6c:61:35:ad:d3:75:4e:89:c3:3c:f8:02:76:28:86:
cc:43:c8:49:7c:87:10:73:8d:de:be:94:d8:57:4a:9e:3e:9c:
04:15:00:02
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgICArQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzhCN0YxMTAvBgNVBAUTKDlCRTFGQjE5NDM4MzkwRTUxNzA4MThFQUZBRjAwQkIz
MjNBMDBDNDgwHhcNMjIwNzA5MDI1MTA3WhcNMjMwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MmM4ZWQxYi1hYjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwce3UUPEYSiug/XnYmi4MIETSF+g3jyeA6UNnmRVGkcNfsibfbhTHKviempV
POq7eML/bb1RLDkqcmXXSNzu/hyDt6Z7dmB2IHQ+0pkucCSKRd03+AkE4myun6ND
KIzAPnPb4s6u+sqLe8kb0AZvbYnUDHd/mHajTnL2aS4LI5JztgTLB476fEuj3sJl
hUg79svEwlDvg+sF6/Q3JJyt2et+ftKEy1Lk65bNR3MWiADGxmL1h7HRWHRX/EPk
xQCFDYcw0iUMKjEulNXIXo2O7ThMBaZjZsTsCY4p9C7+BISVgWR0H73HUkMQazG+
diNICOovsRWAbKpaowJAKyoZfwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFGDU4A2X
3FNEVTgNyECl9kKrQKFbMB8GA1UdIwQYMBaAFJvh+xlDg5DlFwgY6vrwC7MjoAxI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEI3Ri82Q0RFODk5OEZG
NDExMUVCODJCMzFGNURDNEY5QUUwMi9tLUg3R1VPRGtPVVhDQmpxLXZBTHN5T2dE
RWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL20tSDdHVU9Ea09VWENCanEtdkFMc3lPZ0RFZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzhCN0YvNkNERTg5OThGRjQxMTFFQjgyQjMxRjVEQzRGOUFFMDIvRkFCQjU5RjhG
RjMxMTFFQzgzRDk5QzZBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwAkARdAQAAwDQYJKoZIhvcNAQELBQADggEBACzhVEkTff33
1FPiYw/R0ZCWCPeug1TV1g/aPiiC09SuMOW0wUm9sA0xbxgquXDOaDKLmbWGZpoq
CszuorymkcecLwEuFG0SOnIHmH57+zyDsgoZ/NnpEHF3M5eCgsDRv4Se/UXRUtSM
Oj+eYcAF3lC2njV6NXToCt60rsTUdyrMU1xZiFS1buoRUB2mR5sX3cnRTXkjObQ+
pbNKcv81zbgsBdOnTLJPwnXEXlUio2irMOqggis02FoH6mQKrO4SoHOflO0hYKc5
ZF3KNwQByVqkEwmGDhKy9c7rmmxhNa3TdU6Jwzz4AnYohsxDyEl8hxBzjd6+lNhX
Sp4+nAQVAAI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:02 2024 by rpki-client on console-fra.rpki-client.org