Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9138B7F/6CDE8998FF4111EB82B31F5DC4F9AE02/FEA7596A918811EDA3426975C4F9AE02.roa
File: FEA7596A918811EDA3426975C4F9AE02.roa (raw, json)
Hash identifier: qYXii47P/tB+Vn5eZJF6l3cK9gON2sIkKeLTkAbBel8=
Subject key identifier: 12:27:D3:56:7B:9D:6B:80:57:3F:70:FF:EC:FC:17:50:A4:47:56:E4
Certificate issuer: /CN=A9138B7F/serialNumber=9BE1FB19438390E5170818EAFAF00BB323A00C48
Certificate serial: 03A5
Authority key identifier: 9B:E1:FB:19:43:83:90:E5:17:08:18:EA:FA:F0:0B:B3:23:A0:0C:48
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-H7GUODkOUXCBjq-vALsyOgDEg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9138B7F/6CDE8998FF4111EB82B31F5DC4F9AE02/FEA7596A918811EDA3426975C4F9AE02.roa
Signing time: Wed 11 Jan 2023 12:21:53 +0000
ROA not before: Wed 11 Jan 2023 12:21:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 134176
IP address blocks: 2401:1740:1000::/48 maxlen: 48
2401:1740:3000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 933 (0x3a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9138B7F/serialNumber=9BE1FB19438390E5170818EAFAF00BB323A00C48
Validity
Not Before: Jan 11 12:21:53 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63bea9e0-42f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:04:72:b7:46:d7:f3:b7:16:89:28:89:e9:89:
e5:e2:a8:b5:8a:e0:02:ed:16:4b:58:78:05:98:f5:
3b:5b:3c:7c:66:9e:84:3a:4c:b1:8d:73:32:08:31:
b9:7d:f6:ce:f8:88:17:7a:ef:43:23:45:ad:9c:e5:
1e:cc:89:77:98:91:01:12:d2:de:ba:b4:45:e4:80:
6b:98:07:0d:8c:4d:80:60:6d:8c:df:e3:b0:ca:3b:
c5:81:4e:37:02:70:3d:39:04:b0:dc:91:59:34:99:
98:22:a8:41:9a:b8:ff:96:13:7c:95:06:a8:87:32:
16:f2:ef:65:d3:32:3a:dd:b6:a2:cf:aa:e4:4a:bb:
22:ef:1b:ec:62:9b:3b:e5:b4:7a:af:5a:cf:35:bc:
22:ba:13:60:19:de:34:b4:b1:c4:f3:6c:df:10:9b:
8a:42:d5:18:1d:21:92:92:15:a8:aa:68:d6:35:8d:
23:a2:51:fa:de:1c:8e:42:88:b6:f3:76:7e:73:41:
76:29:1f:7d:52:19:08:cc:8a:98:99:a3:3e:3e:fc:
10:1a:5d:91:f9:15:9f:62:29:9f:cc:34:cd:cd:9f:
80:0f:2d:3e:cf:9a:08:1c:90:93:31:79:3a:c6:a0:
8d:12:f6:65:8f:63:b8:7d:74:c5:ea:6f:66:9c:4c:
c4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:27:D3:56:7B:9D:6B:80:57:3F:70:FF:EC:FC:17:50:A4:47:56:E4
X509v3 Authority Key Identifier:
keyid:9B:E1:FB:19:43:83:90:E5:17:08:18:EA:FA:F0:0B:B3:23:A0:0C:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9138B7F/6CDE8998FF4111EB82B31F5DC4F9AE02/m-H7GUODkOUXCBjq-vALsyOgDEg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-H7GUODkOUXCBjq-vALsyOgDEg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138B7F/6CDE8998FF4111EB82B31F5DC4F9AE02/FEA7596A918811EDA3426975C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:1740:1000::/48
2401:1740:3000::/48
Signature Algorithm: sha256WithRSAEncryption
48:b9:9d:13:b6:b2:7c:c1:5b:ba:48:58:3e:23:0b:bd:a7:15:
5f:98:bf:48:4f:e8:0f:f9:4c:52:5e:01:db:9b:6c:e5:b7:33:
fc:1b:dc:8d:71:e3:fb:62:1b:6b:fa:7b:0a:9e:28:61:b0:21:
ec:6d:ac:c1:76:3f:58:be:ad:6e:85:9a:87:00:56:19:12:19:
8f:50:66:63:17:1c:89:11:b7:f1:75:f0:4e:5a:47:81:fe:bc:
9d:7d:41:8b:bf:42:6f:ee:3b:0d:59:81:ae:43:71:eb:10:6c:
36:62:fe:6a:25:16:7e:fb:f6:cc:b4:fc:42:47:c4:4a:e7:52:
cb:ac:4c:4c:ef:9f:c5:eb:f3:bc:ba:c6:28:58:e8:da:2e:15:
cd:0a:c4:80:4f:e3:4d:cb:d8:4c:fe:5e:9a:30:9f:f7:fc:a7:
e9:cd:26:4c:11:ff:b6:36:96:03:52:4a:37:a9:59:ec:f2:c0:
3a:82:8d:fe:22:ba:b5:df:9a:ab:f2:76:8e:e9:6b:61:26:45:
66:20:f8:f5:13:3e:f7:a3:02:7c:d8:76:f7:a4:06:58:f8:c1:
0f:6d:d2:eb:2f:fe:f2:54:44:05:4e:a5:1f:34:91:51:00:19:
21:3d:3f:9a:65:ae:19:cd:d5:d3:35:27:4b:59:f7:e4:64:b3:
f2:18:6a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:54 2024 by rpki-client on console-ams.rpki-client.org