Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9138B7F/6CDE8998FF4111EB82B31F5DC4F9AE02/FFA18EB2918811EDA3426975C4F9AE02.roa
File: FFA18EB2918811EDA3426975C4F9AE02.roa (raw, json)
Hash identifier: k9eqhFZuwDLAVip2BDnMOKcqgkiuyGfDGYoD32jTBzg=
Subject key identifier: D8:BD:43:CA:4B:D4:22:12:E5:4C:19:74:CB:E3:BA:A5:95:EB:DE:D9
Certificate issuer: /CN=A9138B7F/serialNumber=9BE1FB19438390E5170818EAFAF00BB323A00C48
Certificate serial: 039E
Authority key identifier: 9B:E1:FB:19:43:83:90:E5:17:08:18:EA:FA:F0:0B:B3:23:A0:0C:48
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-H7GUODkOUXCBjq-vALsyOgDEg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9138B7F/6CDE8998FF4111EB82B31F5DC4F9AE02/FFA18EB2918811EDA3426975C4F9AE02.roa
Signing time: Wed 11 Jan 2023 08:21:51 +0000
ROA not before: Wed 11 Jan 2023 08:21:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 136600
IP address blocks: 2401:1740::/32 maxlen: 32
2401:1740::/40 maxlen: 40
2401:1740:100::/40 maxlen: 40
2401:1740:2000::/48 maxlen: 48
2401:1740:8000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 926 (0x39e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9138B7F/serialNumber=9BE1FB19438390E5170818EAFAF00BB323A00C48
Validity
Not Before: Jan 11 08:21:51 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63be719f-a731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d7:b9:6e:06:41:f3:eb:d1:1e:8d:80:98:69:
a8:32:a4:4b:5b:69:de:fd:98:78:65:81:d2:31:20:
34:c4:e0:bb:5a:53:29:77:da:e5:6e:34:12:d1:10:
e1:b0:f6:05:f6:e2:25:4b:fc:5b:16:70:7f:c2:49:
db:34:f5:09:b1:23:80:c4:da:8f:34:71:98:3a:2a:
52:d4:31:fe:94:f9:bb:51:4b:6e:07:7c:77:ef:19:
29:12:d7:e3:9b:8b:91:8c:e7:26:58:b0:d0:10:58:
e2:5f:63:ab:2d:85:14:2c:a9:48:85:ed:a9:3e:6f:
8e:8b:7e:96:eb:e5:ca:2a:ac:b1:0a:41:09:27:e9:
96:03:f5:90:be:86:bc:60:a3:ea:e6:a6:cf:f4:17:
4e:d4:03:90:91:76:cf:28:da:16:01:07:a7:c6:99:
19:49:a3:ac:1a:4f:2b:7a:04:6f:31:0f:77:34:00:
da:48:a8:dd:9f:e6:1d:9b:cd:4d:6f:61:f8:01:ce:
f4:80:67:75:58:2d:13:98:f8:cb:01:3b:d1:7d:74:
3b:e9:94:33:9c:0c:8b:ce:48:25:cc:d1:6a:ca:11:
3a:c5:ca:1a:ca:e6:cb:5e:9a:02:aa:8d:c8:2b:77:
8d:11:5b:38:f4:1c:be:e8:b3:b6:22:c9:e6:bb:51:
d9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:BD:43:CA:4B:D4:22:12:E5:4C:19:74:CB:E3:BA:A5:95:EB:DE:D9
X509v3 Authority Key Identifier:
keyid:9B:E1:FB:19:43:83:90:E5:17:08:18:EA:FA:F0:0B:B3:23:A0:0C:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9138B7F/6CDE8998FF4111EB82B31F5DC4F9AE02/m-H7GUODkOUXCBjq-vALsyOgDEg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-H7GUODkOUXCBjq-vALsyOgDEg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138B7F/6CDE8998FF4111EB82B31F5DC4F9AE02/FFA18EB2918811EDA3426975C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:1740::/32
Signature Algorithm: sha256WithRSAEncryption
8b:ee:09:76:45:b2:b0:0f:73:9e:26:00:00:a0:7a:5f:90:96:
81:e7:80:2c:c4:1e:fa:82:3f:b0:be:bf:83:b7:30:74:b0:89:
c2:e1:40:ec:61:74:15:5f:f9:55:cf:9b:4d:84:3b:7c:9a:aa:
76:30:43:d2:82:5f:da:02:32:9f:2b:00:a0:30:32:be:6e:a7:
be:99:4e:3e:4b:ea:72:76:00:8b:16:32:84:0c:2f:d1:9c:0e:
1a:1f:d5:fb:6e:6a:72:58:58:06:b3:91:76:f9:67:ff:b9:64:
c6:5b:47:bc:3f:24:df:17:47:05:69:61:b9:f1:9a:b8:92:cb:
a7:9f:a9:56:5a:02:5d:c5:6f:77:aa:e7:af:e5:54:cd:5c:dc:
10:3a:67:fa:08:92:48:b8:72:93:3d:9b:50:18:8f:25:37:0d:
e6:4c:2b:70:99:db:56:d7:31:0a:fb:51:13:c9:0e:09:42:8b:
db:21:aa:60:cc:69:aa:f5:00:85:9b:26:35:41:9a:44:a9:e0:
17:ec:e3:87:1b:a8:b9:e4:ec:2c:d8:02:d8:6c:32:e9:6e:af:
2e:c6:23:7c:54:f4:b9:90:43:75:a3:e3:00:30:bb:57:07:12:
fc:9b:92:02:1d:5f:2b:e7:98:25:51:2e:5d:f7:fd:c7:94:f8:
2a:27:8c:f7
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgICA54wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzhCN0YxMTAvBgNVBAUTKDlCRTFGQjE5NDM4MzkwRTUxNzA4MThFQUZBRjAwQkIz
MjNBMDBDNDgwHhcNMjMwMTExMDgyMTUxWhcNMjMwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02M2JlNzE5Zi1hNzMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxde5bgZB8+vRHo2AmGmoMqRLW2ne/Zh4ZYHSMSA0xOC7WlMpd9rlbjQS0RDh
sPYF9uIlS/xbFnB/wknbNPUJsSOAxNqPNHGYOipS1DH+lPm7UUtuB3x37xkpEtfj
m4uRjOcmWLDQEFjiX2OrLYUULKlIhe2pPm+Oi36W6+XKKqyxCkEJJ+mWA/WQvoa8
YKPq5qbP9BdO1AOQkXbPKNoWAQenxpkZSaOsGk8regRvMQ93NADaSKjdn+Ydm81N
b2H4Ac70gGd1WC0TmPjLATvRfXQ76ZQznAyLzkglzNFqyhE6xcoayubLXpoCqo3I
K3eNEVs49By+6LO2Isnmu1HZCwIDAQABo4ICljCCApIwHQYDVR0OBBYEFNi9Q8pL
1CIS5UwZdMvjuqWV697ZMB8GA1UdIwQYMBaAFJvh+xlDg5DlFwgY6vrwC7MjoAxI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEI3Ri82Q0RFODk5OEZG
NDExMUVCODJCMzFGNURDNEY5QUUwMi9tLUg3R1VPRGtPVVhDQmpxLXZBTHN5T2dE
RWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL20tSDdHVU9Ea09VWENCanEtdkFMc3lPZ0RFZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzhCN0YvNkNERTg5OThGRjQxMTFFQjgyQjMxRjVEQzRGOUFFMDIvRkZBMThFQjI5
MTg4MTFFREEzNDI2OTc1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAkARdAMA0GCSqGSIb3DQEBCwUAA4IBAQCL7gl2RbKwD3Oe
JgAAoHpfkJaB54AsxB76gj+wvr+DtzB0sInC4UDsYXQVX/lVz5tNhDt8mqp2MEPS
gl/aAjKfKwCgMDK+bqe+mU4+S+pydgCLFjKEDC/RnA4aH9X7bmpyWFgGs5F2+Wf/
uWTGW0e8PyTfF0cFaWG58Zq4ksunn6lWWgJdxW93quev5VTNXNwQOmf6CJJIuHKT
PZtQGI8lNw3mTCtwmdtW1zEK+1ETyQ4JQovbIapgzGmq9QCFmyY1QZpEqeAX7OOH
G6i55Ows2ALYbDLpbq8uxiN8VPS5kEN1o+MAMLtXBxL8m5ICHV8r55glUS5d9/3H
lPgqJ4z3
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:54 2024 by rpki-client on console-ams.rpki-client.org