Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3CDE/6CBEE262611C11E8B2044947C4F9AE02/C246CE40416811ECB6B11742C4F9AE02.roa
File: C246CE40416811ECB6B11742C4F9AE02.roa (raw, json)
Hash identifier: kX/yNw08peAWOYV9ovPTFxsN3J5OPCueK7g4OUFYyUE=
Subject key identifier: 8A:FF:46:E1:D5:A7:76:4E:B0:F6:04:44:69:DF:2E:3C:DE:44:8F:7A
Certificate issuer: /CN=A91E3CDE/serialNumber=7828171AB1FEA8B98A46F98DE2263CF77D6C3B28
Certificate serial: 1175
Authority key identifier: 78:28:17:1A:B1:FE:A8:B9:8A:46:F9:8D:E2:26:3C:F7:7D:6C:3B:28
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eCgXGrH-qLmKRvmN4iY8931sOyg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3CDE/6CBEE262611C11E8B2044947C4F9AE02/C246CE40416811ECB6B11742C4F9AE02.roa
Signing time: Tue 01 Mar 2022 06:24:21 +0000
ROA not before: Tue 01 Mar 2022 06:24:21 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 142045
IP address blocks: 2407:d280:f000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4469 (0x1175)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3CDE/serialNumber=7828171AB1FEA8B98A46F98DE2263CF77D6C3B28
Validity
Not Before: Mar 1 06:24:21 2022 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=621dbc14-bdc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c8:cd:6d:c3:08:9d:ab:8c:1e:c6:26:4b:4b:
3e:e4:07:1c:02:55:e5:91:2a:c6:7c:9e:b5:9b:0f:
c2:96:43:e8:7e:6b:bf:c5:26:05:72:75:6d:ad:bb:
ab:88:2d:d2:4b:a8:c7:10:64:2d:85:a2:0e:22:af:
44:fb:7b:13:41:21:1a:60:e2:cc:21:b5:31:89:31:
6d:3a:51:c5:ee:1c:e5:2a:44:03:b5:28:b7:cd:cd:
d4:5b:ad:ca:c4:85:64:68:43:b1:a3:47:e2:8c:77:
92:86:cb:d5:3b:b0:75:b0:75:28:97:1c:91:ac:89:
d8:eb:e8:9c:17:76:f3:92:1e:88:28:b4:e7:53:6f:
6c:16:67:cb:40:0e:68:91:8c:f3:be:37:4f:8f:87:
be:e8:83:c5:f1:f1:cb:d8:6d:92:92:6e:3a:71:8e:
fe:7e:45:44:7e:c6:b4:0c:f9:7d:f1:61:7b:dc:53:
a5:54:40:19:c0:93:38:49:74:b5:b8:4c:e6:94:7a:
58:fb:61:8a:c7:f9:73:4b:be:e1:5c:00:a6:0e:20:
98:56:9c:12:69:31:d3:e5:b3:3a:48:1b:bd:e8:a6:
9d:e9:ea:7b:1d:7e:6d:8e:f9:e2:45:05:77:a1:39:
a2:02:c7:4d:17:11:cc:db:82:4c:6b:ed:cc:a0:7f:
a8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:FF:46:E1:D5:A7:76:4E:B0:F6:04:44:69:DF:2E:3C:DE:44:8F:7A
X509v3 Authority Key Identifier:
keyid:78:28:17:1A:B1:FE:A8:B9:8A:46:F9:8D:E2:26:3C:F7:7D:6C:3B:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3CDE/6CBEE262611C11E8B2044947C4F9AE02/eCgXGrH-qLmKRvmN4iY8931sOyg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eCgXGrH-qLmKRvmN4iY8931sOyg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3CDE/6CBEE262611C11E8B2044947C4F9AE02/C246CE40416811ECB6B11742C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:d280:f000::/36
Signature Algorithm: sha256WithRSAEncryption
32:84:69:52:52:63:12:66:9c:ec:c1:e6:d7:4b:ba:20:bd:11:
ee:40:ee:5b:21:57:5b:36:66:81:6e:ae:e7:f5:ff:d4:92:5e:
3c:85:66:4a:ee:a5:6c:27:8b:28:42:34:0d:bf:25:bc:92:8c:
dd:c9:4b:19:20:09:d5:58:ae:02:2b:be:1e:2d:af:ef:ae:7a:
6b:f6:4a:c2:48:fb:1a:72:7b:64:a5:4e:00:0a:d0:78:f5:63:
dc:86:e0:4f:c7:9d:37:9b:fd:d0:97:bb:c9:55:e8:82:d6:0e:
3f:20:4d:8c:1a:c6:4f:4a:65:16:4a:35:d9:53:9b:51:8d:54:
6a:40:7d:79:0c:87:49:3e:18:36:59:d5:f0:19:c3:69:11:da:
8c:56:d6:7b:e0:ca:ff:27:e3:01:35:9b:aa:b5:ca:34:1a:48:
cc:ef:5e:ce:4c:97:bf:9d:73:2d:85:c2:2c:61:95:dc:26:26:
9a:f2:a3:83:14:92:ae:a5:27:25:a6:dd:93:d2:01:fb:ae:c4:
ff:21:10:2f:c3:c5:d3:b6:1e:6c:90:ad:93:19:8b:b1:ab:90:
94:8b:4b:80:70:13:0f:13:b0:7c:0c:3f:1a:77:91:68:47:ea:
8b:14:1d:ef:85:ff:ca:ee:89:07:5d:1c:c7:e2:c1:48:80:d3:
5b:1e:7f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:11 2023 by rpki-client on console-fra.rpki-client.org