Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F09F7/A9BB8CFCF73811E9B366E435C4F9AE02/7F509D78C5E011EAA6438F2EC4F9AE02.roa
File: 7F509D78C5E011EAA6438F2EC4F9AE02.roa (raw, json)
Hash identifier: f13BmqSDgEmQ+QghuyOri0H9NquGGwQKGLuop02zNpM=
Subject key identifier: 48:E1:DD:6B:E8:66:A2:63:2C:C3:88:5F:46:69:AF:E0:F2:7D:1B:49
Certificate issuer: /CN=A91F09F7/serialNumber=C57B47C94068F551119400F8D9BE19F91D982EA1
Certificate serial: 0993
Authority key identifier: C5:7B:47:C9:40:68:F5:51:11:94:00:F8:D9:BE:19:F9:1D:98:2E:A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xXtHyUBo9VERlAD42b4Z-R2YLqE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F09F7/A9BB8CFCF73811E9B366E435C4F9AE02/7F509D78C5E011EAA6438F2EC4F9AE02.roa
Signing time: Mon 23 May 2022 20:09:35 +0000
ROA not before: Mon 23 May 2022 20:09:35 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 48337
IP address blocks: 2400:8905::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2451 (0x993)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F09F7/serialNumber=C57B47C94068F551119400F8D9BE19F91D982EA1
Validity
Not Before: May 23 20:09:35 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=628be9ff-e091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:6c:c2:ec:7d:db:3b:d1:3e:33:ff:26:51:8e:
29:f9:22:02:7f:e8:57:8c:da:1e:ef:c2:bc:8f:f7:
cb:62:18:14:0d:75:4a:90:dc:d8:c0:50:b1:64:42:
3c:2c:19:b4:83:7e:48:f5:c6:5f:3b:9e:71:59:f3:
a0:ce:6e:f3:6b:aa:9c:9a:9c:de:ca:df:e1:d1:33:
e5:fe:57:c3:11:d3:a6:3a:a4:88:40:f9:1e:dd:b1:
1d:3f:41:5b:1d:2e:59:5d:b9:32:a5:75:64:ef:69:
6d:b8:ca:7a:50:0e:c9:38:6e:1f:fc:f0:59:05:b9:
60:ec:29:41:15:71:8f:c6:4d:02:6c:98:ea:2f:91:
a1:ab:b6:d6:ca:89:e9:7e:62:69:1f:11:a3:a4:b7:
5c:0b:cc:fa:52:71:7b:be:41:0c:78:5c:ee:b6:cc:
2c:c6:8e:00:6b:1b:96:5d:fe:48:b4:c0:f2:7f:71:
09:83:8a:6f:37:ad:6f:96:c5:a7:de:7c:ed:c0:51:
f2:5e:44:c8:b3:66:b2:48:05:1e:74:80:a5:12:f7:
66:89:3e:c4:e2:a1:f2:a2:e7:75:1b:f0:f2:32:97:
be:1e:aa:59:28:bc:de:52:12:09:fd:54:99:c9:0e:
25:55:ee:35:24:bc:b0:32:46:78:cd:67:dd:42:d4:
ce:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E1:DD:6B:E8:66:A2:63:2C:C3:88:5F:46:69:AF:E0:F2:7D:1B:49
X509v3 Authority Key Identifier:
keyid:C5:7B:47:C9:40:68:F5:51:11:94:00:F8:D9:BE:19:F9:1D:98:2E:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F09F7/A9BB8CFCF73811E9B366E435C4F9AE02/xXtHyUBo9VERlAD42b4Z-R2YLqE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xXtHyUBo9VERlAD42b4Z-R2YLqE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F09F7/A9BB8CFCF73811E9B366E435C4F9AE02/7F509D78C5E011EAA6438F2EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:8905::/32
Signature Algorithm: sha256WithRSAEncryption
7a:e9:d6:21:6b:0f:2b:ab:59:c0:d4:7f:e3:4f:be:2e:e4:7b:
f9:1e:6e:78:1a:c3:44:ec:ba:a4:20:66:1e:e3:e8:f7:20:11:
81:e5:73:df:5f:f9:ca:15:44:f2:3b:ec:46:40:a3:25:50:e4:
09:d0:65:b9:3f:bb:ec:44:18:32:77:70:23:51:76:28:c6:0d:
53:ea:02:bb:1c:a9:87:69:38:1c:d3:e8:a4:19:52:e0:8f:a1:
a6:aa:3b:cd:41:2b:d8:6b:40:f6:b7:c2:2e:5e:63:6b:b1:18:
8b:88:86:18:6d:14:6a:e0:f3:78:0f:30:bb:75:5a:97:88:6d:
80:5e:34:9a:bc:75:3b:ad:25:cd:8e:5a:12:d2:72:38:0a:e6:
88:34:c8:43:5a:7f:48:58:1a:97:16:d3:2a:30:1f:a1:15:e6:
d5:e0:7c:67:0c:4a:17:79:cc:58:4d:15:16:71:ee:ee:7c:07:
ee:f8:5c:df:98:82:ae:d9:48:71:69:5a:38:dd:40:4a:aa:d6:
10:a5:17:e7:58:1c:15:c0:60:06:3c:59:b7:5b:9e:29:32:7d:
0a:49:46:f7:83:9e:c8:da:ef:84:20:4b:ec:75:05:04:8b:32:
53:7c:31:a8:5c:a8:f9:bf:33:9f:a3:51:ab:03:32:7a:c7:65:
f0:d3:aa:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:47 2024 by rpki-client on console-fra.rpki-client.org