Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9111318/CFDD3DFA1D9111E298E746F408B02CD2/32739F4EFC2211EC81007415C4F9AE02.roa
File: 32739F4EFC2211EC81007415C4F9AE02.roa (raw, json)
Hash identifier: XorDf/5HB97XRLxKwMq0mPMXDAqZhA3cQ9v6mndTi80=
Subject key identifier: 2C:BE:AE:AA:F0:E5:B2:FB:EC:8B:3D:F9:AD:38:90:4F:3E:FF:EB:77
Certificate issuer: /CN=A9111318/serialNumber=EC730E73C0E8A1CEEAAA98274384B4FDCBFC9ABA
Certificate serial: 31F7
Authority key identifier: EC:73:0E:73:C0:E8:A1:CE:EA:AA:98:27:43:84:B4:FD:CB:FC:9A:BA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7HMOc8Dooc7qqpgnQ4S0_cv8mro.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9111318/CFDD3DFA1D9111E298E746F408B02CD2/32739F4EFC2211EC81007415C4F9AE02.roa
Signing time: Tue 05 Jul 2022 05:20:35 +0000
ROA not before: Tue 05 Jul 2022 05:20:35 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 134227
IP address blocks: 140.200.252.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12791 (0x31f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9111318/serialNumber=EC730E73C0E8A1CEEAAA98274384B4FDCBFC9ABA
Validity
Not Before: Jul 5 05:20:35 2022 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=62c3ca23-a154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3f:1b:b8:69:af:6e:eb:a1:7e:aa:5b:89:9a:
6b:86:40:07:d5:f9:fc:a2:dc:1c:ec:c0:1a:ac:5c:
d7:3e:e8:4f:d2:b1:02:76:8b:fe:2c:d1:55:07:c8:
08:a0:e1:19:f5:16:e2:fc:9a:93:83:e0:40:70:f4:
ad:62:69:58:2d:77:94:b8:c4:2c:d0:4a:8f:36:a5:
36:14:d9:49:e2:3a:00:db:2b:dc:87:e1:51:55:3c:
0a:88:4e:e8:ba:bf:50:92:fc:7a:e8:0f:33:ab:db:
a9:78:76:27:fb:f2:05:77:5f:14:f8:f5:42:3b:b2:
f5:8a:a2:e1:9d:d5:57:03:49:81:54:7b:10:09:5e:
87:20:17:05:dc:51:a7:70:cc:b3:41:03:49:10:de:
c0:d4:00:67:28:e4:1d:1b:c8:a2:d9:d9:63:41:e0:
ba:38:f6:aa:69:f3:f5:23:fb:bd:d7:90:a0:5d:09:
fa:35:a2:9b:c9:8c:f2:29:77:5d:63:c9:c4:80:3f:
dd:04:05:a3:87:69:8d:c5:80:a6:1f:78:07:79:d4:
90:56:c0:f5:b8:0f:23:a5:c1:92:8b:fd:c8:04:12:
08:c7:8b:26:9e:1e:4b:48:2e:c4:41:16:27:d3:af:
88:1c:6e:28:cc:41:7a:1e:70:9b:c9:8e:12:42:ff:
2b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:BE:AE:AA:F0:E5:B2:FB:EC:8B:3D:F9:AD:38:90:4F:3E:FF:EB:77
X509v3 Authority Key Identifier:
keyid:EC:73:0E:73:C0:E8:A1:CE:EA:AA:98:27:43:84:B4:FD:CB:FC:9A:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9111318/CFDD3DFA1D9111E298E746F408B02CD2/7HMOc8Dooc7qqpgnQ4S0_cv8mro.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7HMOc8Dooc7qqpgnQ4S0_cv8mro.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111318/CFDD3DFA1D9111E298E746F408B02CD2/32739F4EFC2211EC81007415C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
140.200.252.0/22
Signature Algorithm: sha256WithRSAEncryption
50:a2:9c:9c:a3:47:9d:3d:38:5d:07:55:38:49:ec:49:70:0a:
5f:e2:37:24:2b:8d:19:2e:f0:36:b0:40:c7:26:9c:b0:c0:89:
a3:c5:34:5b:87:3d:cd:e1:9f:7b:56:b4:e9:6a:55:c7:3b:57:
67:aa:1f:70:a9:95:a9:8d:2f:d4:d8:db:5d:33:83:7a:9f:29:
ec:ae:2d:3c:3c:b7:a1:8b:0f:cf:e4:ef:8e:73:1d:89:83:98:
78:8d:c3:9c:a6:46:60:b6:1a:91:73:45:ee:de:65:d9:2a:c9:
c2:40:94:6a:67:f3:87:71:e1:f3:6f:43:fb:4a:f9:56:9e:b5:
b1:c3:97:cf:f5:35:db:cc:11:aa:22:18:60:ec:f6:64:95:4d:
59:f1:df:42:20:b3:4d:dd:e7:19:68:94:4e:4e:23:10:e1:b9:
47:3d:7c:4d:24:a2:a2:36:3d:41:3d:b3:71:e0:36:5d:fa:74:
70:b0:ec:00:34:0a:22:3c:b2:0c:de:1a:08:d8:af:d7:22:bd:
4c:9c:58:66:14:99:88:7b:3a:8b:ea:dd:cf:fe:df:c9:23:9c:
f9:9f:d2:bd:3e:2f:e1:56:f2:00:0d:d2:9a:73:81:c2:63:d7:
87:09:bf:e1:44:e4:fe:ea:c4:e9:3a:b7:17:29:90:b3:e2:3e:
62:c0:10:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:35 2023 by rpki-client on console-fra.rpki-client.org