Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B256/3188E72218A511EB8D422172C4F9AE02/5B53CD08169011EC8DAD9A67C4F9AE02.roa
File: 5B53CD08169011EC8DAD9A67C4F9AE02.roa (raw, json)
Hash identifier: APBvOZv5Q9QHA+yHfI8MZaSO3AO8BwlwIirkKJNeY4M=
Subject key identifier: 68:9A:B5:0B:73:56:F3:B5:89:37:3F:A4:3B:8E:93:AF:B9:96:DF:30
Certificate issuer: /CN=A912B256/serialNumber=917E5C8E933CBB17553DE54A1119D1DE917CFD3A
Certificate serial: 0584
Authority key identifier: 91:7E:5C:8E:93:3C:BB:17:55:3D:E5:4A:11:19:D1:DE:91:7C:FD:3A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kX5cjpM8uxdVPeVKERnR3pF8_To.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B256/3188E72218A511EB8D422172C4F9AE02/5B53CD08169011EC8DAD9A67C4F9AE02.roa
Signing time: Thu 13 Oct 2022 00:29:50 +0000
ROA not before: Thu 13 Oct 2022 00:29:50 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 9792
IP address blocks: 203.1.240.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1412 (0x584)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B256/serialNumber=917E5C8E933CBB17553DE54A1119D1DE917CFD3A
Validity
Not Before: Oct 13 00:29:50 2022 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=63475bfe-fc50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:17:22:4d:52:7e:c9:07:67:0b:6e:ac:56:6f:
36:16:b1:2f:72:4e:cf:09:b0:a5:87:9b:28:7f:bc:
73:c3:42:dc:a6:5a:42:8d:25:5b:a0:3a:03:79:f8:
c9:b6:6b:73:63:df:48:6d:3f:13:bf:b1:c6:2a:23:
0e:f3:82:32:60:ce:73:29:b3:4e:25:f2:4e:62:13:
9a:92:c2:ea:d2:3b:ca:c6:87:06:96:35:2b:14:8e:
9a:b9:3f:da:a9:0b:14:77:93:f9:55:42:ea:3c:93:
0e:ed:f0:f6:47:77:95:22:af:b6:ba:39:23:36:1f:
6f:a7:19:65:4c:57:06:5e:1f:fa:fb:8c:34:59:57:
26:20:89:ec:10:d3:87:ac:f2:2d:7a:df:5c:45:70:
91:ef:66:58:19:ac:a4:62:95:5d:89:4e:54:a4:6f:
a6:d2:5b:d9:76:32:31:37:0e:ce:d1:83:54:3b:46:
3f:28:55:94:54:2f:92:01:06:44:ea:93:1e:21:2f:
de:77:b8:b9:1d:28:b6:6e:ee:3f:db:17:26:81:32:
7f:dc:c7:8a:cd:cc:a5:ab:91:9a:b1:7b:4a:d5:7f:
65:f1:86:60:36:eb:65:be:e3:57:c1:38:76:1b:eb:
fa:fa:c0:68:eb:31:f2:c9:74:32:f4:fc:b1:00:b9:
20:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:9A:B5:0B:73:56:F3:B5:89:37:3F:A4:3B:8E:93:AF:B9:96:DF:30
X509v3 Authority Key Identifier:
keyid:91:7E:5C:8E:93:3C:BB:17:55:3D:E5:4A:11:19:D1:DE:91:7C:FD:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B256/3188E72218A511EB8D422172C4F9AE02/kX5cjpM8uxdVPeVKERnR3pF8_To.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kX5cjpM8uxdVPeVKERnR3pF8_To.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B256/3188E72218A511EB8D422172C4F9AE02/5B53CD08169011EC8DAD9A67C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.1.240.0/21
Signature Algorithm: sha256WithRSAEncryption
d4:3c:86:bf:d8:df:b9:16:bc:f2:56:54:0e:3a:30:59:89:f0:
c6:a1:f7:39:89:23:d7:a8:2c:23:ad:d6:ad:a5:6e:cf:9a:7f:
37:ac:94:9b:11:35:d1:3b:4b:f2:9d:cb:57:24:61:e8:be:bd:
87:0a:a8:05:9a:d3:76:0a:54:d0:f0:83:59:0b:6f:b1:7b:21:
da:66:fe:90:0f:ea:30:ea:94:d5:ff:95:b3:7f:3f:c7:0c:c9:
c2:86:81:b4:be:4f:76:f1:c8:01:2e:68:28:a7:6f:d8:2e:15:
b9:b6:80:08:63:ce:23:be:d3:62:b7:e2:a1:c9:de:9d:33:f2:
53:2c:79:6d:28:92:2f:32:f5:14:6b:74:3b:a8:f8:67:50:56:
7c:a2:58:3e:03:06:48:fe:b6:ec:bb:37:ed:02:1d:42:76:7d:
57:a3:46:6e:c8:73:0e:03:16:48:c3:48:07:dd:87:6c:87:83:
b1:aa:9a:f2:3f:25:2b:cc:15:c6:9f:66:15:f5:fd:8d:12:0e:
ec:db:58:6b:63:9b:8a:6d:a1:21:a8:2a:cb:ca:72:88:87:19:
18:c6:9a:02:a1:42:c1:0e:5c:18:c7:ce:c1:d9:15:12:f6:7d:
b9:64:f2:a8:ff:b6:04:84:1a:84:69:50:8f:15:8c:f3:ba:78:
61:c3:33:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 13:41:17 2023 by rpki-client on console-fra.rpki-client.org