Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C533/9CC43306A74911EBB0302F82C4F9AE02/04ADCAFEF34911EB8165132DC4F9AE02.roa
File: 04ADCAFEF34911EB8165132DC4F9AE02.roa (raw, json)
Hash identifier: 8SiPlSG+jWR55wNRn+PA4y0fKkO3Xy9Tz+m2uiUSHfc=
Subject key identifier: 82:BC:3B:44:64:14:12:73:B3:25:98:E0:B6:67:6E:77:AA:00:A9:81
Certificate issuer: /CN=A912C533/serialNumber=AF96D111008404FF1B14516F7FCF67E928CEF666
Certificate serial: 01F1
Authority key identifier: AF:96:D1:11:00:84:04:FF:1B:14:51:6F:7F:CF:67:E9:28:CE:F6:66
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r5bREQCEBP8bFFFvf89n6SjO9mY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C533/9CC43306A74911EBB0302F82C4F9AE02/04ADCAFEF34911EB8165132DC4F9AE02.roa
Signing time: Mon 20 Dec 2021 02:20:52 +0000
ROA not before: Mon 20 Dec 2021 02:20:52 +0000
ROA not after: Thu 02 Mar 2023 00:00:00 +0000
asID: 7684
IP address blocks: 133.125.0.0/16 maxlen: 24
133.242.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 497 (0x1f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C533/serialNumber=AF96D111008404FF1B14516F7FCF67E928CEF666
Validity
Not Before: Dec 20 02:20:52 2021 GMT
Not After : Mar 2 00:00:00 2023 GMT
Subject: CN=61bfe884-c4e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:42:aa:92:98:77:2b:b5:e7:70:cf:47:c9:68:
94:63:bc:d8:b9:38:ca:ea:6e:ba:ca:07:4d:2a:ec:
5c:02:db:18:d8:9a:59:8c:0b:1e:e2:58:08:9d:98:
e1:09:c4:22:2a:47:b7:ed:3e:e4:b1:96:bb:fd:72:
47:7b:f5:77:0f:73:22:ae:5a:f6:cd:2b:03:10:0d:
ac:14:e0:cc:d8:38:1d:af:5f:94:c3:b0:9f:92:83:
73:0b:2e:40:fd:df:c7:4b:fd:22:f3:ea:72:ee:00:
f7:a5:62:26:77:5c:fe:62:12:d8:f4:85:25:4a:47:
ed:00:aa:6d:79:b0:c2:83:13:b8:fe:a9:be:43:90:
2f:10:4c:0a:0a:38:bf:4a:0b:47:e5:cf:19:e3:3a:
86:9e:cc:7a:2e:dc:46:ae:0f:b7:15:b2:2b:8f:08:
76:93:a1:8f:5a:2a:ed:3b:7f:93:07:8e:fe:05:cc:
0c:21:85:28:b1:ef:ec:f2:0d:eb:70:37:41:3a:d4:
24:e5:ea:17:30:4e:95:89:85:d2:5a:1a:b8:16:e0:
9e:a6:b3:e4:14:f0:f9:74:ea:a3:b7:90:18:86:c5:
bc:6c:35:c2:d2:dc:df:61:73:17:8f:c0:20:2c:50:
71:64:95:05:04:c5:6a:7e:f7:7f:ca:e2:6c:77:05:
bb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:BC:3B:44:64:14:12:73:B3:25:98:E0:B6:67:6E:77:AA:00:A9:81
X509v3 Authority Key Identifier:
keyid:AF:96:D1:11:00:84:04:FF:1B:14:51:6F:7F:CF:67:E9:28:CE:F6:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C533/9CC43306A74911EBB0302F82C4F9AE02/r5bREQCEBP8bFFFvf89n6SjO9mY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r5bREQCEBP8bFFFvf89n6SjO9mY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C533/9CC43306A74911EBB0302F82C4F9AE02/04ADCAFEF34911EB8165132DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
133.125.0.0/16
133.242.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5e:f6:b0:56:5b:3e:49:ca:c4:b2:29:60:29:c4:93:c5:d1:af:
1b:e3:95:82:2d:4e:6d:d6:88:6d:79:73:04:9c:59:28:30:b0:
cf:e2:85:9c:cd:13:89:53:1b:29:ff:4a:91:13:aa:09:46:8e:
f6:0f:e2:b8:18:de:a3:e5:41:1d:2f:39:c1:70:6e:e5:9e:18:
f3:0c:2f:f5:af:e1:1b:14:be:bf:39:97:09:2f:e6:9e:27:e8:
c0:12:ba:35:9a:29:51:e7:80:c4:99:8e:0a:75:a4:31:73:7e:
05:83:96:ff:f5:c9:a7:5a:34:ee:e7:6c:b6:f4:55:e2:dc:d8:
ab:01:7f:7a:fd:20:8d:f7:26:d0:39:93:5b:ec:12:ee:42:ad:
03:57:ed:73:7d:10:c8:80:28:27:a2:de:25:e0:91:b5:cb:38:
ff:c4:a7:a1:4d:e1:01:82:c7:c9:9f:b2:4a:d5:41:a3:9f:31:
9d:6a:57:f0:61:34:1e:0a:f9:b1:9b:a1:a0:9a:03:29:d4:f4:
e1:64:bf:b6:75:62:53:57:d2:d0:05:cc:df:b0:6e:ea:c7:7d:
44:48:05:44:b2:5e:0b:8c:c3:0a:69:6c:4d:03:4d:2c:31:56:
50:f0:31:50:87:10:cd:f3:94:23:d1:d2:28:90:f2:69:a6:53:
7c:19:4a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:35 2023 by rpki-client on console-ams.rpki-client.org