Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C533/9CC43306A74911EBB0302F82C4F9AE02/4902EF640C5C11ECBD37E846C4F9AE02.roa
File: 4902EF640C5C11ECBD37E846C4F9AE02.roa (raw, json)
Hash identifier: T4EVePWnRaxS//hSBU9OFtg+X4aJ05mgy6t9uTYonz8=
Subject key identifier: F1:38:43:D5:F5:71:46:DF:B8:6D:70:23:4A:2C:20:B0:3F:92:E8:10
Certificate issuer: /CN=A912C533/serialNumber=AF96D111008404FF1B14516F7FCF67E928CEF666
Certificate serial: 025A
Authority key identifier: AF:96:D1:11:00:84:04:FF:1B:14:51:6F:7F:CF:67:E9:28:CE:F6:66
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r5bREQCEBP8bFFFvf89n6SjO9mY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C533/9CC43306A74911EBB0302F82C4F9AE02/4902EF640C5C11ECBD37E846C4F9AE02.roa
Signing time: Mon 07 Feb 2022 07:50:56 +0000
ROA not before: Mon 07 Feb 2022 07:50:56 +0000
ROA not after: Thu 02 Mar 2023 00:00:00 +0000
asID: 2497
IP address blocks: 133.110.0.0/16 maxlen: 16
133.137.0.0/16 maxlen: 16
133.142.0.0/16 maxlen: 16
133.159.0.0/16 maxlen: 16
133.218.0.0/16 maxlen: 16
133.236.0.0/16 maxlen: 16
133.238.8.0/21 maxlen: 21
133.238.16.0/20 maxlen: 20
133.238.32.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 602 (0x25a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C533/serialNumber=AF96D111008404FF1B14516F7FCF67E928CEF666
Validity
Not Before: Feb 7 07:50:56 2022 GMT
Not After : Mar 2 00:00:00 2023 GMT
Subject: CN=6200cf5f-79d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a3:0d:a2:ee:1d:b9:7c:db:7c:ce:ca:3a:0a:
b4:1f:16:ef:88:98:15:dc:f0:6b:06:af:c7:e2:98:
1d:2b:5d:de:c2:8f:78:b3:16:f5:59:1f:e8:1c:a8:
9a:67:74:9c:09:5a:3a:16:f7:b1:31:6c:0f:2d:98:
7d:da:06:97:40:6b:a2:56:19:2c:26:27:bd:32:16:
46:04:40:66:a8:6c:e4:e6:2b:0e:bf:cf:4e:8f:de:
2c:5f:2e:1f:bb:b1:3b:e8:d3:2c:ac:41:d6:ac:80:
24:d5:a0:e9:8d:2f:6a:2a:71:27:d2:cc:1b:fb:5d:
18:31:bd:4d:d3:0c:d4:90:2f:09:55:49:86:06:2d:
cf:0e:21:1e:72:d2:31:32:7f:28:c0:21:34:a8:b4:
5c:ff:95:a1:79:ee:f0:78:71:39:ab:5a:5b:ca:e8:
b0:a5:f6:d0:35:2a:c0:cf:94:51:81:7d:fb:99:10:
33:0d:a4:25:69:29:4b:63:8b:e8:6c:0e:d4:6d:3c:
e0:94:60:13:ff:15:72:37:5d:91:01:b4:82:05:e0:
03:90:31:b5:c8:cc:5b:dd:47:78:3a:96:14:f2:8a:
52:49:7f:f2:86:63:a5:b9:32:e6:8b:9c:f1:a0:49:
21:b8:10:e3:26:c0:9f:29:8c:bb:68:0d:db:aa:af:
c2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:38:43:D5:F5:71:46:DF:B8:6D:70:23:4A:2C:20:B0:3F:92:E8:10
X509v3 Authority Key Identifier:
keyid:AF:96:D1:11:00:84:04:FF:1B:14:51:6F:7F:CF:67:E9:28:CE:F6:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C533/9CC43306A74911EBB0302F82C4F9AE02/r5bREQCEBP8bFFFvf89n6SjO9mY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r5bREQCEBP8bFFFvf89n6SjO9mY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C533/9CC43306A74911EBB0302F82C4F9AE02/4902EF640C5C11ECBD37E846C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
133.110.0.0/16
133.137.0.0/16
133.142.0.0/16
133.159.0.0/16
133.218.0.0/16
133.236.0.0/16
133.238.8.0-133.238.63.255
Signature Algorithm: sha256WithRSAEncryption
5c:aa:ef:94:7e:5c:84:d1:a6:9d:e9:2b:06:23:03:9a:c6:b1:
79:98:17:6e:09:37:ee:57:96:bc:56:5c:d4:6b:60:26:74:0a:
38:5a:f0:c6:a1:1c:f0:ea:11:be:10:69:ca:8a:95:a1:18:71:
41:45:84:ec:b8:7b:0e:54:6a:4e:b0:80:e2:e7:d5:26:a6:d6:
0a:be:fb:3f:bf:76:fc:09:d4:cf:28:ea:2e:7c:3e:1a:89:8b:
9a:e4:4e:4f:0b:3f:af:dd:ae:fd:39:ed:0a:2c:b3:cc:56:4c:
4d:96:9f:e3:ab:47:d5:50:1d:14:78:93:cb:99:c0:73:a1:73:
34:e6:1d:1a:3a:ab:3e:92:c1:80:19:f7:62:4d:18:fc:fc:e5:
81:39:1e:bc:39:1e:e3:59:94:e1:40:68:76:35:d9:fe:c0:4a:
2a:81:f5:8a:82:36:12:40:3b:bb:60:19:9e:66:b0:5e:07:43:
f7:b7:05:9f:40:2a:5f:81:a8:06:92:88:ee:8d:4b:bb:44:8a:
c3:f1:d2:73:c0:cd:88:57:b9:5a:7c:88:7e:27:69:5b:86:51:
e3:7b:b1:a6:5b:2c:02:8c:aa:ad:e2:1c:ac:72:96:fb:ec:b6:
40:66:a4:c4:6f:e2:bc:b2:39:de:be:45:98:a2:f0:e7:7d:91:
cb:ed:60:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:37 2023 by rpki-client on console-fra.rpki-client.org