Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C533/9CC43306A74911EBB0302F82C4F9AE02/ABC4B5CC1AA511EC8CBBCF0BC4F9AE02.roa
File: ABC4B5CC1AA511EC8CBBCF0BC4F9AE02.roa (raw, json)
Hash identifier: if2jWJfMUCn86FpJ8MsVscJCy45OeAJuQ5Jpcp7aHIY=
Subject key identifier: 68:08:E9:53:BA:14:8A:3D:75:F6:0A:E2:87:84:42:3D:DE:8F:70:A9
Certificate issuer: /CN=A912C533/serialNumber=AF96D111008404FF1B14516F7FCF67E928CEF666
Certificate serial: 01ED
Authority key identifier: AF:96:D1:11:00:84:04:FF:1B:14:51:6F:7F:CF:67:E9:28:CE:F6:66
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r5bREQCEBP8bFFFvf89n6SjO9mY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C533/9CC43306A74911EBB0302F82C4F9AE02/ABC4B5CC1AA511EC8CBBCF0BC4F9AE02.roa
Signing time: Mon 20 Dec 2021 02:20:47 +0000
ROA not before: Mon 20 Dec 2021 02:20:47 +0000
ROA not after: Thu 02 Mar 2023 00:00:00 +0000
asID: 10010
IP address blocks: 133.186.0.0/20 maxlen: 24
133.186.32.0/20 maxlen: 24
133.186.48.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 493 (0x1ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C533/serialNumber=AF96D111008404FF1B14516F7FCF67E928CEF666
Validity
Not Before: Dec 20 02:20:47 2021 GMT
Not After : Mar 2 00:00:00 2023 GMT
Subject: CN=61bfe87f-6936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c1:a5:7d:ff:dd:51:05:94:4d:9a:24:57:b7:
8d:2f:03:af:2f:74:5d:cf:58:61:c3:80:a1:f0:b6:
db:71:6e:c1:84:b5:04:6f:18:3e:41:5d:e3:03:e7:
1e:84:c1:c8:43:a4:b7:ca:16:fd:24:06:d2:c4:51:
54:91:6b:34:6e:48:68:c3:cc:87:15:87:f4:f5:94:
a4:84:22:fd:70:f0:1e:43:90:2b:c6:b1:ce:90:96:
0c:70:b9:e3:75:d4:6b:0f:7a:29:90:92:05:16:37:
6b:ba:37:c5:51:ce:ba:4e:2e:6e:03:48:a8:db:31:
fc:94:93:52:e2:f8:d6:60:b4:6c:c9:a3:27:5e:c6:
6d:5c:d7:2a:34:2c:29:4e:4d:24:b0:35:c8:59:d3:
ef:3a:35:3f:1a:2f:bc:0c:0c:ea:d9:00:79:bf:ba:
08:20:cc:ac:24:ba:97:36:79:c5:9b:71:ca:67:33:
87:74:4e:da:df:84:4e:b8:28:62:6f:a4:59:85:98:
fd:9d:17:62:12:4f:b2:e9:e8:8b:f0:6a:75:ad:3c:
2b:fd:a2:5c:24:33:5d:2d:42:81:fb:3a:ef:b9:e5:
ab:68:91:01:74:3a:34:8e:fb:1b:b1:bc:c3:52:79:
41:f0:a7:f5:5a:59:dd:7f:65:64:7c:46:c0:98:79:
38:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:08:E9:53:BA:14:8A:3D:75:F6:0A:E2:87:84:42:3D:DE:8F:70:A9
X509v3 Authority Key Identifier:
keyid:AF:96:D1:11:00:84:04:FF:1B:14:51:6F:7F:CF:67:E9:28:CE:F6:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C533/9CC43306A74911EBB0302F82C4F9AE02/r5bREQCEBP8bFFFvf89n6SjO9mY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r5bREQCEBP8bFFFvf89n6SjO9mY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C533/9CC43306A74911EBB0302F82C4F9AE02/ABC4B5CC1AA511EC8CBBCF0BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
133.186.0.0/20
133.186.32.0-133.186.51.255
Signature Algorithm: sha256WithRSAEncryption
13:0a:a9:1a:c8:4b:50:e7:02:bd:cf:c6:b9:c6:59:ed:91:f3:
7b:33:e7:4f:6e:ed:91:7d:a3:83:86:41:ae:1d:90:99:72:f1:
46:f2:f9:9c:dd:f5:1d:17:0d:11:2c:ef:6a:c4:30:86:6e:31:
ca:91:d4:e5:66:36:a5:43:c0:a5:e8:fd:7e:1b:c1:fd:b0:98:
3c:22:9d:b0:b0:aa:76:0c:ef:39:8d:3f:d5:23:8d:63:59:a7:
d9:6e:47:7b:d0:ce:2d:17:a0:67:3a:84:18:7a:4c:10:04:c3:
3e:42:9b:f2:5d:22:ba:eb:1f:aa:a1:49:93:1e:a5:d0:62:5e:
c4:a3:eb:25:c8:85:0a:30:b4:00:0c:27:8e:37:77:96:06:9a:
06:85:7d:68:93:43:9b:5d:26:7b:8e:a3:8c:a8:db:62:94:71:
75:46:3f:85:36:b0:50:85:99:df:f1:85:87:c1:89:f4:18:3a:
70:f0:1a:aa:0e:4e:d8:2d:f6:b0:53:0e:f6:24:9d:bf:22:f5:
69:04:fa:a8:fa:4c:b1:b2:2a:80:47:fc:be:c0:47:c5:53:0f:
0e:46:43:db:84:7f:e3:a1:90:a2:cb:5d:1d:22:c9:17:87:0c:
b0:15:57:79:ef:e9:d2:89:68:b5:06:2a:c0:b5:a2:83:1e:e8:
9a:9c:38:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:37 2023 by rpki-client on console-fra.rpki-client.org