Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C533/9CC43306A74911EBB0302F82C4F9AE02/C6C52AEE21E111EC98668610C4F9AE02.roa
File: C6C52AEE21E111EC98668610C4F9AE02.roa (raw, json)
Hash identifier: N6GxvihrGP0MSQ8Mf8y145s/SXOkTuw9yKgFcMFSFAA=
Subject key identifier: F5:1D:A3:6D:CF:12:25:B6:6E:49:48:F8:8E:D8:A0:10:9D:1B:6A:E7
Certificate issuer: /CN=A912C533/serialNumber=AF96D111008404FF1B14516F7FCF67E928CEF666
Certificate serial: 01EC
Authority key identifier: AF:96:D1:11:00:84:04:FF:1B:14:51:6F:7F:CF:67:E9:28:CE:F6:66
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r5bREQCEBP8bFFFvf89n6SjO9mY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C533/9CC43306A74911EBB0302F82C4F9AE02/C6C52AEE21E111EC98668610C4F9AE02.roa
Signing time: Mon 20 Dec 2021 02:20:46 +0000
ROA not before: Mon 20 Dec 2021 02:20:46 +0000
ROA not after: Thu 02 Mar 2023 00:00:00 +0000
asID: 0
IP address blocks: 133.252.0.0/16 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 492 (0x1ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C533/serialNumber=AF96D111008404FF1B14516F7FCF67E928CEF666
Validity
Not Before: Dec 20 02:20:46 2021 GMT
Not After : Mar 2 00:00:00 2023 GMT
Subject: CN=61bfe87e-d4db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:72:bb:9c:43:fc:d6:d1:b2:d6:55:9e:2c:66:
e4:7c:a4:6b:01:e5:1b:3a:f8:d1:c4:63:b6:60:d9:
0f:56:07:50:8c:f3:3a:e6:9e:c2:da:2e:36:22:56:
7b:4b:56:88:75:7a:7f:e7:e0:a6:40:d2:c7:74:4f:
08:1c:b7:3b:a5:94:56:5a:00:69:14:7c:ba:61:bf:
13:8f:9b:3b:0e:5c:7f:7d:dc:62:7b:8b:ac:cd:0b:
96:e8:bf:31:5c:74:34:93:37:db:af:32:87:d6:63:
e7:98:d0:de:65:67:9b:8c:64:9f:f9:28:c9:0f:d9:
f5:35:fa:96:59:c4:d1:25:ad:c0:f6:b8:be:60:63:
e2:53:1b:62:dc:18:65:29:7a:88:ff:9f:47:e2:42:
9e:ca:35:a3:4a:f0:34:92:40:46:a1:f8:83:01:c0:
31:4d:aa:dd:ce:6d:c3:50:86:11:6f:ec:aa:f2:92:
6c:d0:c9:e0:a2:41:6e:36:ae:92:ff:f8:96:51:02:
9b:b2:6b:bb:0c:7f:ee:2e:cb:75:c0:7d:16:d7:d6:
8f:d7:ea:96:c9:3b:fe:32:ed:a9:aa:5b:71:4a:b6:
5f:9a:5e:9b:5a:2b:55:b6:34:e6:2c:c1:4c:ca:fc:
2a:3b:48:90:ae:45:5d:9e:f8:77:2c:5b:2a:c3:9a:
42:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:1D:A3:6D:CF:12:25:B6:6E:49:48:F8:8E:D8:A0:10:9D:1B:6A:E7
X509v3 Authority Key Identifier:
keyid:AF:96:D1:11:00:84:04:FF:1B:14:51:6F:7F:CF:67:E9:28:CE:F6:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C533/9CC43306A74911EBB0302F82C4F9AE02/r5bREQCEBP8bFFFvf89n6SjO9mY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r5bREQCEBP8bFFFvf89n6SjO9mY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C533/9CC43306A74911EBB0302F82C4F9AE02/C6C52AEE21E111EC98668610C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
133.252.0.0/16
Signature Algorithm: sha256WithRSAEncryption
03:9a:73:25:5d:84:19:98:94:b7:29:d2:01:54:43:a7:66:42:
f7:83:e5:8c:50:c2:d3:e0:0a:00:98:df:f7:29:53:95:d0:de:
f0:3a:2c:14:58:92:d8:1e:60:da:7e:f9:1d:e9:69:c3:b5:13:
cd:6a:23:03:f1:7a:34:94:34:81:6a:84:38:b5:cc:09:cc:62:
ae:75:bb:87:38:b9:65:f0:aa:3b:9a:00:f4:0b:ef:8a:b6:12:
a4:f3:fb:96:8f:26:2e:b6:e6:bc:fe:e9:70:75:3c:f2:03:3e:
51:8e:5f:a5:c6:33:b7:76:f4:bb:86:35:dd:4a:77:1d:ad:dc:
fd:ae:e5:bc:79:21:3f:b4:03:54:3e:0f:5b:85:71:d1:00:28:
4d:0b:1e:0c:ef:1a:51:61:5d:18:ed:a3:d7:7b:36:b2:ae:6a:
43:95:37:87:58:9e:41:92:b5:5c:30:42:0a:c8:5b:d6:91:86:
72:8a:5f:03:7b:ee:54:7e:6a:4f:96:ac:0f:9b:52:1a:44:a5:
8e:f3:43:b9:d4:d2:91:e1:5a:59:5f:65:f2:e1:37:4e:ca:5d:
e6:cc:e2:ab:09:f2:e1:e3:ab:7a:6e:e0:8a:68:b2:76:19:be:
e9:c2:86:ff:56:90:91:68:7c:21:a5:b6:42:c2:19:72:e9:26:
2b:5c:60:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:49 2024 by rpki-client on console-ams.rpki-client.org