Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9130BAE/7AE4903C1DA511E2BACD399C08B02CD2/E56D496A3FA911EBAF7A963CC4F9AE02.roa
File: E56D496A3FA911EBAF7A963CC4F9AE02.roa (raw, json)
Hash identifier: 8EWZXAd/suHdoyMxXI/IED90xUU+NaDjpRge0qVT1BU=
Subject key identifier: 6E:D2:C1:7E:41:F3:BA:E5:E0:58:31:D2:22:7F:3E:F8:8E:33:7E:F0
Certificate issuer: /CN=A9130BAE/serialNumber=88C48D1B0B7583D3E619CEE070A79D09DC6947A7
Certificate serial: 15AE
Authority key identifier: 88:C4:8D:1B:0B:75:83:D3:E6:19:CE:E0:70:A7:9D:09:DC:69:47:A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iMSNGwt1g9PmGc7gcKedCdxpR6c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9130BAE/7AE4903C1DA511E2BACD399C08B02CD2/E56D496A3FA911EBAF7A963CC4F9AE02.roa
Signing time: Sat 01 Oct 2022 15:50:59 +0000
ROA not before: Sat 01 Oct 2022 15:50:59 +0000
ROA not after: Tue 31 Jan 2023 00:00:00 +0000
asID: 64081
IP address blocks: 27.116.56.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5550 (0x15ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9130BAE/serialNumber=88C48D1B0B7583D3E619CEE070A79D09DC6947A7
Validity
Not Before: Oct 1 15:50:59 2022 GMT
Not After : Jan 31 00:00:00 2023 GMT
Subject: CN=633861e3-cd21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:28:f4:3b:55:cd:2e:9e:db:59:0a:3e:ff:f3:
22:26:dd:e6:bb:09:e6:de:5d:76:1d:e3:17:61:da:
59:90:e9:55:a3:b3:72:dd:5d:67:7a:3e:88:ad:ae:
24:c5:9f:10:ca:75:a9:88:9b:ac:8f:b0:7d:45:0e:
c3:44:88:9a:00:91:b6:8e:dc:20:ee:c7:b7:71:f4:
3b:c6:a6:d4:f7:a8:b9:57:f2:42:7a:e8:56:93:af:
ff:3c:a9:cf:a9:05:c6:e9:de:05:83:83:17:e8:26:
c6:42:df:ff:e5:85:8e:85:76:01:1d:9f:54:c8:96:
67:50:b7:2a:1f:bc:f8:cb:2f:17:dc:2e:ee:b8:85:
61:91:ac:10:4a:1a:e2:98:87:97:2a:99:f0:55:09:
c7:bb:79:2e:a3:ce:9b:80:1e:76:4c:45:87:8f:19:
dc:07:28:a2:80:93:c7:97:b0:3b:d2:36:0d:07:f8:
60:f7:9e:f9:dd:fc:80:88:b5:e6:5c:ff:86:a4:fe:
26:68:fc:b9:a3:f4:69:31:58:58:91:5f:4e:a6:f8:
75:0f:75:13:a2:61:23:f2:8c:f3:bb:7a:5b:79:cf:
da:32:8f:66:7b:23:54:14:b6:29:d4:2d:5d:69:18:
40:50:04:4a:3a:49:e1:6c:d4:27:2b:d5:d5:ba:90:
b0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:D2:C1:7E:41:F3:BA:E5:E0:58:31:D2:22:7F:3E:F8:8E:33:7E:F0
X509v3 Authority Key Identifier:
keyid:88:C4:8D:1B:0B:75:83:D3:E6:19:CE:E0:70:A7:9D:09:DC:69:47:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9130BAE/7AE4903C1DA511E2BACD399C08B02CD2/iMSNGwt1g9PmGc7gcKedCdxpR6c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iMSNGwt1g9PmGc7gcKedCdxpR6c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130BAE/7AE4903C1DA511E2BACD399C08B02CD2/E56D496A3FA911EBAF7A963CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.116.56.0/22
Signature Algorithm: sha256WithRSAEncryption
79:58:b3:60:5f:1a:9b:63:60:a9:2c:2a:3f:0b:2e:e3:9b:97:
28:eb:d5:bb:0d:5f:59:1b:b2:31:75:42:bd:36:a7:18:be:55:
48:ea:2a:99:76:f7:50:dd:40:81:06:6a:55:a3:7a:b3:36:2e:
a1:5d:83:9d:46:c4:75:e3:7f:d1:79:af:19:02:88:8e:99:b0:
69:29:d7:30:29:85:2e:7f:20:9a:bf:fd:04:dd:54:84:e7:08:
e0:2e:d2:eb:61:6f:48:11:be:67:37:5f:29:b0:c1:82:c1:f1:
a9:0a:2b:bc:b9:92:a2:db:30:b8:a9:e3:b4:6a:b6:03:9d:04:
ea:b7:c5:60:df:cb:a8:f3:0c:2e:d5:be:8d:ac:29:50:6a:7e:
e7:ec:9c:d9:9f:31:19:da:55:91:8b:5a:97:df:95:38:a5:bb:
6f:6a:ee:3e:46:31:a2:42:26:d6:3c:1d:08:85:11:4f:fb:ec:
48:66:85:16:ff:dd:4b:e3:a8:08:de:74:e5:23:88:31:f4:c8:
7a:e3:86:56:e0:4a:13:f1:7f:e2:99:fe:31:7a:5c:5c:28:d2:
d6:7a:46:76:01:41:95:85:ba:58:40:f4:7c:b1:f0:f7:09:ea:
0c:4a:2f:5e:2d:de:30:9d:ca:4f:7f:89:96:6c:c1:3f:e2:76:
ba:a4:b2:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:38 2023 by rpki-client on console-fra.rpki-client.org