Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155A58/63FE33EABB2D11EA82F84669C4F9AE02/FCB5A954CD5B11EDA80AF64BC4F9AE02.roa
File: FCB5A954CD5B11EDA80AF64BC4F9AE02.roa (raw, json)
Hash identifier: 03j8RB3jcUAdpvFpgTomKpTr8BOeRNND6CdXfC4eJ0M=
Subject key identifier: A9:93:BA:51:1A:ED:8E:EB:63:F5:DE:BF:87:53:2D:6D:E8:9C:9E:B6
Certificate issuer: /CN=A9155A58/serialNumber=A7FFEA18E09A39A0AA6F375A0A83B5708EC22D8A
Certificate serial: 072E
Authority key identifier: A7:FF:EA:18:E0:9A:39:A0:AA:6F:37:5A:0A:83:B5:70:8E:C2:2D:8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p__qGOCaOaCqbzdaCoO1cI7CLYo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155A58/63FE33EABB2D11EA82F84669C4F9AE02/FCB5A954CD5B11EDA80AF64BC4F9AE02.roa
Signing time: Tue 28 Mar 2023 11:30:48 +0000
ROA not before: Tue 28 Mar 2023 11:30:48 +0000
ROA not after: Wed 01 May 2024 00:00:00 +0000
asID: 38195
IP address blocks: 220.233.44.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1838 (0x72e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155A58/serialNumber=A7FFEA18E09A39A0AA6F375A0A83B5708EC22D8A
Validity
Not Before: Mar 28 11:30:48 2023 GMT
Not After : May 1 00:00:00 2024 GMT
Subject: CN=6422cfe8-a30d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:6d:73:5a:dd:f2:96:46:14:58:2d:78:92:ef:
fa:22:f8:4b:c2:05:9f:b7:2d:58:fd:36:81:5e:6e:
93:24:de:21:88:57:b7:1d:e1:eb:dc:5d:90:ac:d3:
8f:7f:40:93:bc:9b:bd:95:4a:a4:cd:06:bb:51:9f:
76:bf:4e:43:97:a4:1c:5a:10:64:72:da:08:3f:39:
7b:24:9b:4d:09:9f:34:98:10:47:ba:66:e2:0e:3e:
a6:4a:de:49:57:28:3b:84:0f:6e:38:78:19:c2:5e:
c8:98:cc:22:2d:4f:86:38:66:d5:e0:15:af:2e:7c:
6b:c4:7d:0d:0b:7d:7f:24:ea:bd:3b:de:39:16:6e:
58:a6:64:35:59:e8:56:5a:8c:b1:40:97:00:e2:48:
d8:ba:11:c5:5b:c3:8e:c7:27:3a:65:94:83:2f:2a:
56:08:6b:15:50:14:8d:ce:09:8e:18:a6:5b:c0:f8:
4c:4a:74:17:00:e3:ff:47:d9:cf:88:ce:de:b4:f5:
81:43:09:dc:3b:73:3d:28:90:81:e4:73:1e:0a:12:
ad:58:7e:b0:00:a3:9b:9d:34:31:44:ad:7b:86:1f:
84:de:78:5e:76:bf:52:6e:5a:7a:98:a4:6c:c8:1e:
d8:fd:eb:11:4e:71:7f:b2:bf:67:54:2d:92:8d:fc:
4f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:93:BA:51:1A:ED:8E:EB:63:F5:DE:BF:87:53:2D:6D:E8:9C:9E:B6
X509v3 Authority Key Identifier:
keyid:A7:FF:EA:18:E0:9A:39:A0:AA:6F:37:5A:0A:83:B5:70:8E:C2:2D:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155A58/63FE33EABB2D11EA82F84669C4F9AE02/p__qGOCaOaCqbzdaCoO1cI7CLYo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p__qGOCaOaCqbzdaCoO1cI7CLYo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155A58/63FE33EABB2D11EA82F84669C4F9AE02/FCB5A954CD5B11EDA80AF64BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.233.44.0/22
Signature Algorithm: sha256WithRSAEncryption
96:39:62:bd:e8:96:a5:01:bb:da:34:b0:3d:4d:01:81:0b:fc:
6c:51:cc:aa:be:86:24:b5:59:15:02:4d:d9:7f:15:7f:18:92:
3a:c1:3c:74:32:b3:09:c3:76:1a:3f:56:00:93:2d:9d:80:1b:
f5:54:de:9e:57:83:22:9d:56:11:1c:90:3a:04:ac:42:8d:11:
f3:62:96:4d:ac:54:85:34:9d:93:df:a9:a5:1c:d3:05:cd:5e:
7e:7f:02:4c:45:1c:f8:14:ab:7f:87:8f:3c:15:5b:65:46:6d:
c7:91:da:6e:ea:8e:c6:9e:07:3a:3a:ed:fd:05:a9:53:b2:e1:
91:18:f7:17:3a:6c:64:1f:c3:93:60:7c:91:5c:cb:c7:c5:02:
d5:b7:d0:1a:dd:8c:0b:ea:b5:14:04:b8:e3:8f:27:20:0d:5e:
46:3c:9b:36:cf:e0:cb:94:44:44:00:b6:48:b2:21:ad:4f:23:
43:c9:52:31:07:3b:3e:40:1c:3a:7e:78:05:f1:a0:9c:db:b9:
f1:6b:91:13:2e:8e:58:da:11:80:47:0d:02:85:70:93:4c:cf:
48:ee:b5:b8:07:51:1a:b7:61:59:84:34:28:b2:4f:99:07:b2:
45:1b:6a:a8:63:15:78:6e:b1:6c:ff:87:db:a7:5c:7f:aa:49:
de:a2:d8:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:42 2023 by rpki-client on console-fra.rpki-client.org