Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157F58/EAA3A40CF0A011E7BC7E8D5FC4F9AE02/187ADF48A6BE11EDBC1C990EC4F9AE02.roa
File: 187ADF48A6BE11EDBC1C990EC4F9AE02.roa (raw, json)
Hash identifier: 4uV/3b+V5wr3cSyeCvn5N8NcuwgxCUYp45ISuywMlHE=
Subject key identifier: 3F:B6:20:17:48:56:BA:23:ED:31:D6:5D:9E:DA:4B:D4:52:8B:CC:2B
Certificate issuer: /CN=A9157F58/serialNumber=EB1D0B185BC34F95366C8D4B2739E60E9E82F5D9
Certificate serial: 152F
Authority key identifier: EB:1D:0B:18:5B:C3:4F:95:36:6C:8D:4B:27:39:E6:0E:9E:82:F5:D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6x0LGFvDT5U2bI1LJznmDp6C9dk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157F58/EAA3A40CF0A011E7BC7E8D5FC4F9AE02/187ADF48A6BE11EDBC1C990EC4F9AE02.roa
Signing time: Tue 07 Feb 2023 08:04:51 +0000
ROA not before: Tue 07 Feb 2023 08:04:51 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 14618
IP address blocks: 202.6.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5423 (0x152f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157F58/serialNumber=EB1D0B185BC34F95366C8D4B2739E60E9E82F5D9
Validity
Not Before: Feb 7 08:04:51 2023 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=63e20622-1dce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ab:4d:d7:57:c6:fe:b4:af:3e:e5:0d:17:70:
98:ca:b0:2a:3c:db:83:c1:f8:96:8d:d8:f8:0e:2b:
76:09:81:82:96:39:44:58:8c:1b:78:3f:12:15:ae:
11:3a:0b:6a:4e:e0:40:b0:50:bd:9e:d5:08:97:ba:
40:cd:8b:37:4e:6b:12:af:48:e5:56:7d:34:37:62:
ba:6f:e6:9b:a6:51:3f:84:51:94:71:df:ad:15:a1:
29:74:63:0e:a0:a7:95:70:f4:09:dc:59:54:89:c6:
2b:94:ba:34:17:f2:8b:d8:05:b9:47:22:0c:8c:2b:
80:a0:a8:2f:fe:6f:55:77:d2:d6:69:ae:17:5d:30:
51:6a:e0:64:1c:ca:8a:24:fd:95:78:fa:22:40:8f:
16:47:36:1e:0f:7c:87:0a:c8:b4:7a:de:f2:57:53:
c1:40:9a:cf:29:cf:2e:9c:62:52:4c:64:a8:d8:cc:
c4:31:79:a3:41:38:fc:81:9a:ed:d9:a9:b8:36:c7:
6d:7d:fb:f9:b8:66:7b:3a:a2:3f:e2:ba:37:ed:17:
02:0e:ec:e8:43:14:2d:9c:d1:43:23:85:e9:4b:3e:
13:ea:79:79:0d:e0:65:c1:00:24:d9:2c:03:ad:d7:
f8:9f:30:65:02:c7:c6:a9:59:3a:ac:71:4f:bc:81:
e1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B6:20:17:48:56:BA:23:ED:31:D6:5D:9E:DA:4B:D4:52:8B:CC:2B
X509v3 Authority Key Identifier:
keyid:EB:1D:0B:18:5B:C3:4F:95:36:6C:8D:4B:27:39:E6:0E:9E:82:F5:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157F58/EAA3A40CF0A011E7BC7E8D5FC4F9AE02/6x0LGFvDT5U2bI1LJznmDp6C9dk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6x0LGFvDT5U2bI1LJznmDp6C9dk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157F58/EAA3A40CF0A011E7BC7E8D5FC4F9AE02/187ADF48A6BE11EDBC1C990EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.6.115.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:2f:33:84:3e:9a:18:b6:31:82:24:f5:8b:3b:18:82:30:92:
9d:3e:8b:fa:99:2b:cd:f0:d7:7a:dd:91:2d:f9:15:0f:9e:91:
b4:42:e5:23:11:1c:93:b7:c8:df:53:da:fc:66:0c:ec:da:7e:
02:c2:aa:df:d9:e0:31:e5:e3:56:70:b9:ac:db:94:a7:40:07:
c7:11:71:36:f1:ff:ac:58:33:fd:54:d8:12:ba:e7:38:ee:e7:
03:41:44:87:e6:84:bb:4a:cd:08:3b:ed:7d:ab:38:be:82:36:
a4:fc:4a:62:d3:d7:1a:58:28:43:d0:4a:72:3a:7d:09:a2:ae:
9e:5d:2d:de:9e:61:8e:8c:fe:62:b3:f4:a9:55:12:b1:14:5b:
3c:35:08:c4:d4:df:93:a6:0b:97:a9:e5:c9:cc:66:4d:25:42:
a1:bc:ee:3b:81:4f:88:43:a6:06:97:c7:ea:28:ff:a3:4d:4a:
64:e0:26:9b:d4:98:a4:b6:8e:d6:a9:6a:81:a8:0b:47:cd:97:
a9:11:5b:26:70:57:f9:19:e7:86:74:b3:be:23:54:c7:2a:ab:
f9:05:ab:57:bd:99:0d:8c:44:f2:e8:10:41:b7:f5:4f:8d:b0:
39:9e:cf:7a:85:a1:d6:55:1c:b7:7a:18:40:8e:ba:32:d2:c6:
cc:10:01:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 6 16:07:23 2023 by rpki-client on console-ams.rpki-client.org