Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A5CA/5D634986E96211EAA4658420C4F9AE02/D31142BCC14411ECB81F4A78C4F9AE02.roa
File: D31142BCC14411ECB81F4A78C4F9AE02.roa (raw, json)
Hash identifier: IzBoBpgs7QcdCT3f2ovTKdBPHQuPLThIX+7PYgskvK0=
Subject key identifier: B6:36:C3:AE:31:F4:E5:8B:59:D8:EC:E2:7C:05:A3:7C:A4:94:75:A0
Certificate issuer: /CN=A918A5CA/serialNumber=392570554339A9B5B04C45C4E4B8614DC6F43CE2
Certificate serial: 051C
Authority key identifier: 39:25:70:55:43:39:A9:B5:B0:4C:45:C4:E4:B8:61:4D:C6:F4:3C:E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSVwVUM5qbWwTEXE5LhhTcb0POI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A5CA/5D634986E96211EAA4658420C4F9AE02/D31142BCC14411ECB81F4A78C4F9AE02.roa
Signing time: Thu 02 Jun 2022 11:27:29 +0000
ROA not before: Thu 02 Jun 2022 11:27:29 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 18254
IP address blocks: 123.253.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1308 (0x51c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A5CA/serialNumber=392570554339A9B5B04C45C4E4B8614DC6F43CE2
Validity
Not Before: Jun 2 11:27:29 2022 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=62989ea1-43fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:77:e5:24:b5:74:00:20:a8:d2:4d:f9:f1:fc:
8c:6e:bd:9e:cf:bd:72:90:6a:d7:61:95:c8:05:61:
9c:da:ce:e5:34:b7:6d:bb:53:49:3a:38:d7:00:ae:
6d:8b:a8:49:eb:11:74:57:5b:84:d2:22:e4:25:0d:
32:35:52:61:f2:15:40:18:85:c4:19:3b:c7:f3:5d:
71:32:da:07:cf:eb:d8:97:69:16:96:ca:d8:f8:e8:
71:d2:93:13:4e:29:b2:25:a2:66:3f:f1:26:7d:8e:
50:a2:1d:11:0e:0e:40:19:74:57:10:7c:b6:15:6f:
f3:e8:e4:17:45:5c:c6:95:c6:a4:77:d7:9e:1e:85:
64:75:3c:a5:3b:b5:7a:91:c1:36:17:a8:f1:0f:db:
2f:d3:a5:30:6f:0f:e4:a9:e2:7b:74:57:94:77:ec:
03:36:95:79:8d:0e:71:2a:31:81:f5:4c:24:06:ac:
4d:a2:c6:11:44:9d:89:88:17:82:1c:0c:fc:74:0b:
55:f9:85:15:02:50:b0:e1:1b:10:13:4b:ce:42:d8:
9a:b7:84:d7:af:e3:de:64:0c:5b:89:70:71:35:7a:
35:3d:92:8e:36:15:8e:5d:94:51:63:8c:d1:a0:9c:
f4:bb:9c:da:eb:ae:19:97:38:54:3e:b7:98:32:a6:
68:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:36:C3:AE:31:F4:E5:8B:59:D8:EC:E2:7C:05:A3:7C:A4:94:75:A0
X509v3 Authority Key Identifier:
keyid:39:25:70:55:43:39:A9:B5:B0:4C:45:C4:E4:B8:61:4D:C6:F4:3C:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A5CA/5D634986E96211EAA4658420C4F9AE02/OSVwVUM5qbWwTEXE5LhhTcb0POI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSVwVUM5qbWwTEXE5LhhTcb0POI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A5CA/5D634986E96211EAA4658420C4F9AE02/D31142BCC14411ECB81F4A78C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
123.253.111.0/24
Signature Algorithm: sha256WithRSAEncryption
03:f3:d1:b2:4d:e1:c5:78:98:94:a2:d7:22:c8:c8:e6:b1:b6:
22:71:1a:2b:2b:fd:4a:9e:54:d0:df:94:2d:94:05:fd:90:52:
45:9b:10:bf:c9:06:8c:85:d5:b2:e3:7d:a3:72:e1:9b:6d:0b:
ad:d7:35:ab:d1:f0:98:71:d3:2f:f3:60:fc:33:0e:95:e6:ce:
90:f9:fb:de:95:cd:8f:e3:3f:18:8b:f7:a0:c1:0a:f6:c1:55:
a0:2d:f5:1c:a0:c4:f1:13:e8:1a:c6:0c:00:c6:ec:88:e4:cb:
85:c0:77:d7:2e:5c:d3:14:23:90:42:f7:a2:cc:1b:55:c0:f4:
d5:ee:87:89:59:bc:79:2f:a6:4a:41:f5:8b:d8:55:57:c0:23:
66:f4:b9:ad:50:45:dc:af:bc:4d:b5:78:b7:0a:76:cf:58:ea:
aa:2b:75:59:6e:46:76:0e:c1:0c:53:4d:16:02:e7:14:62:2f:
30:d7:eb:f6:d9:d3:cd:52:9d:69:6b:20:e9:a9:bc:4b:92:43:
48:e1:6b:a0:7d:dd:df:31:14:57:6c:d0:36:d6:0b:3d:b0:be:
aa:bb:3f:91:b8:85:44:b5:c4:44:b8:46:c2:25:64:54:85:4d:
7f:33:4e:bd:ea:1a:45:ba:2d:47:87:34:fd:cd:db:5c:05:15:
68:35:56:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:49 2023 by rpki-client on console-fra.rpki-client.org