Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919E833/4AA3E6E2C64B11E495FF9635C4F9AE02/AA5D55703DC611EBA35AB51DC4F9AE02.roa
File: AA5D55703DC611EBA35AB51DC4F9AE02.roa (raw, json)
Hash identifier: Cig5XS4U9KGIMdhYWbUhs4vzu4I2BWKxcb690qbIM48=
Subject key identifier: 4C:BE:34:F1:33:21:FE:D5:65:73:9D:F4:1D:6C:AA:BC:55:D0:89:AF
Certificate issuer: /CN=A919E833/serialNumber=48AAE00D13DFB3CCDFB3A7D25FDC356FADC5BEC8
Certificate serial: 2160
Authority key identifier: 48:AA:E0:0D:13:DF:B3:CC:DF:B3:A7:D2:5F:DC:35:6F:AD:C5:BE:C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SKrgDRPfs8zfs6fSX9w1b63Fvsg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919E833/4AA3E6E2C64B11E495FF9635C4F9AE02/AA5D55703DC611EBA35AB51DC4F9AE02.roa
Signing time: Fri 30 Apr 2021 16:21:46 +0000
ROA not before: Fri 30 Apr 2021 16:21:46 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 45455
IP address blocks: 110.164.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8544 (0x2160)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919E833/serialNumber=48AAE00D13DFB3CCDFB3A7D25FDC356FADC5BEC8
Validity
Not Before: Apr 30 16:21:46 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=608c2e9a-0d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6d:77:d5:5d:a6:64:2d:aa:47:f2:ec:34:ad:
4a:f0:43:a4:f9:e6:8d:66:83:7a:15:ab:5e:96:bf:
5e:71:23:a6:d0:88:bd:7d:ef:df:32:54:e0:4e:10:
a9:40:6a:6e:27:6a:a2:80:08:7d:80:2c:cc:06:a3:
84:48:4c:69:27:85:dd:7e:d3:b1:e9:d0:eb:00:13:
da:a2:79:0f:0c:b3:88:d9:12:1d:ce:7d:3d:a8:58:
b1:7f:dd:7f:05:25:f7:6f:a5:a0:8b:14:c5:40:38:
19:63:3d:82:89:05:98:b9:8f:9d:ae:e8:10:2d:c0:
9e:2a:fb:0d:42:74:82:b3:4a:0e:b8:61:b5:08:88:
bf:b5:9e:c6:14:7c:5b:e1:bb:09:a1:d8:92:c6:a3:
c7:d2:a1:69:6f:36:74:b3:d0:6b:96:fd:0e:29:f6:
da:b5:e9:4e:db:d3:de:20:1e:79:b2:bc:3d:91:11:
1b:40:b5:1b:8e:9d:75:16:c0:46:ed:f1:8c:f6:bb:
ec:fd:84:f1:99:b1:29:fd:de:b4:9b:7a:89:5d:e5:
71:a5:e9:71:c9:26:b2:c5:26:4e:36:0b:71:d4:02:
ca:b3:5c:ab:2c:f1:84:92:33:ba:f6:8d:cb:11:3c:
3b:bf:95:39:f5:33:b8:cc:b4:81:3b:bb:43:44:f1:
f6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:BE:34:F1:33:21:FE:D5:65:73:9D:F4:1D:6C:AA:BC:55:D0:89:AF
X509v3 Authority Key Identifier:
keyid:48:AA:E0:0D:13:DF:B3:CC:DF:B3:A7:D2:5F:DC:35:6F:AD:C5:BE:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919E833/4AA3E6E2C64B11E495FF9635C4F9AE02/SKrgDRPfs8zfs6fSX9w1b63Fvsg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SKrgDRPfs8zfs6fSX9w1b63Fvsg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E833/4AA3E6E2C64B11E495FF9635C4F9AE02/AA5D55703DC611EBA35AB51DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
110.164.200.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:41:65:4d:5f:e3:41:dc:e3:68:3d:1e:5f:3b:88:e1:b9:d6:
21:d1:da:46:fd:5a:3f:3f:b0:8a:53:5d:21:c2:7f:ac:ae:de:
04:25:94:8a:35:99:37:16:0c:b6:32:a9:5d:41:8f:e3:14:c3:
db:c3:c7:cd:6a:d6:01:d6:64:c0:61:eb:41:25:31:3f:cc:6e:
36:4f:bc:ec:46:6a:5c:c5:99:0a:e6:e5:03:5d:e1:91:d3:bf:
1e:11:9a:fb:8b:c6:9f:5f:6e:46:d1:d1:04:80:3c:a4:3b:84:
f8:77:4a:56:49:8e:eb:7e:6b:d4:9d:5e:5d:69:0f:b6:5f:b0:
66:d1:73:14:60:a8:2e:03:88:f1:90:b5:e6:d1:a9:e6:88:10:
d5:7f:57:d9:8e:d9:34:3e:78:ab:e1:2c:fc:e1:27:20:0f:74:
0b:91:93:66:1c:47:8a:d3:06:c1:bb:46:5d:9d:bd:1d:4d:68:
4c:2f:d6:49:11:e8:4d:12:24:ba:2c:3f:cb:5e:c5:1a:7e:b4:
94:b0:56:72:fe:5f:ee:70:48:ed:f4:fc:9c:5f:06:d1:e6:b1:
bd:a9:19:13:65:f8:4b:8e:36:04:62:35:4a:43:2a:27:3a:49:
1d:50:5f:fe:15:80:d5:52:80:bd:e0:30:dd:c1:0c:03:45:40:
47:b9:93:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:49 2024 by rpki-client on console-ams.rpki-client.org