Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919E833/4AA3E6E2C64B11E495FF9635C4F9AE02/AC6C73143DC611EBA35AB51DC4F9AE02.roa
File: AC6C73143DC611EBA35AB51DC4F9AE02.roa (raw, json)
Hash identifier: UO464ThJKYo3O+WV+T2FV4Myi0TwjGG3UUKTs91MBiU=
Subject key identifier: 1B:35:EC:70:DC:E8:3E:A8:8A:AA:D2:C7:6B:57:E7:78:78:8C:8A:5B
Certificate issuer: /CN=A919E833/serialNumber=48AAE00D13DFB3CCDFB3A7D25FDC356FADC5BEC8
Certificate serial: 2166
Authority key identifier: 48:AA:E0:0D:13:DF:B3:CC:DF:B3:A7:D2:5F:DC:35:6F:AD:C5:BE:C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SKrgDRPfs8zfs6fSX9w1b63Fvsg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919E833/4AA3E6E2C64B11E495FF9635C4F9AE02/AC6C73143DC611EBA35AB51DC4F9AE02.roa
Signing time: Fri 30 Apr 2021 16:21:52 +0000
ROA not before: Fri 30 Apr 2021 16:21:52 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 55514
IP address blocks: 110.164.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8550 (0x2166)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919E833/serialNumber=48AAE00D13DFB3CCDFB3A7D25FDC356FADC5BEC8
Validity
Not Before: Apr 30 16:21:52 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=608c2ea0-83b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:38:8f:ee:9d:d6:0d:76:5f:d9:da:87:84:4d:
13:5f:51:5e:ed:59:50:0e:12:2a:ef:84:a8:7c:0c:
a0:19:98:c7:62:07:d3:f2:26:a2:3f:fc:78:d1:cd:
e9:bb:f3:a6:96:ed:06:ea:45:72:72:1a:b4:41:0c:
18:49:38:86:9e:bb:ae:da:1d:ea:9a:45:48:89:05:
80:8c:ed:96:7b:c5:84:f7:bf:ff:38:69:99:f2:34:
a1:e8:0e:0f:e3:7d:f2:f3:91:67:04:49:32:e7:cf:
ce:bb:ac:65:01:2f:83:87:3a:39:3a:d5:00:c2:18:
3f:83:5b:fe:24:62:66:dd:ae:e7:9c:63:b0:78:08:
15:7c:01:99:ee:21:ed:75:34:32:c0:7c:ae:b9:69:
98:ce:27:11:21:7f:85:0f:92:6c:b7:9e:9f:69:35:
73:2e:83:da:f7:74:56:b1:7c:cb:be:ae:37:6f:c6:
31:f4:33:8e:f7:2e:41:32:8b:52:4e:eb:f8:51:6d:
8a:70:f0:d3:d2:8e:98:d7:de:a2:cf:bd:ff:d1:85:
9b:3f:76:63:3e:21:86:54:ab:a8:a7:6e:52:0a:93:
5f:b0:4d:b6:28:8c:12:ed:e6:1c:e4:09:90:3b:40:
96:b0:7b:a2:17:ff:f6:43:42:8e:5e:a7:ae:ca:56:
fa:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:35:EC:70:DC:E8:3E:A8:8A:AA:D2:C7:6B:57:E7:78:78:8C:8A:5B
X509v3 Authority Key Identifier:
keyid:48:AA:E0:0D:13:DF:B3:CC:DF:B3:A7:D2:5F:DC:35:6F:AD:C5:BE:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919E833/4AA3E6E2C64B11E495FF9635C4F9AE02/SKrgDRPfs8zfs6fSX9w1b63Fvsg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SKrgDRPfs8zfs6fSX9w1b63Fvsg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E833/4AA3E6E2C64B11E495FF9635C4F9AE02/AC6C73143DC611EBA35AB51DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
110.164.196.0/24
Signature Algorithm: sha256WithRSAEncryption
05:fc:5d:17:f3:5b:c3:4b:d2:60:ac:a1:10:12:3e:e9:ef:18:
47:ef:12:aa:ac:64:61:cd:26:03:ed:ef:8c:db:c9:61:1c:78:
f1:b3:7a:38:9f:15:66:c9:dc:56:c7:87:3d:d8:7f:a9:39:0f:
0f:d7:3b:30:15:eb:b3:38:f8:77:f7:9c:52:4a:d6:2d:8c:0d:
45:0e:3d:e6:d2:63:08:bc:00:2b:61:cf:d7:b5:85:4f:32:66:
af:c9:91:aa:83:d8:d4:9d:8d:4c:b2:1f:5f:19:9d:5e:fe:32:
52:49:f8:2c:80:a8:1a:85:29:05:79:06:96:26:ed:26:93:5a:
52:6a:90:9e:63:d7:0e:e3:d4:10:77:b4:ad:f8:e8:e2:6e:e7:
ab:5c:2b:85:0a:b6:78:e8:7b:3b:92:85:1f:45:fe:81:4c:17:
3d:68:5c:de:a0:31:78:a5:e1:08:78:c9:51:24:3a:e3:0c:54:
68:da:01:30:be:e4:34:6c:ce:e5:47:92:e9:86:8a:fa:59:f5:
e8:a0:07:d3:f2:fe:d8:68:5e:53:01:c2:8c:b1:b8:8e:8a:c2:
35:cd:6e:bd:f0:c2:23:93:eb:16:bc:a2:61:ed:c4:26:aa:e6:
bc:42:3b:8c:aa:c4:de:ac:e8:e8:94:d4:72:a3:88:d5:9d:f1:
fa:05:40:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:35 2024 by rpki-client on console-fra.rpki-client.org