Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE0C4/63A92766F14711E99A9AB712C4F9AE02/A05EBBFE659411EB8FC6A242C4F9AE02.roa
File: A05EBBFE659411EB8FC6A242C4F9AE02.roa (raw, json)
Hash identifier: 3NGu7CIlIWrSc3RFdqm0CIGTWz5VD7ukVfTIsJm+TtA=
Subject key identifier: 41:DF:59:B4:A4:13:27:41:B4:1A:D0:C7:B5:5E:B5:1E:E2:9E:6A:98
Certificate issuer: /CN=A91AE0C4/serialNumber=412B480176124E0884602689602C2AE574F0B876
Certificate serial: 0AD1
Authority key identifier: 41:2B:48:01:76:12:4E:08:84:60:26:89:60:2C:2A:E5:74:F0:B8:76
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QStIAXYSTgiEYCaJYCwq5XTwuHY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE0C4/63A92766F14711E99A9AB712C4F9AE02/A05EBBFE659411EB8FC6A242C4F9AE02.roa
Signing time: Sun 28 Aug 2022 19:56:00 +0000
ROA not before: Sun 28 Aug 2022 19:56:00 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 140220
IP address blocks: 161.29.208.0/20 maxlen: 24
161.65.208.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2769 (0xad1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE0C4/serialNumber=412B480176124E0884602689602C2AE574F0B876
Validity
Not Before: Aug 28 19:56:00 2022 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=630bc850-0818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:16:25:7b:0c:d0:c8:93:41:2d:63:fc:8f:60:
39:37:78:40:5f:34:4e:5b:af:2e:42:f8:b8:a1:8b:
bc:21:22:ff:f7:f0:7c:30:de:ec:a3:04:18:f4:da:
46:44:e5:d9:47:cd:72:a3:11:2d:ca:26:40:df:e8:
b7:08:ce:0d:eb:23:a1:93:5c:01:27:2c:f4:bb:f2:
08:95:6e:da:c8:73:56:73:69:01:05:21:da:f1:be:
62:07:86:95:fc:b4:07:f4:65:43:91:60:3c:0b:44:
38:16:8d:86:07:e1:fb:80:55:0e:9b:72:99:55:92:
84:8b:12:4c:5f:67:d4:55:02:db:b6:be:31:58:0e:
e1:bf:c2:07:9d:ff:36:38:a8:30:e2:91:69:62:e8:
b5:32:8b:3f:2c:ab:0d:57:51:64:4d:54:85:a3:70:
dc:25:2d:72:0d:b0:55:a0:b7:5a:54:ce:20:aa:93:
a3:c5:e6:ee:bd:60:bd:5c:30:69:c3:4d:c2:87:03:
45:b3:57:b8:9a:e1:de:e2:ed:cb:93:d3:89:e6:06:
3c:d2:8d:e6:81:f5:f0:4e:4e:b9:aa:d9:29:f0:0a:
b3:6f:39:98:2d:5c:ab:4e:25:ca:1b:fe:db:c8:c3:
e4:dd:10:da:15:d1:76:24:90:d2:e7:ce:11:a4:38:
92:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:DF:59:B4:A4:13:27:41:B4:1A:D0:C7:B5:5E:B5:1E:E2:9E:6A:98
X509v3 Authority Key Identifier:
keyid:41:2B:48:01:76:12:4E:08:84:60:26:89:60:2C:2A:E5:74:F0:B8:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE0C4/63A92766F14711E99A9AB712C4F9AE02/QStIAXYSTgiEYCaJYCwq5XTwuHY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QStIAXYSTgiEYCaJYCwq5XTwuHY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE0C4/63A92766F14711E99A9AB712C4F9AE02/A05EBBFE659411EB8FC6A242C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.29.208.0/20
161.65.208.0/20
Signature Algorithm: sha256WithRSAEncryption
5f:35:ae:58:49:c9:84:78:69:cb:b1:d8:4a:89:21:cc:47:28:
d7:9b:ce:0c:92:a8:1a:9f:8d:39:06:b6:01:c4:42:0e:40:3b:
9e:1a:ee:4c:65:56:9b:36:71:29:08:99:21:55:97:29:ed:10:
a1:1c:77:2c:0e:24:e1:53:46:41:21:54:0b:ef:c9:4e:5b:19:
1d:85:db:ca:10:f1:a6:cc:00:af:ac:1c:2e:c8:e2:d9:57:93:
72:cb:e7:f8:53:79:4c:ff:ae:0d:0c:32:1f:d1:24:ef:b8:f0:
8a:53:cd:20:4b:ff:70:39:cd:8a:f8:85:eb:82:cf:c6:d3:b2:
d4:0d:d7:d3:71:4a:09:87:0f:68:a0:01:2c:35:f2:1d:a6:1f:
10:8c:37:93:45:c1:c8:89:18:f3:24:99:4e:8b:78:19:92:95:
20:b4:e0:1a:18:2a:a3:b9:69:af:9a:40:77:36:3c:fa:e0:88:
d5:fa:55:5f:ad:1e:57:3d:75:15:01:06:49:c4:60:6f:ce:56:
11:c1:0d:62:5a:c9:42:51:6e:6b:83:b1:e6:36:bc:f7:c9:ed:
ec:0f:ee:89:bd:5c:64:22:86:58:2b:01:e4:2d:b9:5c:f7:fe:
fe:d9:f2:71:d7:d5:d8:32:b2:93:ac:6e:60:a8:2d:85:87:b7:
9c:0e:47:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:04 2023 by rpki-client on console-fra.rpki-client.org