Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE0C4/6A9E3BD8F14711E99A9AB712C4F9AE02/F27BF0FA28B611ED8F055569C4F9AE02.roa
File: F27BF0FA28B611ED8F055569C4F9AE02.roa (raw, json)
Hash identifier: Fc/R8gQTw3MXd7ECYkzryB0iHE9vZAgyYKKD8xfEnok=
Subject key identifier: 8D:E4:7E:2F:71:C1:C4:FC:CC:A5:05:8D:5F:F3:FF:C4:B2:BB:A5:9D
Certificate issuer: /CN=A91AE0C4/serialNumber=E11FE937006A25D7C605A5E43B492B286C64998C
Certificate serial: 0B36
Authority key identifier: E1:1F:E9:37:00:6A:25:D7:C6:05:A5:E4:3B:49:2B:28:6C:64:99:8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4R_pNwBqJdfGBaXkO0krKGxkmYw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE0C4/6A9E3BD8F14711E99A9AB712C4F9AE02/F27BF0FA28B611ED8F055569C4F9AE02.roa
Signing time: Tue 30 Aug 2022 22:56:14 +0000
ROA not before: Tue 30 Aug 2022 22:56:14 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 26506
IP address blocks: 202.49.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2870 (0xb36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE0C4/serialNumber=E11FE937006A25D7C605A5E43B492B286C64998C
Validity
Not Before: Aug 30 22:56:14 2022 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=630e958d-1b18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2d:df:d8:50:ad:4e:6d:72:23:f9:f0:23:95:
f4:61:70:15:95:ed:8e:00:42:ab:47:ab:c1:f1:81:
62:95:56:37:20:9c:3f:5d:7c:c8:fa:01:57:20:a7:
eb:a9:ff:00:a7:41:ec:89:9c:28:2a:ee:c5:bb:2d:
43:bf:e6:c5:3b:c2:40:6e:a3:b9:37:2f:65:f7:29:
6e:53:c3:a8:dd:75:6e:0f:eb:10:03:f5:5a:8d:b9:
46:db:d0:6b:ff:7a:ef:76:0c:43:62:cb:c6:ea:36:
0f:0d:eb:fd:59:bd:a8:dd:9a:4b:5e:f0:38:bf:fa:
b6:4f:27:9f:92:f3:50:4b:09:38:91:c2:fc:f5:73:
e8:6e:1b:7c:65:df:b6:8b:72:ab:59:47:04:b7:e3:
66:18:18:1d:99:eb:ed:e9:cc:c6:59:b1:b1:47:eb:
3a:af:c4:d4:de:e4:96:1f:f4:c9:1d:5c:71:ef:dd:
de:33:0a:8b:3a:cd:8b:e3:47:4d:45:c7:1d:48:5a:
eb:12:d3:e6:92:8c:c1:e9:bc:e1:1f:39:c5:c9:58:
a0:93:e0:e4:ec:b8:08:5e:4f:be:57:c7:0b:e8:57:
10:1e:71:69:5b:19:54:0c:e5:8b:43:6d:4b:b3:a9:
e0:fb:9c:ac:fb:61:16:ce:57:36:2b:9b:28:c7:92:
ef:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:E4:7E:2F:71:C1:C4:FC:CC:A5:05:8D:5F:F3:FF:C4:B2:BB:A5:9D
X509v3 Authority Key Identifier:
keyid:E1:1F:E9:37:00:6A:25:D7:C6:05:A5:E4:3B:49:2B:28:6C:64:99:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE0C4/6A9E3BD8F14711E99A9AB712C4F9AE02/4R_pNwBqJdfGBaXkO0krKGxkmYw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4R_pNwBqJdfGBaXkO0krKGxkmYw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE0C4/6A9E3BD8F14711E99A9AB712C4F9AE02/F27BF0FA28B611ED8F055569C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.49.82.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:f0:76:18:b4:2f:46:8c:ad:cd:fe:56:2c:be:89:2b:72:8f:
3a:9b:eb:58:4e:1b:87:0c:87:60:53:0a:9c:0c:7d:09:a8:22:
d7:72:37:92:18:3b:63:19:7b:44:eb:8a:8f:51:91:02:af:45:
6c:1b:80:b5:3d:5f:d0:b1:0a:3b:1e:6d:e5:78:ba:3a:fa:6f:
6e:5d:95:46:af:f8:8c:e5:4a:8a:87:94:c3:29:58:3d:76:ed:
e1:44:c9:26:0b:73:92:44:c8:e4:01:41:7b:c4:3b:7a:5a:29:
2c:45:a4:84:0b:65:17:81:80:70:e4:0b:e3:dd:e4:6f:43:e3:
2f:4c:6e:bb:8a:57:d5:b9:5d:b1:97:03:22:5b:f5:8f:2c:a1:
84:53:1b:ea:36:fc:90:e5:0c:14:08:ad:37:20:7c:87:d9:c3:
65:20:8c:da:d4:15:e7:41:86:b5:55:54:2d:3a:ba:a6:ed:99:
35:cb:45:bd:56:6c:90:1a:6a:b1:00:a9:6d:20:34:68:ab:19:
2b:da:dd:46:df:aa:5c:02:38:1d:0e:7d:24:6a:13:8e:c0:27:
ad:eb:02:b1:cf:f7:f8:90:06:0e:f7:a6:4d:35:85:13:96:84:
fd:7f:26:ce:90:0c:cc:7b:f0:a5:4f:87:67:6e:6b:e0:7c:f1:
3e:be:2a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:55 2024 by rpki-client on console-ams.rpki-client.org