Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE0C4/6A9E3BD8F14711E99A9AB712C4F9AE02/FACC11F6FE9B11E987265674C4F9AE02.roa
File: FACC11F6FE9B11E987265674C4F9AE02.roa (raw, json)
Hash identifier: kwJPJNFHXLcQ/a2HbYAff/QVAlG7OrsxA5agRzh7Ej0=
Subject key identifier: 1B:A3:65:C8:98:58:F8:71:1A:85:D6:00:84:CF:F1:89:C1:60:82:F5
Certificate issuer: /CN=A91AE0C4/serialNumber=E11FE937006A25D7C605A5E43B492B286C64998C
Certificate serial: 0B2D
Authority key identifier: E1:1F:E9:37:00:6A:25:D7:C6:05:A5:E4:3B:49:2B:28:6C:64:99:8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4R_pNwBqJdfGBaXkO0krKGxkmYw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE0C4/6A9E3BD8F14711E99A9AB712C4F9AE02/FACC11F6FE9B11E987265674C4F9AE02.roa
Signing time: Sun 28 Aug 2022 19:56:15 +0000
ROA not before: Sun 28 Aug 2022 19:56:15 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 56030
IP address blocks: 60.234.73.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2861 (0xb2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE0C4/serialNumber=E11FE937006A25D7C605A5E43B492B286C64998C
Validity
Not Before: Aug 28 19:56:15 2022 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=630bc85f-c0b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:19:71:a8:78:6e:89:fa:e0:45:c5:78:90:91:
6d:7c:89:48:44:04:b5:f5:a7:84:43:7b:1b:0e:92:
27:40:2c:0a:41:14:c9:4f:69:5a:e7:09:d0:5a:12:
92:51:5c:9c:cc:a1:48:d6:fd:61:6c:aa:e7:1f:d4:
e5:37:c6:eb:4f:53:9f:ad:c0:c9:bb:a1:df:da:bc:
8c:7b:13:6c:bd:2b:79:b5:06:8f:41:c7:6e:00:32:
01:91:a3:f6:b6:9f:11:67:1a:a2:cb:84:fe:e4:78:
5d:68:79:c0:a7:b5:65:78:66:c3:83:db:9e:8c:55:
04:4a:ba:38:3b:6b:07:a0:12:a3:0b:26:a5:0b:b8:
33:aa:e7:ed:42:aa:41:9d:8f:33:ee:0c:47:58:34:
d2:55:89:24:05:e6:5d:9a:8c:f8:44:86:83:f3:1d:
09:f2:9a:d0:26:c8:08:4e:76:c2:da:fd:9a:95:ec:
19:6c:5e:42:fb:9e:81:7a:59:e4:cd:3f:3c:55:1f:
88:75:29:d5:6b:9d:a3:af:31:47:35:48:70:22:4c:
2d:56:46:62:91:28:ae:af:bc:f4:69:3d:a4:90:95:
ca:b1:11:6a:b5:ed:b5:fa:63:7e:6b:fd:20:cb:f4:
72:6b:7d:82:22:38:1f:70:98:53:a1:eb:f8:92:02:
61:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A3:65:C8:98:58:F8:71:1A:85:D6:00:84:CF:F1:89:C1:60:82:F5
X509v3 Authority Key Identifier:
keyid:E1:1F:E9:37:00:6A:25:D7:C6:05:A5:E4:3B:49:2B:28:6C:64:99:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE0C4/6A9E3BD8F14711E99A9AB712C4F9AE02/4R_pNwBqJdfGBaXkO0krKGxkmYw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4R_pNwBqJdfGBaXkO0krKGxkmYw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE0C4/6A9E3BD8F14711E99A9AB712C4F9AE02/FACC11F6FE9B11E987265674C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
60.234.73.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:f0:9f:46:98:b9:56:39:e4:07:ae:2d:1c:83:84:52:8d:cd:
af:aa:3a:e4:c1:25:ea:9a:83:fe:c7:ce:25:ea:98:34:2f:12:
2e:ab:66:fa:9e:58:6e:db:a7:1b:da:02:93:96:82:f1:32:40:
b3:13:83:bb:1d:b3:2e:a1:21:db:70:1d:42:7c:47:79:a2:69:
13:01:82:aa:bd:7a:6f:da:42:df:0d:d9:c6:1a:61:31:d5:74:
81:11:38:5c:71:d7:a9:97:7a:72:a3:23:ee:a4:7d:c4:4c:c3:
ed:ea:48:30:77:d2:c4:4e:4c:e2:7e:ab:94:a4:5f:2d:e2:15:
4b:31:d4:e2:ba:aa:be:54:91:f0:47:d6:70:cb:4e:bc:35:58:
4f:b0:ea:d9:a4:04:fa:b7:79:55:dd:3f:8b:2c:e2:6b:5a:93:
0f:1f:9a:64:e1:69:31:c8:83:51:76:f5:7b:41:8e:a4:7a:e8:
e1:ad:9a:0c:60:a5:22:c0:da:8c:96:b0:c9:62:13:8c:48:ce:
01:ce:75:48:35:63:fa:d5:32:01:f2:56:3a:47:33:75:4d:f2:
58:d2:fe:48:6a:df:7e:81:49:28:48:6f:de:08:4a:d8:18:64:
b0:4b:ad:16:7e:5b:b7:8c:25:7d:66:b0:77:b7:ae:4f:17:84:
d9:49:3a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:37 2024 by rpki-client on console-fra.rpki-client.org