Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/32357886CC6B11EC86ACA756C4F9AE02.roa
File: 32357886CC6B11EC86ACA756C4F9AE02.roa (raw, json)
Hash identifier: LhJahMQYsYC4BfL2tyTi/ezaZcAKACvHLbBEgjj6/pQ=
Subject key identifier: 47:4A:46:58:57:1B:9D:F0:EA:5E:FF:5C:7A:26:83:10:07:AF:30:CA
Certificate issuer: /CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Certificate serial: 2765
Authority key identifier: F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/32357886CC6B11EC86ACA756C4F9AE02.roa
Signing time: Wed 28 Jun 2023 16:02:29 +0000
ROA not before: Wed 28 Jun 2023 16:02:29 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 136050
IP address blocks: 122.254.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10085 (0x2765)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Validity
Not Before: Jun 28 16:02:29 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=649c5994-5381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1a:ca:47:5d:ca:be:d9:68:10:f5:e2:ef:13:
aa:35:b4:c5:16:4e:3f:a4:ae:41:45:e0:96:0a:2a:
61:39:e8:ca:b6:f2:a5:79:9b:0b:ca:3c:59:d4:2d:
6a:04:7c:09:ca:d7:0e:a9:d6:33:ac:f7:4d:b8:69:
d0:62:61:95:29:95:bb:17:97:53:6d:99:2e:89:bd:
4b:55:a7:83:36:43:84:d6:ff:c5:02:07:da:a9:7e:
6e:f3:96:a0:6f:8f:d5:a4:2a:1a:0a:02:df:8e:04:
f6:0e:4f:b8:00:95:75:fa:6d:e6:3b:c0:83:30:73:
45:8d:d9:7f:a9:57:ba:48:12:4b:6d:a7:df:1f:f1:
c1:2a:55:81:14:66:50:73:ac:4e:5a:8c:83:b0:cb:
75:05:c5:c0:9d:45:43:02:b6:8b:ca:4a:f6:90:dc:
9c:11:12:17:e3:b0:a2:48:e9:61:f8:af:be:f8:1e:
85:00:0a:98:7a:70:a1:3f:36:bd:f4:c5:af:57:38:
05:94:5b:8a:78:98:b8:a9:92:f3:01:a2:eb:fd:19:
43:dd:ef:8c:69:58:02:bf:fe:4e:45:75:7f:8e:44:
49:1c:7e:c6:c7:24:34:6f:d5:56:01:84:eb:c8:86:
e3:1a:d6:ca:3f:30:6d:cf:0a:a9:18:0b:10:3c:07:
0d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:4A:46:58:57:1B:9D:F0:EA:5E:FF:5C:7A:26:83:10:07:AF:30:CA
X509v3 Authority Key Identifier:
keyid:F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/8A5-TIBTz_oGjrc-lYiS3YvmGow.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/32357886CC6B11EC86ACA756C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.71.0/24
Signature Algorithm: sha256WithRSAEncryption
82:61:20:37:d7:82:83:76:e5:56:4a:be:56:4b:27:04:bf:bf:
fb:5d:fb:a5:f9:c7:07:01:5c:4e:df:f0:88:ea:0d:40:26:a2:
dd:d7:e8:27:e1:89:dc:5c:45:7b:c7:54:1a:c9:4a:a2:d6:b6:
dc:f3:d4:4b:e2:62:b3:2c:dc:f8:c0:30:d3:95:c6:49:e0:b1:
eb:07:1f:d0:fa:b3:35:30:b8:af:48:b4:5b:c9:70:bc:be:3c:
e1:0c:e0:06:90:72:cd:9e:4a:03:1a:e9:83:07:29:5e:8f:ae:
6f:da:3a:3d:89:fe:5a:69:2c:a3:17:61:b6:6a:c8:5a:d6:24:
f8:81:e3:e6:d7:f5:c1:40:7e:74:b5:de:36:f4:43:e9:d2:00:
ae:ce:6a:f4:58:60:47:de:2f:bc:c1:a2:a4:ba:d1:09:31:9a:
fd:05:d0:f6:32:f2:eb:eb:24:86:2b:4e:ca:dc:a0:6d:95:2a:
c3:ce:f4:a5:34:20:7e:52:0a:98:64:84:e3:3b:2c:32:fb:cf:
1d:a9:13:21:10:88:91:43:04:4e:d4:9e:ee:80:f1:9e:f8:d8:
9c:cc:a0:ba:92:9f:83:d4:50:2b:b6:aa:0d:26:88:45:54:fa:
bc:1d:3f:97:a5:53:8c:1f:6a:99:96:ae:05:52:af:d8:2b:ac:
1c:54:f2:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:40 2024 by rpki-client on console-ams.rpki-client.org