Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/A31B6E3C112911ECA8903C23C4F9AE02.roa
File: A31B6E3C112911ECA8903C23C4F9AE02.roa (raw, json)
Hash identifier: bZdxWGFINe68qOlQ9OAkU3+G/AHuBUhpMFgycLN4cqg=
Subject key identifier: 52:94:C7:1C:94:94:90:15:57:B6:BB:26:33:2F:20:0E:6A:F8:70:C2
Certificate issuer: /CN=A91175BA/serialNumber=46E87CFFDFB0C16282AB1EEAC6DD2427328376A6
Certificate serial: 021B
Authority key identifier: 46:E8:7C:FF:DF:B0:C1:62:82:AB:1E:EA:C6:DD:24:27:32:83:76:A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ruh8_9-wwWKCqx7qxt0kJzKDdqY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/A31B6E3C112911ECA8903C23C4F9AE02.roa
Signing time: Wed 02 Mar 2022 02:51:44 +0000
ROA not before: Wed 02 Mar 2022 02:51:44 +0000
ROA not after: Sun 28 May 2023 00:00:00 +0000
asID: 133551
IP address blocks: 203.175.12.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 539 (0x21b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91175BA/serialNumber=46E87CFFDFB0C16282AB1EEAC6DD2427328376A6
Validity
Not Before: Mar 2 02:51:44 2022 GMT
Not After : May 28 00:00:00 2023 GMT
Subject: CN=621edbc0-971a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ac:bd:8c:0c:80:32:32:8e:04:22:ce:1e:1c:
64:9c:7d:57:19:70:5b:9f:55:b2:fe:9a:b0:e0:2b:
71:82:51:3c:97:fe:d2:ec:0c:a9:af:f1:60:67:d3:
80:f1:1a:7c:52:4b:21:cf:f3:c6:5d:85:33:81:bc:
94:31:a9:9c:af:12:9f:ed:c8:12:80:a3:60:f1:9f:
a8:2d:24:fe:3b:72:21:63:37:f6:5f:63:ce:95:01:
4d:42:39:33:f9:c5:58:9d:6a:83:43:b0:99:0e:35:
d7:de:a2:9b:4f:4f:fe:26:18:b0:36:21:be:44:4f:
91:7f:97:d7:13:1d:f3:b4:6a:0d:f8:59:45:7d:62:
13:b2:c5:fd:3c:9f:92:9d:6e:28:99:c5:09:a7:bb:
c1:92:1b:5d:6f:48:2d:a2:6b:71:ec:7a:69:fe:5b:
a6:d4:79:d0:fc:33:af:b9:dc:e3:48:4f:32:f0:02:
c8:65:87:90:c2:77:28:27:4b:9c:92:49:97:9a:3d:
f8:de:fd:96:1f:fb:a8:2d:9e:42:2b:9d:37:f7:e2:
bb:5f:f8:ac:41:04:b5:4b:c3:63:b3:3e:91:80:ba:
99:2c:6d:b0:39:13:c5:7e:92:92:e7:0e:6a:a5:52:
56:9d:65:72:92:de:1d:a9:0b:2f:cb:f8:aa:f3:22:
0b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:94:C7:1C:94:94:90:15:57:B6:BB:26:33:2F:20:0E:6A:F8:70:C2
X509v3 Authority Key Identifier:
keyid:46:E8:7C:FF:DF:B0:C1:62:82:AB:1E:EA:C6:DD:24:27:32:83:76:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/Ruh8_9-wwWKCqx7qxt0kJzKDdqY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ruh8_9-wwWKCqx7qxt0kJzKDdqY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/A31B6E3C112911ECA8903C23C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.175.12.0/22
Signature Algorithm: sha256WithRSAEncryption
01:35:3a:02:b3:ba:05:1f:f7:b0:41:4f:23:94:4b:ec:ab:69:
59:b9:6f:18:a7:03:19:a9:f0:38:29:2a:da:5f:bf:dc:62:64:
51:52:4d:b0:de:21:ef:fe:50:44:18:0e:5b:54:40:85:80:32:
17:fa:a5:4e:64:c5:b7:4e:63:0a:52:bc:c3:69:21:90:e2:d1:
09:82:f0:c5:c5:74:64:a9:4e:50:c6:8e:32:db:a6:08:3f:74:
02:96:a7:7f:65:a3:02:c7:eb:b8:1a:df:2d:2c:f6:76:2f:14:
5d:4e:48:f1:90:e4:85:47:5a:7b:97:1f:9c:6e:49:c5:b1:c9:
e7:61:cd:50:99:c1:c7:1e:9f:8e:50:0c:75:79:64:1d:75:21:
a5:2f:31:49:b6:2f:be:9a:df:a4:de:5b:0a:04:a1:05:f1:3f:
88:92:18:64:ca:06:8b:92:e0:32:d1:49:2a:22:8f:d9:20:9e:
a7:28:0f:f3:7b:00:3a:54:8c:ac:94:66:b3:06:d7:a9:22:52:
40:64:b1:a3:9d:ae:da:b7:d5:7d:1c:75:3e:ce:02:87:d4:1e:
f3:8a:a8:57:0c:b2:25:dc:bc:7c:42:97:0c:ec:a9:9f:56:79:
ab:29:8d:d8:58:e2:b6:02:59:57:87:fa:51:f4:fa:fd:38:7f:
8b:03:cb:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:35 2023 by rpki-client on console-fra.rpki-client.org