Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91268DC/D438C2EC461211EEBDF7946CC4F9AE02/7ACDB77EC0DF11EE9A92587AC4F9AE02.roa
File: 7ACDB77EC0DF11EE9A92587AC4F9AE02.roa (raw, json)
Hash identifier: n0jJVFp/3zVKLFBk1hoe8RHHcqbd/4glS+OsRUGGB5k=
Subject key identifier: F4:72:16:C0:6B:1B:A2:5F:7B:39:1F:D7:CD:5D:3B:C8:31:96:FB:55
Certificate issuer: /CN=A91268DC/serialNumber=C1B440EAB44AA587908016E9BD4B32FDE13F44CC
Certificate serial: 63
Authority key identifier: C1:B4:40:EA:B4:4A:A5:87:90:80:16:E9:BD:4B:32:FD:E1:3F:44:CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbRA6rRKpYeQgBbpvUsy_eE_RMw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91268DC/D438C2EC461211EEBDF7946CC4F9AE02/7ACDB77EC0DF11EE9A92587AC4F9AE02.roa
Signing time: Thu 01 Feb 2024 08:54:17 +0000
ROA not before: Thu 01 Feb 2024 08:54:17 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 55423
IP address blocks: 203.130.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99 (0x63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91268DC/serialNumber=C1B440EAB44AA587908016E9BD4B32FDE13F44CC
Validity
Not Before: Feb 1 08:54:17 2024 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=65bb5c38-b049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:07:2c:21:4b:17:53:47:f8:84:cb:7c:74:10:
30:25:ee:4f:8a:05:59:fc:f2:77:c0:3a:5c:11:23:
b8:a8:1f:19:53:84:c1:d9:d3:5c:95:c5:28:a4:12:
7d:1d:ee:8e:ba:55:27:16:c1:f0:40:b5:65:3c:37:
c8:67:66:78:94:60:66:c3:ae:0c:8e:56:db:bd:ff:
da:8f:62:6c:38:56:6e:00:b1:69:bc:ae:01:26:2b:
68:52:4c:51:f7:d4:3a:2f:1d:89:7f:23:fb:c4:bf:
1e:dd:a8:bf:55:f4:95:95:15:2b:d8:a6:e8:22:93:
4b:c5:ca:d4:38:69:04:ed:0a:0e:13:b1:95:79:02:
2b:db:26:63:7c:8d:26:64:e5:59:e1:32:c0:a4:14:
cd:98:07:ed:ac:a8:f6:ad:30:ab:04:e3:b9:69:e9:
04:46:ef:22:4f:04:49:2a:f2:fe:53:35:d6:d1:84:
d5:4e:57:9e:c6:37:e3:c1:20:33:e8:2c:48:52:75:
9b:73:b8:79:bf:36:d3:66:a7:01:41:2f:e9:34:20:
7e:83:b9:ae:fb:05:7e:92:47:95:a4:8c:2a:41:60:
2f:1c:89:7f:02:9d:4e:81:ed:cc:2e:d3:ca:dd:56:
80:f0:48:53:73:7f:93:9c:85:07:bd:50:23:be:7b:
b4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:72:16:C0:6B:1B:A2:5F:7B:39:1F:D7:CD:5D:3B:C8:31:96:FB:55
X509v3 Authority Key Identifier:
keyid:C1:B4:40:EA:B4:4A:A5:87:90:80:16:E9:BD:4B:32:FD:E1:3F:44:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91268DC/D438C2EC461211EEBDF7946CC4F9AE02/wbRA6rRKpYeQgBbpvUsy_eE_RMw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbRA6rRKpYeQgBbpvUsy_eE_RMw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91268DC/D438C2EC461211EEBDF7946CC4F9AE02/7ACDB77EC0DF11EE9A92587AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.130.152.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:0d:1b:77:f5:02:03:81:b7:30:62:3a:ec:2e:d4:01:90:57:
df:13:ee:16:02:df:7a:19:6a:cf:4d:7b:22:22:8d:24:28:14:
bd:6a:3d:62:cc:6e:fe:b7:6c:cc:cf:38:44:0f:4d:e8:cb:08:
f6:f7:3b:8e:68:d1:7c:29:73:aa:bc:38:4e:c4:d5:2c:81:31:
ec:01:c8:31:51:6a:7a:eb:9b:6a:fb:6e:73:f0:16:11:d4:6c:
84:45:2d:25:09:68:5e:8e:da:d6:46:d5:06:1c:46:42:ab:b6:
d7:f2:c9:c5:e7:0a:94:3f:45:d1:1b:67:16:2c:5e:fb:3d:32:
60:eb:55:de:38:71:7e:79:3c:17:51:6d:2d:45:f5:b8:49:38:
4b:51:aa:2f:57:5e:07:96:24:46:49:38:ed:f2:49:d0:d0:9e:
9e:95:d9:57:c8:aa:7a:0c:2a:a3:ad:d3:79:73:3c:47:e3:c4:
2a:af:e5:76:e9:34:0a:5b:cc:96:01:49:9e:5c:55:38:5a:58:
48:25:e2:84:23:17:4c:f6:50:36:f3:de:22:b7:10:c1:08:5b:
54:9a:47:9b:42:ee:51:08:8c:fa:ad:c1:16:fd:45:19:bb:39:
5b:69:cc:81:36:33:e1:b9:62:5e:09:38:4c:1c:59:0a:d2:a8:
3f:38:7e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 8 14:53:11 2024 by rpki-client on console-fra.rpki-client.org