Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91268DC/D438C2EC461211EEBDF7946CC4F9AE02/E04A9328B4D811EE8D717F53C4F9AE02.roa
File: E04A9328B4D811EE8D717F53C4F9AE02.roa (raw, json)
Hash identifier: YmgoQBf8IHpzpiHPr9WLBe1WUwHWtYswDrOQTKWaq78=
Subject key identifier: 0C:C0:62:CA:2F:E8:07:4C:0A:8F:80:DE:D6:31:27:F7:7F:75:C3:FD
Certificate issuer: /CN=A91268DC/serialNumber=C1B440EAB44AA587908016E9BD4B32FDE13F44CC
Certificate serial: C9
Authority key identifier: C1:B4:40:EA:B4:4A:A5:87:90:80:16:E9:BD:4B:32:FD:E1:3F:44:CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbRA6rRKpYeQgBbpvUsy_eE_RMw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91268DC/D438C2EC461211EEBDF7946CC4F9AE02/E04A9328B4D811EE8D717F53C4F9AE02.roa
Signing time: Tue 23 Jul 2024 07:45:32 +0000
ROA not before: Tue 23 Jul 2024 07:45:32 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 7616
IP address blocks: 203.130.128.0/19 maxlen: 20
203.147.16.0/20 maxlen: 21
203.147.32.0/20 maxlen: 21
203.147.48.0/20 maxlen: 20
203.147.54.0/24 maxlen: 24
203.156.18.0/24 maxlen: 24
203.156.48.0/20 maxlen: 20
203.156.64.0/20 maxlen: 20
203.156.80.0/20 maxlen: 20
203.156.128.0/18 maxlen: 19
203.156.146.0/24 maxlen: 24
203.156.147.0/24 maxlen: 24
203.156.148.0/24 maxlen: 24
203.156.149.0/24 maxlen: 24
203.156.150.0/24 maxlen: 24
203.156.152.0/21 maxlen: 21
203.156.152.0/24 maxlen: 24
2403:bf00::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 201 (0xc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91268DC/serialNumber=C1B440EAB44AA587908016E9BD4B32FDE13F44CC
Validity
Not Before: Jul 23 07:45:32 2024 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=669f5f9c-8419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cc:e6:2c:e3:4a:d6:3c:01:85:53:02:68:22:
3d:82:e7:fc:0c:bf:70:85:2d:21:e5:5d:28:af:02:
38:1c:19:b5:b5:22:f4:a9:7a:17:2a:ea:d5:3d:ac:
3a:f1:52:f4:41:cb:52:f4:94:61:82:c4:25:04:30:
97:2e:0b:63:6d:0a:7a:0a:d9:74:de:d1:f5:02:e9:
0f:e0:3a:2f:0b:a8:a0:ef:4c:8e:cb:c7:63:65:18:
cb:65:13:47:f6:f3:8e:7b:4b:3c:8d:82:c1:90:fa:
4d:db:0d:ff:45:98:62:b2:97:71:30:57:f4:87:36:
70:88:84:9d:f0:e6:20:a4:9b:64:56:0b:7b:b9:77:
38:6b:bd:89:b6:b1:33:19:c0:06:f9:35:07:e6:d7:
e5:63:00:a1:5f:a1:ef:8a:ca:75:80:4d:f5:a8:76:
d0:69:23:cf:67:18:50:26:19:40:a2:54:1c:d4:9e:
11:68:46:c3:9a:9b:90:aa:66:02:aa:f1:42:70:82:
97:8d:e9:a8:dd:44:31:c2:20:82:9d:19:6a:d9:e6:
b3:fd:d2:a4:d5:ee:fa:d4:ec:4f:87:94:8b:a8:1e:
ab:b7:6d:af:dd:9c:88:12:19:bb:86:55:2c:ae:40:
bf:0d:97:10:7f:0e:e8:11:4d:34:c3:64:76:b2:8d:
2c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C0:62:CA:2F:E8:07:4C:0A:8F:80:DE:D6:31:27:F7:7F:75:C3:FD
X509v3 Authority Key Identifier:
keyid:C1:B4:40:EA:B4:4A:A5:87:90:80:16:E9:BD:4B:32:FD:E1:3F:44:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91268DC/D438C2EC461211EEBDF7946CC4F9AE02/wbRA6rRKpYeQgBbpvUsy_eE_RMw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbRA6rRKpYeQgBbpvUsy_eE_RMw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91268DC/D438C2EC461211EEBDF7946CC4F9AE02/E04A9328B4D811EE8D717F53C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.130.128.0/19
203.147.16.0-203.147.63.255
203.156.18.0/24
203.156.48.0-203.156.95.255
203.156.128.0/18
IPv6:
2403:bf00::/32
Signature Algorithm: sha256WithRSAEncryption
61:01:88:75:67:f7:92:3a:0b:4e:7b:13:93:59:b1:48:c3:a8:
32:f8:c9:ac:cb:ad:c2:db:4f:4c:95:8c:99:d0:f8:80:9b:08:
6c:a5:ca:d8:da:cc:7e:fd:43:7a:7e:a3:72:98:5f:12:a3:c8:
07:af:b5:d9:cd:e8:c0:6e:22:1f:83:46:78:19:6d:32:26:24:
95:05:a8:98:5f:b8:92:10:f9:1b:1c:68:50:cc:64:28:8b:8c:
fd:a0:33:31:14:fd:f5:73:3f:41:77:01:a4:25:cf:d3:5a:98:
75:52:55:64:8b:dd:35:3a:aa:86:7e:9b:76:fd:29:4a:52:3d:
72:88:8c:2b:9c:c5:55:8d:c8:ba:07:b6:a8:0d:d4:9a:8f:b8:
03:7a:86:1c:ab:a2:f2:8a:fd:f9:82:43:32:88:f9:13:1a:24:
11:7d:24:e7:1d:b2:a8:71:df:f1:eb:5f:05:4d:e2:02:17:f1:
48:75:27:00:f9:f5:42:52:36:cf:76:aa:38:86:2c:de:12:7e:
df:70:99:25:55:ca:ba:b1:a0:79:6b:58:5c:7b:ca:a5:c0:3c:
47:72:8e:05:84:54:12:86:75:2a:ca:44:d8:65:a1:18:8d:4e:
15:a4:c3:05:ef:1e:f8:fc:16:c4:5b:b1:1c:51:77:e8:ee:1c:
36:bf:5f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 8 14:53:11 2024 by rpki-client on console-fra.rpki-client.org