Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C533/9CC43306A74911EBB0302F82C4F9AE02/64403F54E46E11EB96CA2246C4F9AE02.roa
File: 64403F54E46E11EB96CA2246C4F9AE02.roa (raw, json)
Hash identifier: ZfeX2CglyQjKuvzUO+im0k0MCSB0pH50HMpBPlPxoDg=
Subject key identifier: 1A:5F:6D:A9:FF:CB:16:D6:A9:0C:95:0D:70:F9:B4:7F:C9:06:5F:0C
Certificate issuer: /CN=A912C533/serialNumber=AF96D111008404FF1B14516F7FCF67E928CEF666
Certificate serial: 01EE
Authority key identifier: AF:96:D1:11:00:84:04:FF:1B:14:51:6F:7F:CF:67:E9:28:CE:F6:66
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r5bREQCEBP8bFFFvf89n6SjO9mY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C533/9CC43306A74911EBB0302F82C4F9AE02/64403F54E46E11EB96CA2246C4F9AE02.roa
Signing time: Mon 20 Dec 2021 02:20:49 +0000
ROA not before: Mon 20 Dec 2021 02:20:49 +0000
ROA not after: Thu 02 Mar 2023 00:00:00 +0000
asID: 19905
IP address blocks: 133.250.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 494 (0x1ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C533/serialNumber=AF96D111008404FF1B14516F7FCF67E928CEF666
Validity
Not Before: Dec 20 02:20:49 2021 GMT
Not After : Mar 2 00:00:00 2023 GMT
Subject: CN=61bfe880-b343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0c:88:7f:8f:e9:65:64:ea:05:2d:ef:43:4e:
77:16:43:e0:ba:a7:52:20:2d:55:59:b1:21:ca:06:
be:40:d5:66:6d:5a:12:87:ef:35:98:0d:50:c1:ad:
10:03:53:1f:6c:31:a3:c4:92:bc:0d:84:ec:45:5f:
2a:63:ec:76:95:04:e0:f6:fa:29:20:ac:5a:7d:58:
8e:51:75:98:e5:1d:74:bb:67:fa:21:f6:c5:b7:53:
ea:35:31:f6:1b:02:b0:d1:13:2b:97:b9:45:e1:70:
22:d9:fc:9b:f0:73:4f:85:96:4e:d3:fb:ab:f1:71:
0c:7d:84:65:43:2e:a2:5b:82:87:94:ec:66:78:12:
3f:01:00:ad:7a:06:43:c5:b2:c3:42:12:89:f4:71:
f7:4a:20:d4:f0:dc:0f:11:60:bd:f8:d5:ac:09:3f:
9e:fe:8d:9a:c2:86:0c:55:43:54:5a:0b:bb:0e:84:
a7:da:e1:c9:e5:26:74:91:6a:08:43:8e:b9:f5:2e:
c7:c5:87:15:5b:c3:9d:3e:8c:45:4c:fe:db:7b:8a:
a7:7d:7e:21:e4:94:55:7a:df:a5:c6:ef:7a:e9:45:
f5:64:7f:e4:39:c6:01:6e:43:31:4e:d2:b0:0c:e3:
5c:8b:05:a6:1a:e6:89:7a:0a:ef:6a:e4:74:2a:b3:
77:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:5F:6D:A9:FF:CB:16:D6:A9:0C:95:0D:70:F9:B4:7F:C9:06:5F:0C
X509v3 Authority Key Identifier:
keyid:AF:96:D1:11:00:84:04:FF:1B:14:51:6F:7F:CF:67:E9:28:CE:F6:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C533/9CC43306A74911EBB0302F82C4F9AE02/r5bREQCEBP8bFFFvf89n6SjO9mY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r5bREQCEBP8bFFFvf89n6SjO9mY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C533/9CC43306A74911EBB0302F82C4F9AE02/64403F54E46E11EB96CA2246C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
133.250.128.0/17
Signature Algorithm: sha256WithRSAEncryption
8d:40:83:3f:1a:10:68:2d:1c:ec:14:6a:22:11:c1:3c:51:e2:
48:81:75:13:1b:03:6d:2f:a8:d9:c5:79:60:b4:9b:50:c5:ba:
5a:70:db:cb:2c:a2:99:f7:bd:5f:0a:df:3e:ee:e2:e5:ed:1b:
2d:36:80:b8:08:f8:4d:e4:f6:af:98:3b:63:d0:dc:c3:73:4f:
6b:ef:fc:96:f0:d5:26:f0:21:a1:8f:81:81:98:b5:f0:03:3b:
9d:03:7d:55:56:c1:a0:f3:89:23:e5:2e:5d:c3:d1:04:34:53:
dc:b9:89:9a:29:22:2f:0f:0a:1e:c9:1f:20:86:25:41:d8:3e:
ad:36:f6:be:42:52:85:2d:4c:e2:9f:f1:f1:43:37:d7:79:96:
6e:fb:b6:66:3d:c4:5e:67:38:2c:3c:ef:f9:22:fd:3c:b8:e9:
97:40:8f:0f:04:da:d1:a3:6c:f3:d6:d5:ad:5d:84:6e:99:94:
3b:c7:fa:55:62:49:57:51:bd:58:ca:52:5a:f1:78:a1:77:14:
e1:f4:e9:68:e2:3e:80:cf:fc:c2:89:fd:03:95:37:00:91:17:
67:b5:4b:5f:d5:4c:b6:8e:fd:b2:fe:e7:ae:71:f7:71:34:39:
a0:05:5e:78:c9:18:bb:5c:92:d1:e9:93:8f:ab:57:fa:4e:12:
7f:06:cb:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:49 2024 by rpki-client on console-ams.rpki-client.org