Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C533/9CC43306A74911EBB0302F82C4F9AE02/64EDFA68E46E11EB96CA2246C4F9AE02.roa
File: 64EDFA68E46E11EB96CA2246C4F9AE02.roa (raw, json)
Hash identifier: 8McJ78o2/lmHoGypHWY8UxEAvjePhIBn9yYfB9/wirU=
Subject key identifier: 34:C4:2B:16:F5:64:D9:AA:23:DF:5D:C9:B6:4B:0B:91:B8:2D:03:2D
Certificate issuer: /CN=A912C533/serialNumber=AF96D111008404FF1B14516F7FCF67E928CEF666
Certificate serial: 01F2
Authority key identifier: AF:96:D1:11:00:84:04:FF:1B:14:51:6F:7F:CF:67:E9:28:CE:F6:66
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r5bREQCEBP8bFFFvf89n6SjO9mY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C533/9CC43306A74911EBB0302F82C4F9AE02/64EDFA68E46E11EB96CA2246C4F9AE02.roa
Signing time: Mon 20 Dec 2021 02:20:53 +0000
ROA not before: Mon 20 Dec 2021 02:20:53 +0000
ROA not after: Thu 02 Mar 2023 00:00:00 +0000
asID: 9357
IP address blocks: 133.250.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 498 (0x1f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C533/serialNumber=AF96D111008404FF1B14516F7FCF67E928CEF666
Validity
Not Before: Dec 20 02:20:53 2021 GMT
Not After : Mar 2 00:00:00 2023 GMT
Subject: CN=61bfe885-f4a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c9:fd:b6:de:39:96:38:a9:c0:7b:13:00:67:
20:24:31:e1:81:f0:20:ea:58:b3:2e:a2:28:a8:03:
0d:ef:96:c3:0c:15:ca:9c:3a:5b:2d:90:d9:4a:61:
eb:d2:c4:4c:83:e0:76:6e:44:f0:a9:e7:6b:b7:c1:
a2:9a:f5:06:32:d4:6e:f0:ed:bc:21:bb:20:8d:ec:
80:9c:96:fa:87:b9:2f:ac:a1:19:8c:ca:74:50:99:
3f:c9:60:dd:49:cb:df:90:f5:c9:a6:62:46:3e:89:
f9:d9:a6:76:f9:3e:f2:4e:ea:6e:1f:af:8d:ff:d3:
9c:82:6a:ec:24:ae:af:dd:df:c9:73:72:c4:20:2a:
30:2e:d7:07:c5:3b:2d:e2:53:95:0b:5e:06:41:99:
03:cc:99:c8:f1:71:3b:36:dd:c6:7a:ab:37:51:ef:
10:21:0f:b5:05:aa:b0:94:27:01:45:ac:8f:6a:47:
48:b3:78:9f:21:30:12:91:1c:ca:18:a3:3d:e9:b1:
e6:3e:64:7f:f3:67:68:ad:1e:2a:4c:ed:d8:de:05:
34:81:34:49:1b:95:a4:a2:4b:43:e0:fd:d9:4c:f5:
4e:53:16:83:75:0e:ff:26:ea:b6:94:88:01:86:89:
5b:44:9a:54:90:0d:50:d1:cb:ed:c2:02:16:82:32:
8f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:C4:2B:16:F5:64:D9:AA:23:DF:5D:C9:B6:4B:0B:91:B8:2D:03:2D
X509v3 Authority Key Identifier:
keyid:AF:96:D1:11:00:84:04:FF:1B:14:51:6F:7F:CF:67:E9:28:CE:F6:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C533/9CC43306A74911EBB0302F82C4F9AE02/r5bREQCEBP8bFFFvf89n6SjO9mY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r5bREQCEBP8bFFFvf89n6SjO9mY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C533/9CC43306A74911EBB0302F82C4F9AE02/64EDFA68E46E11EB96CA2246C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
133.250.128.0/17
Signature Algorithm: sha256WithRSAEncryption
3e:03:b4:cd:9a:9d:51:ab:59:09:7d:6b:57:4a:b8:50:1f:d3:
5e:9d:07:cf:b7:a9:66:63:c0:44:9d:53:f4:74:a4:ab:61:07:
32:c2:9a:75:bc:44:78:6a:61:38:66:c7:9a:60:68:aa:02:d7:
3f:97:0e:e8:ce:2e:7e:0c:c8:23:c8:1a:50:d4:36:02:36:16:
ad:0e:9d:96:36:99:9e:18:1c:e0:09:92:b9:8c:16:59:9b:ce:
25:82:ba:2b:f1:de:32:2d:3d:6c:1e:af:55:8a:cc:01:e9:65:
a2:a5:9d:ec:48:82:16:1b:4d:a9:61:49:4f:e5:6a:38:22:ef:
3f:f7:56:86:35:5c:04:5b:fc:1a:9e:db:61:f4:f1:fd:2b:38:
26:00:10:91:92:66:26:0e:b0:7c:7b:3c:21:fb:77:a0:d0:5e:
9a:a5:98:14:2c:5b:48:f3:0e:2e:c6:e3:95:66:33:27:09:de:
46:b7:7e:cd:85:a9:de:ed:f5:33:b7:8b:75:73:4d:c7:03:4c:
1b:31:36:f7:78:0f:ba:50:b5:ab:65:00:9e:a4:a4:61:b8:ad:
91:7b:a2:70:81:5c:28:85:79:f3:71:d1:dc:76:b7:41:4f:56:
66:76:ae:5e:b4:fd:c5:c0:fe:bc:6b:83:24:dd:d8:d4:15:89:
9f:19:95:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:49 2024 by rpki-client on console-ams.rpki-client.org