Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913429A/0CBFB23A1D9111E29789F9F208B02CD2/FB73B66E92B711EDB3F84B55C4F9AE02.roa
File: FB73B66E92B711EDB3F84B55C4F9AE02.roa (raw, json)
Hash identifier: vJMM4hwA4GqXaUiD79RxtzevOEqzsRehPFDfEBM1WbU=
Subject key identifier: BF:48:66:A9:B1:54:27:3E:E8:38:BD:F8:54:92:CF:9C:DA:6B:A8:B2
Certificate issuer: /CN=A913429A/serialNumber=CE291F6ECC60DD4CC481D8BD2C4650AD1DFEE355
Certificate serial: 32DC
Authority key identifier: CE:29:1F:6E:CC:60:DD:4C:C4:81:D8:BD:2C:46:50:AD:1D:FE:E3:55
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zikfbsxg3UzEgdi9LEZQrR3-41U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913429A/0CBFB23A1D9111E29789F9F208B02CD2/FB73B66E92B711EDB3F84B55C4F9AE02.roa
Signing time: Thu 12 Jan 2023 20:30:41 +0000
ROA not before: Thu 12 Jan 2023 20:30:41 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 38016
IP address blocks: 124.252.0.0/16 maxlen: 16
124.252.255.0/24 maxlen: 24
2406:c800::/32 maxlen: 32
2406:c800:a1ca::/48 maxlen: 48
2406:c800:e000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13020 (0x32dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913429A/serialNumber=CE291F6ECC60DD4CC481D8BD2C4650AD1DFEE355
Validity
Not Before: Jan 12 20:30:41 2023 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=63c06df1-cf7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:4d:bd:89:81:b6:05:2b:25:30:6f:13:5f:b4:
3b:28:2a:d3:da:d3:35:7c:2f:c5:a5:27:bc:75:ce:
5e:3c:72:92:1e:19:20:08:e1:3c:d0:1d:f8:a5:9f:
8e:ad:71:cf:b3:49:c6:7a:90:8a:c4:9a:b0:8a:ef:
54:a9:73:a1:0d:80:6c:3d:57:71:06:f9:e2:d1:4b:
d6:c8:5f:5f:6a:51:c7:65:7f:4f:ce:fa:4b:13:50:
1f:b5:8a:2c:04:29:ba:d8:ee:47:1a:8e:82:bc:80:
f0:d7:d9:15:68:0c:a8:3b:e8:ed:60:69:23:58:67:
d3:ff:7a:91:d3:11:f6:4c:fd:a2:8e:64:dc:a1:86:
85:2b:e7:2e:61:20:64:96:fa:90:6a:80:9c:ff:11:
bd:c3:83:2f:84:b7:6f:48:64:f4:a7:1a:2c:f3:40:
3a:49:e1:05:de:35:dc:7f:08:d8:ec:64:9e:85:41:
50:8a:41:28:e3:c6:7a:00:d2:0f:df:7f:48:ba:9a:
c0:61:e5:d7:29:07:ee:9a:5d:09:a6:87:fa:00:c2:
06:ae:de:4b:ce:b9:5b:ab:dc:76:a3:e9:2f:8d:cd:
f9:6b:87:09:66:15:7d:8b:59:b9:0c:20:16:c1:31:
13:8b:91:95:74:c4:43:3b:a0:28:91:3a:d9:79:cc:
7e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:48:66:A9:B1:54:27:3E:E8:38:BD:F8:54:92:CF:9C:DA:6B:A8:B2
X509v3 Authority Key Identifier:
keyid:CE:29:1F:6E:CC:60:DD:4C:C4:81:D8:BD:2C:46:50:AD:1D:FE:E3:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913429A/0CBFB23A1D9111E29789F9F208B02CD2/zikfbsxg3UzEgdi9LEZQrR3-41U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zikfbsxg3UzEgdi9LEZQrR3-41U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913429A/0CBFB23A1D9111E29789F9F208B02CD2/FB73B66E92B711EDB3F84B55C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
124.252.0.0/16
IPv6:
2406:c800::/32
Signature Algorithm: sha256WithRSAEncryption
6f:51:0c:f6:71:e6:97:f0:bb:66:f4:07:ea:7d:e8:e3:b7:b9:
7a:cd:d4:b7:f9:e0:ef:2f:06:ef:f9:4e:23:10:90:ba:b2:6a:
e0:d7:a0:d6:3e:e7:d5:37:b1:31:22:dc:91:04:39:d9:6a:a1:
db:1c:58:01:35:fd:42:85:46:9e:de:b4:75:be:63:f3:50:d5:
61:09:eb:dc:f8:5c:90:77:e1:da:c6:6e:03:45:2f:c2:97:9e:
8e:9b:10:c9:93:4c:43:7d:45:62:a9:8f:bb:28:13:9c:e7:3c:
3e:0e:89:e6:62:26:7a:95:96:44:13:57:48:07:b6:f1:b8:f2:
2b:69:7b:e5:9b:ae:1f:ff:c1:18:af:cd:20:46:0c:94:0a:d0:
13:13:3f:d8:ff:c6:ac:fb:56:a7:f7:74:1b:db:4b:20:78:78:
de:3c:01:80:bb:1e:ef:de:ef:ac:ac:94:58:4a:06:e9:d1:c9:
f6:07:47:e6:00:29:3d:c1:57:4e:13:0e:1b:ca:19:33:96:e5:
83:5e:b9:fd:d4:b0:50:04:d3:f5:94:ff:67:1e:92:cc:be:94:
c4:f1:17:5f:55:ff:77:c3:8f:94:a1:6c:cf:2f:4e:9f:cb:71:
1d:95:3a:2b:ed:a5:3f:a6:6d:fd:36:55:3f:12:6d:c2:bd:f9:
bc:a1:76:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:59 2024 by rpki-client on console-fra.rpki-client.org