Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91509EC/E99C8E6E6F4B11E89A642271C4F9AE02/42CD8E6AA76311EABB3C8E18C4F9AE02.roa
File: 42CD8E6AA76311EABB3C8E18C4F9AE02.roa (raw, json)
Hash identifier: 650+eE1cgkCFZhNYDd0CdWffJWjGykX+FnNIWwGcdrk=
Subject key identifier: C5:3E:CC:AE:6A:64:AA:E9:01:09:83:B6:90:B8:07:D3:3A:86:F3:02
Certificate issuer: /CN=A91509EC/serialNumber=CEA0832FCAC122F64E8B79A9C54BBDD9BE90C71D
Certificate serial: 1057
Authority key identifier: CE:A0:83:2F:CA:C1:22:F6:4E:8B:79:A9:C5:4B:BD:D9:BE:90:C7:1D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zqCDL8rBIvZOi3mpxUu92b6Qxx0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91509EC/E99C8E6E6F4B11E89A642271C4F9AE02/42CD8E6AA76311EABB3C8E18C4F9AE02.roa
Signing time: Fri 07 Jan 2022 06:16:26 +0000
ROA not before: Fri 07 Jan 2022 06:16:26 +0000
ROA not after: Fri 31 Mar 2023 00:00:00 +0000
asID: 7224
IP address blocks: 43.250.196.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4183 (0x1057)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91509EC/serialNumber=CEA0832FCAC122F64E8B79A9C54BBDD9BE90C71D
Validity
Not Before: Jan 7 06:16:26 2022 GMT
Not After : Mar 31 00:00:00 2023 GMT
Subject: CN=61d7daba-52f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:31:74:73:5d:36:88:56:90:b4:c2:a0:db:3d:
02:b7:d3:16:30:a7:9c:fb:32:57:a9:1f:25:b4:0d:
e6:c9:72:5c:5b:43:be:da:c0:ca:2c:3d:42:96:3d:
6a:34:f6:f1:c5:88:79:d8:3f:bb:22:c2:da:67:96:
ae:7c:ad:87:f3:7d:aa:dc:af:36:b3:ec:e1:9a:68:
be:c2:50:6b:e5:0e:17:ba:25:fa:46:b9:3d:fb:08:
74:dd:9d:e3:3f:09:9f:25:85:43:b7:94:ab:cf:01:
44:99:37:17:e2:f1:39:32:31:85:4f:37:25:f4:65:
35:a5:41:49:bb:53:18:f9:dc:31:a4:5c:b7:ab:9e:
63:e2:69:3c:7e:99:5e:82:6a:c9:84:0c:8f:e9:f3:
56:1b:6f:38:d6:61:3f:c5:46:f3:b4:2c:fb:e5:73:
28:4b:cc:73:cd:67:59:fa:97:d3:ff:36:1c:dd:c1:
f6:d9:c1:3e:3b:e0:5b:9f:7f:67:f4:b2:56:6d:1d:
7a:1b:e7:7e:5f:92:f3:14:3e:db:31:0b:24:09:b3:
f7:6f:8f:9f:08:b1:ca:f9:86:28:20:50:79:50:eb:
6d:3e:a4:df:aa:fa:8a:0c:8e:67:70:28:75:80:a2:
f4:11:13:f2:47:b2:29:5d:be:7d:06:cb:1d:fc:55:
55:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:3E:CC:AE:6A:64:AA:E9:01:09:83:B6:90:B8:07:D3:3A:86:F3:02
X509v3 Authority Key Identifier:
keyid:CE:A0:83:2F:CA:C1:22:F6:4E:8B:79:A9:C5:4B:BD:D9:BE:90:C7:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91509EC/E99C8E6E6F4B11E89A642271C4F9AE02/zqCDL8rBIvZOi3mpxUu92b6Qxx0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zqCDL8rBIvZOi3mpxUu92b6Qxx0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91509EC/E99C8E6E6F4B11E89A642271C4F9AE02/42CD8E6AA76311EABB3C8E18C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.196.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:18:86:c3:d7:82:c3:fa:a6:5c:00:e8:52:5b:23:90:e4:f7:
1a:a8:c4:4b:0f:aa:e9:97:21:50:df:c2:10:e6:33:32:e1:b2:
9f:26:96:70:2f:82:e1:2e:7b:3c:2a:04:aa:2f:36:8d:17:c7:
b2:b5:71:69:a6:1b:c0:df:80:97:0e:eb:cf:90:94:e2:af:18:
22:ca:c3:38:67:68:a9:e5:f9:d9:77:fb:20:39:9c:08:d3:04:
7a:b1:c5:c5:1b:c9:54:46:53:41:d2:a2:df:f5:fd:41:5d:d1:
d2:79:52:42:d0:a8:99:e1:e2:05:71:18:ee:c9:b1:91:d3:77:
f1:e2:97:44:41:48:a2:ce:3a:66:ac:95:1f:ae:95:1b:48:ee:
e8:75:ea:f3:3d:f1:6b:e3:95:05:2e:c6:ba:a7:cd:7e:61:28:
6f:76:8e:bc:d0:96:50:5e:83:a9:c4:b1:14:a2:54:76:ac:95:
c1:e9:44:7d:5e:c7:44:d9:dd:0c:7b:fa:71:73:c3:5c:8f:0b:
7d:bc:89:9f:b7:19:1b:ad:3a:0b:52:3c:54:eb:59:45:f9:d0:
cd:fe:5b:3e:92:e3:bb:7a:77:e5:41:97:a8:18:14:30:a5:9e:
92:fb:5b:4f:52:ed:c9:9e:98:3d:5d:4c:de:53:a5:6b:ff:c5:
77:4f:41:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:06 2024 by rpki-client on console-fra.rpki-client.org