Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152F52/88EBCFDC1D4911EAAE775B34C4F9AE02/1E8E348E94AC11EE9DC7D24AC4F9AE02.roa
File: 1E8E348E94AC11EE9DC7D24AC4F9AE02.roa (raw, json)
Hash identifier: u/c9m2EvxXRq1q/Pb9LaUIktNo1bXTmNZnS1p4xkJio=
Subject key identifier: A5:99:CE:51:38:F9:3E:63:2A:16:1E:3D:CB:99:46:BA:A8:CD:BD:5D
Certificate issuer: /CN=A9152F52/serialNumber=81428A01C51691E7A8C5D843ECB6B1D3D9AE424E
Certificate serial: 0B1C
Authority key identifier: 81:42:8A:01:C5:16:91:E7:A8:C5:D8:43:EC:B6:B1:D3:D9:AE:42:4E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gUKKAcUWkeeoxdhD7Lax09muQk4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152F52/88EBCFDC1D4911EAAE775B34C4F9AE02/1E8E348E94AC11EE9DC7D24AC4F9AE02.roa
Signing time: Thu 07 Dec 2023 02:55:47 +0000
ROA not before: Thu 07 Dec 2023 02:55:47 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 7496
IP address blocks: 113.20.0.0/20 maxlen: 24
202.93.4.0/23 maxlen: 24
203.2.122.0/24 maxlen: 24
203.8.188.0/23 maxlen: 23
203.19.190.0/23 maxlen: 23
203.31.198.0/23 maxlen: 24
203.210.96.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2844 (0xb1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152F52/serialNumber=81428A01C51691E7A8C5D843ECB6B1D3D9AE424E
Validity
Not Before: Dec 7 02:55:47 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=65713432-4610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:da:0a:99:35:e8:e2:f9:e4:7c:7b:bc:3b:65:
5b:c4:9c:f9:ce:a8:81:83:16:3b:f6:1d:03:90:68:
27:36:1e:e1:04:b4:a8:66:7f:f8:06:74:1f:83:f5:
43:95:d9:22:f7:64:2b:8d:a3:8d:b5:de:a1:78:a0:
d5:81:40:c3:25:91:89:69:01:64:4d:cf:3e:0f:d8:
be:11:88:a2:2b:26:f3:21:b1:aa:a6:cb:a5:f0:80:
60:08:ef:d5:79:a5:24:8b:18:16:c7:3e:10:cb:75:
23:b2:f5:08:06:b2:bd:85:de:0f:03:26:fc:cb:e9:
95:0b:bc:e2:96:74:db:82:4f:64:17:52:43:69:9c:
e7:30:bb:6c:4c:45:e2:d6:94:0b:52:30:d1:ca:b8:
ce:4b:5c:d3:6a:65:0f:a8:22:fb:ab:95:18:e0:49:
d7:62:a8:0f:cc:fa:e4:65:a7:9d:4c:15:3c:44:d0:
2a:53:38:37:8d:a7:0a:50:19:05:86:ea:75:9c:63:
cd:66:29:da:77:23:b2:dd:7d:ae:b0:0f:9c:f6:04:
40:b2:5c:5f:10:7b:fd:87:a1:a7:d7:32:b4:c9:02:
85:5e:eb:a4:ea:f9:49:12:3e:2a:91:e1:12:24:1b:
0c:e6:45:d8:5a:cc:f7:b2:2f:5c:2d:2d:e1:b4:42:
ef:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:99:CE:51:38:F9:3E:63:2A:16:1E:3D:CB:99:46:BA:A8:CD:BD:5D
X509v3 Authority Key Identifier:
keyid:81:42:8A:01:C5:16:91:E7:A8:C5:D8:43:EC:B6:B1:D3:D9:AE:42:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152F52/88EBCFDC1D4911EAAE775B34C4F9AE02/gUKKAcUWkeeoxdhD7Lax09muQk4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gUKKAcUWkeeoxdhD7Lax09muQk4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152F52/88EBCFDC1D4911EAAE775B34C4F9AE02/1E8E348E94AC11EE9DC7D24AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.20.0.0/20
202.93.4.0/23
203.2.122.0/24
203.8.188.0/23
203.19.190.0/23
203.31.198.0/23
203.210.96.0/19
Signature Algorithm: sha256WithRSAEncryption
89:57:7c:ab:c5:a8:2f:55:71:fd:c5:23:97:a0:d5:8c:c2:46:
51:75:06:4e:af:e0:5a:ea:8b:8b:9c:31:3a:60:1f:85:b8:20:
71:a3:a0:b7:a3:08:4e:2c:69:17:fa:c3:a9:5f:2a:88:78:80:
c4:db:ea:91:c3:23:b2:8a:3b:78:79:63:75:63:c5:1b:79:88:
84:52:fa:57:3d:67:69:53:e8:4f:cf:65:9e:ae:aa:1a:2f:f4:
71:7c:24:c3:85:4f:b9:39:83:21:69:ba:79:30:15:2c:24:61:
bd:7f:79:20:76:b8:06:cf:2c:82:38:7a:71:74:94:7c:61:ab:
61:2b:20:90:de:b4:f5:db:6f:6d:88:ec:a0:14:f4:27:2a:38:
51:0b:ce:83:39:35:e1:3c:a4:ad:ec:eb:27:3a:31:db:d3:80:
34:27:86:a2:5b:37:78:56:15:db:cb:20:66:b1:dc:83:87:bb:
d2:32:bd:8a:52:a4:b6:10:37:5d:6b:a5:72:ab:89:35:e2:e9:
1f:0d:77:5b:a8:49:51:b7:5f:81:ab:f8:37:e9:6c:07:33:37:
55:79:6d:82:ec:56:6c:13:dd:e8:5c:df:1f:fe:de:3d:d9:15:
01:56:75:2a:6c:ed:ab:aa:90:4e:6f:3e:0f:a8:7f:79:ef:58:
ec:fe:9d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 19 19:06:17 2024 by rpki-client on console-ams.rpki-client.org