Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152F52/88EBCFDC1D4911EAAE775B34C4F9AE02/81EB4A8E47A911EA80B8633AC4F9AE02.roa
File: 81EB4A8E47A911EA80B8633AC4F9AE02.roa (raw, json)
Hash identifier: G5Ak8TX3+eeBzOkbzLop/v8HwMO/hdELq8urNXz/RJs=
Subject key identifier: 1B:D5:E4:8B:CA:D3:8B:3B:63:20:C1:05:25:04:34:E3:F3:E4:8B:FD
Certificate issuer: /CN=A9152F52/serialNumber=81428A01C51691E7A8C5D843ECB6B1D3D9AE424E
Certificate serial: 0ACC
Authority key identifier: 81:42:8A:01:C5:16:91:E7:A8:C5:D8:43:EC:B6:B1:D3:D9:AE:42:4E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gUKKAcUWkeeoxdhD7Lax09muQk4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152F52/88EBCFDC1D4911EAAE775B34C4F9AE02/81EB4A8E47A911EA80B8633AC4F9AE02.roa
Signing time: Mon 31 Jul 2023 19:57:28 +0000
ROA not before: Mon 31 Jul 2023 19:57:28 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 38877
IP address blocks: 202.191.60.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2764 (0xacc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152F52/serialNumber=81428A01C51691E7A8C5D843ECB6B1D3D9AE424E
Validity
Not Before: Jul 31 19:57:28 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=64c81227-1d04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:07:d6:25:a3:d6:e2:9e:05:03:b3:b0:23:a3:
bf:29:93:e4:60:ab:95:43:4d:1f:11:86:42:63:f4:
73:f0:ef:19:fd:b3:64:a8:30:23:57:38:51:f7:63:
0c:95:7e:79:cc:7c:21:99:ad:f0:4a:09:ba:29:6e:
24:d0:b1:ca:cc:99:fb:1f:29:0c:ec:1d:f7:f4:aa:
39:81:da:3d:0f:3c:3d:3e:f4:ff:79:07:17:c0:9e:
66:70:91:87:b8:d9:7f:63:64:3c:c6:f5:45:8a:de:
85:e9:6d:b0:80:17:74:15:02:9c:17:70:f5:44:de:
a6:60:f4:de:66:17:8f:9b:bf:3d:bc:a5:20:8b:69:
41:09:de:45:40:4b:c6:94:23:78:e3:e1:21:3d:7c:
87:47:33:8a:cb:fe:6d:f5:b1:bd:c1:42:7d:1b:c3:
e1:09:d7:b0:75:42:3f:60:3c:a7:3e:80:8c:27:6b:
08:3d:f7:0c:80:36:db:1d:2d:99:8d:4c:37:a2:ab:
6b:65:3c:11:9d:16:8b:62:f8:11:06:53:ee:1c:f3:
86:da:10:00:95:d2:cb:a9:12:82:c0:75:40:16:90:
9c:b1:ee:5b:f3:82:e5:87:d5:00:da:62:ce:c1:57:
6c:c6:5a:87:4b:31:06:31:95:05:c1:d3:b5:90:0c:
f6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D5:E4:8B:CA:D3:8B:3B:63:20:C1:05:25:04:34:E3:F3:E4:8B:FD
X509v3 Authority Key Identifier:
keyid:81:42:8A:01:C5:16:91:E7:A8:C5:D8:43:EC:B6:B1:D3:D9:AE:42:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152F52/88EBCFDC1D4911EAAE775B34C4F9AE02/gUKKAcUWkeeoxdhD7Lax09muQk4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gUKKAcUWkeeoxdhD7Lax09muQk4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152F52/88EBCFDC1D4911EAAE775B34C4F9AE02/81EB4A8E47A911EA80B8633AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.191.60.0/22
Signature Algorithm: sha256WithRSAEncryption
c2:01:c3:58:4c:be:63:fa:e5:03:54:69:e8:80:b5:9a:a7:bb:
63:20:4a:61:db:93:c6:f4:e4:7d:4d:79:98:4e:d1:50:22:96:
41:d1:d7:b9:17:bc:2a:bb:28:6c:93:6b:d7:43:61:68:0d:e0:
c6:56:22:fa:c2:1b:26:2b:29:16:a0:ec:14:51:fb:01:49:2f:
e5:fb:91:37:32:40:52:85:90:64:ad:49:a0:07:96:4d:34:6b:
be:60:10:71:77:3e:21:2d:69:fc:6c:fc:eb:5e:7a:f3:b1:53:
ca:d7:67:27:aa:21:e7:03:4c:dd:6b:10:63:2a:77:8c:71:f1:
75:63:cc:35:d5:88:ea:72:fe:b4:6e:92:7c:9a:df:14:bf:e2:
74:b2:4b:7e:f9:85:f3:46:d5:75:2c:fe:5c:5f:8c:6a:f9:9d:
f9:70:5a:f6:e7:95:d8:34:ac:ad:2b:d1:c7:51:9e:ce:7b:93:
a6:60:f1:3b:1e:1c:ae:82:d2:c5:7b:82:cf:78:40:09:73:db:
0b:a4:80:05:01:09:11:8c:10:59:a7:43:29:b9:09:eb:4d:9e:
e9:34:04:da:7c:f9:3c:a0:b2:ea:4f:fd:4a:da:a4:a0:ee:ea:
9d:82:ef:b3:97:41:64:66:4c:c1:1a:70:bb:7d:9c:02:3f:80:
a1:11:02:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 19 18:33:19 2024 by rpki-client on console-fra.rpki-client.org