Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155A58/63FE33EABB2D11EA82F84669C4F9AE02/D4F1870CC81B11EDAD390C50C4F9AE02.roa
File: D4F1870CC81B11EDAD390C50C4F9AE02.roa (raw, json)
Hash identifier: peRHdW677REvHMn7GKEfPF9xWO07gas0V4hfjM5fuZs=
Subject key identifier: C5:43:30:C5:8A:9C:64:BC:C3:95:C0:5E:CE:3B:1B:3F:D7:4C:26:C5
Certificate issuer: /CN=A9155A58/serialNumber=A7FFEA18E09A39A0AA6F375A0A83B5708EC22D8A
Certificate serial: 0724
Authority key identifier: A7:FF:EA:18:E0:9A:39:A0:AA:6F:37:5A:0A:83:B5:70:8E:C2:2D:8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p__qGOCaOaCqbzdaCoO1cI7CLYo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155A58/63FE33EABB2D11EA82F84669C4F9AE02/D4F1870CC81B11EDAD390C50C4F9AE02.roa
Signing time: Tue 21 Mar 2023 19:08:58 +0000
ROA not before: Tue 21 Mar 2023 19:08:58 +0000
ROA not after: Wed 01 May 2024 00:00:00 +0000
asID: 10143
IP address blocks: 58.96.0.0/17 maxlen: 24
115.70.0.0/16 maxlen: 24
163.53.144.0/22 maxlen: 22
220.233.0.0/16 maxlen: 24
2406:3400::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1828 (0x724)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155A58/serialNumber=A7FFEA18E09A39A0AA6F375A0A83B5708EC22D8A
Validity
Not Before: Mar 21 19:08:58 2023 GMT
Not After : May 1 00:00:00 2024 GMT
Subject: CN=641a00ca-7317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a1:b8:3c:65:f4:de:34:a2:95:0e:99:8e:fb:
cb:7c:50:ac:88:79:21:ee:f0:15:87:74:c3:09:90:
22:1e:0a:a8:95:fc:cc:38:24:63:a1:b7:44:01:e1:
b9:eb:b6:02:9a:67:8d:40:ef:ee:ea:f1:fb:e5:1d:
f9:73:e9:17:22:31:33:57:43:d9:30:97:f1:a6:4e:
89:d2:37:3e:00:0a:a1:0a:e7:11:74:30:47:86:e6:
60:ee:1f:49:83:1e:e7:95:ac:c5:48:a2:37:c0:32:
5f:5b:47:5a:8b:75:a1:38:43:7c:7e:e7:5a:4f:32:
8b:83:76:48:a6:bf:d0:dc:9c:e5:71:e2:ff:f1:3f:
93:c5:9e:34:7d:b4:e2:16:b9:ed:9d:a8:7f:63:c5:
90:37:a9:94:fc:e8:54:61:84:96:d9:04:a5:fe:3b:
7c:fb:c8:14:9c:02:0f:fc:af:ac:f5:f2:e5:00:22:
64:c3:fd:22:17:cc:0c:84:18:ba:ab:3b:db:5c:04:
99:d2:de:df:51:ff:2f:0c:d2:36:58:30:8a:16:f1:
96:56:2b:67:90:ba:58:4f:a1:b6:c4:3c:0e:fe:30:
86:bc:91:37:84:2e:4e:78:db:c3:57:33:82:47:30:
06:4a:5d:c9:08:a0:70:a0:83:0e:3f:59:24:85:62:
ba:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:43:30:C5:8A:9C:64:BC:C3:95:C0:5E:CE:3B:1B:3F:D7:4C:26:C5
X509v3 Authority Key Identifier:
keyid:A7:FF:EA:18:E0:9A:39:A0:AA:6F:37:5A:0A:83:B5:70:8E:C2:2D:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155A58/63FE33EABB2D11EA82F84669C4F9AE02/p__qGOCaOaCqbzdaCoO1cI7CLYo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p__qGOCaOaCqbzdaCoO1cI7CLYo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155A58/63FE33EABB2D11EA82F84669C4F9AE02/D4F1870CC81B11EDAD390C50C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
58.96.0.0/17
115.70.0.0/16
163.53.144.0/22
220.233.0.0/16
IPv6:
2406:3400::/32
Signature Algorithm: sha256WithRSAEncryption
69:6e:6a:6a:4f:68:c0:fe:ee:61:d2:ce:84:36:92:16:00:21:
df:0b:e8:4c:03:c4:2c:48:c1:0f:a8:d4:00:13:ac:94:27:c5:
55:8a:df:12:d8:46:27:e7:de:b1:ab:93:55:cf:e7:73:f4:71:
f1:5b:2a:ec:7e:28:47:9a:68:1a:80:82:1d:7c:7f:9b:d2:ef:
81:f8:69:69:98:25:c6:16:70:62:1f:d0:57:ee:ad:4e:72:c8:
3c:88:e3:39:7d:e3:2a:7c:db:1c:33:36:1f:38:ac:d5:db:f6:
a0:7b:f4:e2:a6:a6:d3:75:de:d7:1d:d2:2d:80:d8:01:fe:92:
b6:a7:32:02:df:08:e9:88:f7:ce:2a:01:02:2a:a6:ca:57:40:
0b:fc:0a:2a:f5:43:b4:ac:97:3f:db:cf:59:06:d8:b2:53:f9:
50:70:c8:3e:39:c1:1c:b0:a8:16:a0:5f:af:5b:1c:c4:67:b3:
e0:9f:c0:90:af:63:83:99:24:f8:f8:ef:ed:fc:28:e4:5d:2e:
b3:e9:39:95:fd:f8:11:0a:81:37:c4:c0:c2:54:7f:df:22:55:
b6:3f:19:eb:66:24:96:95:58:cc:ba:2a:f3:36:fc:aa:f8:88:
cb:36:f5:81:2b:a5:7b:1d:9e:43:b1:77:6d:57:44:a2:b4:51:
1f:62:4f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:07 2024 by rpki-client on console-fra.rpki-client.org