Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157F58/EAA3A40CF0A011E7BC7E8D5FC4F9AE02/772F2EF0A6B811EDA4749167C4F9AE02.roa
File: 772F2EF0A6B811EDA4749167C4F9AE02.roa (raw, json)
Hash identifier: 30wNWqS3oESuhsGiaSXRZArmsRKgPHB3vTotat5wBy4=
Subject key identifier: 65:AB:7E:22:8C:DF:15:25:44:F2:61:64:18:11:68:B8:6A:36:0E:1E
Certificate issuer: /CN=A9157F58/serialNumber=EB1D0B185BC34F95366C8D4B2739E60E9E82F5D9
Certificate serial: 152D
Authority key identifier: EB:1D:0B:18:5B:C3:4F:95:36:6C:8D:4B:27:39:E6:0E:9E:82:F5:D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6x0LGFvDT5U2bI1LJznmDp6C9dk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157F58/EAA3A40CF0A011E7BC7E8D5FC4F9AE02/772F2EF0A6B811EDA4749167C4F9AE02.roa
Signing time: Tue 07 Feb 2023 07:24:32 +0000
ROA not before: Tue 07 Feb 2023 07:24:32 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 16509
IP address blocks: 202.6.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5421 (0x152d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157F58/serialNumber=EB1D0B185BC34F95366C8D4B2739E60E9E82F5D9
Validity
Not Before: Feb 7 07:24:32 2023 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=63e1fcb0-a545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b5:19:01:12:2a:1b:62:d3:dc:14:b5:66:0c:
51:c1:19:b1:39:72:c9:91:f5:d6:1b:9d:3a:65:09:
b9:f3:6b:26:f8:86:99:42:c9:d8:95:41:dc:b2:e3:
35:84:a7:e3:70:bb:b6:62:f0:ed:2b:5c:20:d2:06:
64:03:d8:fb:ca:22:48:02:77:e4:74:a2:eb:46:14:
da:5b:31:72:2a:5f:33:bd:74:d0:8e:30:bb:d7:bd:
e4:c8:47:01:2a:10:43:8e:b3:46:4f:06:ae:24:b7:
6e:c8:db:0e:c2:d4:05:ed:fc:88:dc:8a:e0:2c:bd:
11:3b:4c:e5:89:1c:99:55:63:83:3c:41:9d:b5:3e:
41:ed:fc:3f:fa:80:50:c6:2b:e7:a5:92:ba:f8:1a:
55:17:d2:3a:16:44:ea:5f:a4:90:4c:1b:70:6f:7e:
0e:f2:26:6b:39:da:09:37:b8:4b:2c:4b:a9:ed:51:
2c:40:59:75:58:68:98:2e:11:3a:db:3d:62:90:e9:
2f:1a:4d:1d:4e:07:12:df:70:e1:de:85:73:90:05:
79:91:d6:d7:45:b0:3e:c0:8c:54:37:27:a2:50:42:
1a:53:e3:b2:37:8e:5e:6e:ea:e9:68:be:e3:03:d9:
0c:c5:48:50:33:3a:ba:2a:82:55:ea:70:f4:37:c1:
21:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:AB:7E:22:8C:DF:15:25:44:F2:61:64:18:11:68:B8:6A:36:0E:1E
X509v3 Authority Key Identifier:
keyid:EB:1D:0B:18:5B:C3:4F:95:36:6C:8D:4B:27:39:E6:0E:9E:82:F5:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157F58/EAA3A40CF0A011E7BC7E8D5FC4F9AE02/6x0LGFvDT5U2bI1LJznmDp6C9dk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6x0LGFvDT5U2bI1LJznmDp6C9dk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157F58/EAA3A40CF0A011E7BC7E8D5FC4F9AE02/772F2EF0A6B811EDA4749167C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.6.115.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:9b:ed:58:d2:10:88:03:32:2a:6a:0d:8d:c6:57:2e:08:8c:
37:39:91:6d:eb:03:c1:f5:d2:7a:5b:e0:aa:18:23:14:35:94:
fc:5e:77:9c:e8:cd:f1:d6:a5:4f:d5:e6:89:5e:50:05:07:26:
d4:9d:0c:0c:88:64:fb:80:f7:4e:18:ca:e1:b4:b1:d8:6a:c8:
d0:20:46:59:3b:fc:db:bd:82:90:97:fb:60:70:c8:25:3b:34:
4a:df:ec:96:85:4e:3a:82:a2:44:3f:b6:e8:6c:84:de:e9:a9:
22:db:c8:81:0f:d8:73:d8:d9:e5:4f:b4:8c:b9:b0:27:75:96:
d6:4b:a8:ef:07:0b:79:10:bb:59:4e:59:80:91:a2:c4:8e:08:
ee:15:f3:af:0e:ec:be:38:7c:6c:7e:3f:7c:fa:ce:d7:52:d9:
cc:97:30:3e:5e:4e:66:a0:35:58:87:6d:62:27:18:10:34:43:
5d:e9:be:5c:b5:93:98:45:c9:ab:ce:3c:4f:47:88:f3:ac:39:
7f:12:c6:a6:c6:3a:22:16:1c:f5:5c:04:4a:e4:7a:d9:b0:2c:
e9:e8:21:67:ef:dc:2e:30:15:05:b7:f9:25:7e:0c:75:2d:69:
d0:bd:76:59:79:8c:8f:7b:b6:85:63:27:7b:21:68:ac:ff:c7:
7e:65:be:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 6 16:07:23 2023 by rpki-client on console-ams.rpki-client.org