Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157F58/EAA3A40CF0A011E7BC7E8D5FC4F9AE02/AE7AA5B8DFB911ECA6F7E92FC4F9AE02.roa
File: AE7AA5B8DFB911ECA6F7E92FC4F9AE02.roa (raw, json)
Hash identifier: /jate3/Hw+QtCFMIGhFn9bNUZpvhq3KcDFcMiMvJG98=
Subject key identifier: C9:3D:E5:13:29:01:78:DE:7E:96:99:6D:68:4D:8D:AA:57:A4:06:05
Certificate issuer: /CN=A9157F58/serialNumber=EB1D0B185BC34F95366C8D4B2739E60E9E82F5D9
Certificate serial: 14EA
Authority key identifier: EB:1D:0B:18:5B:C3:4F:95:36:6C:8D:4B:27:39:E6:0E:9E:82:F5:D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6x0LGFvDT5U2bI1LJznmDp6C9dk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157F58/EAA3A40CF0A011E7BC7E8D5FC4F9AE02/AE7AA5B8DFB911ECA6F7E92FC4F9AE02.roa
Signing time: Tue 04 Oct 2022 16:04:22 +0000
ROA not before: Tue 04 Oct 2022 16:04:22 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 24434
IP address blocks: 202.6.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5354 (0x14ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157F58/serialNumber=EB1D0B185BC34F95366C8D4B2739E60E9E82F5D9
Validity
Not Before: Oct 4 16:04:22 2022 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=633c5986-935b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fa:68:4b:9b:68:26:b7:da:19:5d:e8:5e:ec:
ca:dd:cc:c8:f5:3d:5f:9b:bc:85:e2:c9:58:58:83:
70:10:76:04:ca:49:4e:b8:4e:95:af:b6:50:15:84:
21:b0:7b:d7:7e:91:85:b7:f0:8d:9c:53:8f:bf:da:
e8:67:b3:91:96:f6:d9:b2:f6:98:1f:b5:47:31:df:
5a:a2:bb:67:d4:aa:11:55:c6:75:55:57:6e:3e:c2:
a2:0a:50:8e:aa:b8:21:ee:61:76:80:82:b3:4e:97:
da:e0:bf:f8:6e:50:7f:0b:fa:65:45:bc:90:05:17:
9a:0f:a3:6c:65:b4:73:4f:6e:59:cb:ae:eb:d7:78:
56:21:6b:69:3c:9d:a5:0e:24:8e:71:1b:95:67:7e:
f0:f9:65:09:62:eb:ff:ee:0e:26:a8:87:ca:12:1e:
b2:9b:c1:55:b1:f1:54:87:a3:ec:66:30:a0:03:97:
40:57:93:33:b4:c2:12:3a:44:f6:d6:e9:19:9d:75:
da:1a:ab:5e:bd:30:ec:00:af:53:3a:34:40:a7:45:
61:64:7b:20:6d:db:81:35:9f:2b:2c:c4:64:54:ac:
4a:bc:f5:51:6e:63:6e:60:32:12:17:9e:94:9f:95:
bf:f4:11:56:10:0c:68:d9:39:14:8a:20:ce:12:b6:
51:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:3D:E5:13:29:01:78:DE:7E:96:99:6D:68:4D:8D:AA:57:A4:06:05
X509v3 Authority Key Identifier:
keyid:EB:1D:0B:18:5B:C3:4F:95:36:6C:8D:4B:27:39:E6:0E:9E:82:F5:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157F58/EAA3A40CF0A011E7BC7E8D5FC4F9AE02/6x0LGFvDT5U2bI1LJznmDp6C9dk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6x0LGFvDT5U2bI1LJznmDp6C9dk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157F58/EAA3A40CF0A011E7BC7E8D5FC4F9AE02/AE7AA5B8DFB911ECA6F7E92FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.6.115.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:cd:8c:f0:b5:d8:e2:e8:00:ce:e8:de:d4:f1:e2:c9:95:58:
cc:3f:35:00:4f:53:c6:d9:88:c9:d6:40:0b:df:ec:da:6c:8c:
b5:bd:fc:94:26:32:ea:d4:af:92:0b:c6:94:b4:86:60:e6:57:
ab:16:99:39:b3:1e:83:42:7e:be:d3:5f:d7:aa:d5:9b:60:de:
cd:40:3e:a5:11:4f:bc:19:65:54:c7:41:6e:5e:29:2e:4f:f9:
c8:45:36:9b:8d:94:16:dd:56:77:11:64:52:d7:4a:c8:91:b7:
28:ef:8b:e3:94:fa:7b:0c:af:8d:a0:1b:c3:90:3b:68:12:34:
9f:ee:f5:13:7f:2b:6e:20:2d:9c:95:dc:7c:0d:c2:20:f1:1c:
3f:30:8e:0f:56:5b:eb:64:60:d5:2a:e4:96:db:1b:ba:8a:91:
b2:a5:0f:f4:13:a1:9c:55:f6:b0:77:83:2c:b6:5d:9a:33:ba:
5f:5d:7d:bb:86:4e:9e:c9:2a:7c:4a:8d:d9:80:4f:dc:1b:54:
05:83:05:05:16:81:62:02:9c:cb:88:f2:70:4e:16:eb:e0:3c:
00:bc:44:cd:15:63:23:40:4c:fe:44:12:51:dd:2f:d5:a1:fd:
bd:99:f6:2f:3c:12:34:34:36:cd:cf:73:65:67:bd:56:41:26:
ce:0e:62:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 6 16:07:23 2023 by rpki-client on console-ams.rpki-client.org