Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B0ED/11C4D7DA47BC11E58F79E820C4F9AE02/87EFDECA54F611E79DF7E643C4F9AE02.roa
File: 87EFDECA54F611E79DF7E643C4F9AE02.roa (raw, json)
Hash identifier: ncgsE5ynKWe6TLcTRYhjHZHc9/67omobH4iNa0ygxoQ=
Subject key identifier: 6D:B1:16:DE:D7:5E:4C:FE:AA:9B:5D:44:04:E7:CB:80:12:C7:08:E8
Certificate issuer: /CN=A915B0ED/serialNumber=CD02985AF159C75D531A81DAB52C40E848DB0012
Certificate serial: 223E
Authority key identifier: CD:02:98:5A:F1:59:C7:5D:53:1A:81:DA:B5:2C:40:E8:48:DB:00:12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zQKYWvFZx11TGoHatSxA6EjbABI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B0ED/11C4D7DA47BC11E58F79E820C4F9AE02/87EFDECA54F611E79DF7E643C4F9AE02.roa
Signing time: Tue 16 Aug 2022 04:34:52 +0000
ROA not before: Tue 16 Aug 2022 04:34:52 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 23736
IP address blocks: 58.139.240.0/20 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8766 (0x223e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B0ED/serialNumber=CD02985AF159C75D531A81DAB52C40E848DB0012
Validity
Not Before: Aug 16 04:34:52 2022 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=62fb1e6c-ad95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:25:5d:df:d4:e1:63:3a:da:76:42:75:3d:9a:
a8:df:21:26:42:3c:0b:bb:2f:00:7f:1f:cd:6d:2f:
b5:62:33:7b:9f:af:4c:f4:47:ce:56:31:1c:01:c9:
f5:ce:97:38:d7:b9:05:67:50:9a:85:6a:1c:32:f5:
ea:26:44:67:51:62:f4:7f:81:75:7a:87:66:7d:77:
6a:7b:ba:78:33:cd:c2:68:f6:90:17:e8:dd:f4:1d:
11:6c:a4:ba:ee:b1:7c:98:da:ce:ef:1e:0a:de:74:
b5:cb:b0:49:44:20:7d:b9:12:05:e5:56:e6:97:31:
f1:c7:3a:43:f8:0b:51:cd:a6:8d:75:82:ab:72:b8:
0a:6e:a6:c1:88:37:e9:7c:b8:77:66:81:5f:ef:20:
5d:b7:cc:ca:b7:cd:9b:86:14:03:9b:de:5c:9b:db:
87:d4:32:55:4a:c5:81:aa:b0:2a:f1:47:68:7c:83:
57:d7:87:c3:24:97:6c:0f:b0:7b:fb:1a:b9:03:c5:
73:6e:03:e2:b5:aa:24:6a:1e:ac:de:ae:f5:fc:16:
a9:53:d1:ba:a1:77:fd:79:b8:29:51:b4:e1:08:41:
93:c5:97:6d:6e:38:da:e3:d1:fe:e0:b5:45:73:f5:
fd:82:d7:c3:63:6b:ed:cc:be:09:91:29:17:42:7c:
5c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:B1:16:DE:D7:5E:4C:FE:AA:9B:5D:44:04:E7:CB:80:12:C7:08:E8
X509v3 Authority Key Identifier:
keyid:CD:02:98:5A:F1:59:C7:5D:53:1A:81:DA:B5:2C:40:E8:48:DB:00:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B0ED/11C4D7DA47BC11E58F79E820C4F9AE02/zQKYWvFZx11TGoHatSxA6EjbABI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zQKYWvFZx11TGoHatSxA6EjbABI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B0ED/11C4D7DA47BC11E58F79E820C4F9AE02/87EFDECA54F611E79DF7E643C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
58.139.240.0/20
Signature Algorithm: sha256WithRSAEncryption
9f:56:68:55:d7:f7:99:ef:b9:00:b7:45:22:26:1a:77:cf:cc:
1b:0d:35:7e:6a:73:01:82:43:83:da:2f:55:73:7c:b4:ea:3f:
11:81:be:2b:0c:c2:b1:13:97:94:f8:72:91:dd:9f:f0:ed:78:
b5:ee:ab:9b:b7:c9:17:1d:ab:7c:48:35:41:08:3e:e0:ce:51:
d1:1f:20:32:81:bd:72:2f:f1:4b:86:eb:9c:ea:78:1b:f8:7d:
cc:bb:91:e0:a1:cd:a0:0d:93:2a:fe:90:4d:69:55:5a:9a:be:
ee:ad:74:59:a5:77:37:04:d9:34:ba:55:b4:51:fa:32:92:2e:
d2:52:80:65:73:7c:b4:c0:41:80:7c:ac:7d:60:d3:ae:66:4f:
df:30:72:54:4f:25:d4:57:b9:b7:c8:1b:8a:bc:76:f5:5a:b3:
d2:b7:b9:f3:ca:fa:2d:34:8d:eb:f7:6b:9c:22:f7:64:e8:ac:
04:c4:3f:89:35:86:d9:77:a4:0a:51:9e:31:3d:ef:50:b8:3c:
ab:27:1f:f2:7e:41:2f:54:d3:d9:34:e6:32:54:e8:b8:6b:9b:
37:30:07:cc:fb:4a:82:b8:d0:ea:68:76:fd:ef:c4:ae:88:71:
77:33:5c:af:ee:6b:ec:63:8a:48:46:ae:4c:11:01:d6:1b:b9:
2b:70:ec:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:08 2024 by rpki-client on console-fra.rpki-client.org