Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9161FE1/99FD8AE019BE11EC88E6281EC4F9AE02/5A4D1AAE917811ED904ACF83C4F9AE02.roa
File: 5A4D1AAE917811ED904ACF83C4F9AE02.roa (raw, json)
Hash identifier: OHktYBzPk+F2tTNpwvn2Gwswq0pF0UlZ6EjozCl5/ek=
Subject key identifier: B2:DB:3F:68:D1:A2:18:2D:DA:33:61:9A:B9:CD:ED:FD:65:8F:BB:0F
Certificate issuer: /CN=A9161FE1/serialNumber=FF391E31AFD3FCE9E86F2E45834C41B0ADDC6FE9
Certificate serial: 032F
Authority key identifier: FF:39:1E:31:AF:D3:FC:E9:E8:6F:2E:45:83:4C:41:B0:AD:DC:6F:E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_zkeMa_T_Onoby5Fg0xBsK3cb-k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161FE1/99FD8AE019BE11EC88E6281EC4F9AE02/5A4D1AAE917811ED904ACF83C4F9AE02.roa
Signing time: Wed 11 Jan 2023 06:22:42 +0000
ROA not before: Wed 11 Jan 2023 06:22:42 +0000
ROA not after: Wed 31 Jan 2024 00:00:00 +0000
asID: 134711
IP address blocks: 220.158.188.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 815 (0x32f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161FE1/serialNumber=FF391E31AFD3FCE9E86F2E45834C41B0ADDC6FE9
Validity
Not Before: Jan 11 06:22:42 2023 GMT
Not After : Jan 31 00:00:00 2024 GMT
Subject: CN=63be55b1-0423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:91:5f:85:92:db:69:2f:b4:82:9f:a3:3b:1d:
4d:c4:4a:b1:84:74:3f:9d:9a:2e:bb:8f:b6:43:b7:
bf:cc:df:ae:a4:d5:4e:78:7f:c7:b4:ca:1d:ad:c9:
f8:c1:08:35:05:cb:75:ba:4a:7d:3d:57:8d:6e:d7:
f8:26:95:50:37:67:34:ea:72:57:ce:fa:ba:39:df:
69:c9:d8:05:73:6f:1f:90:52:42:b1:81:d6:3d:33:
b5:90:5b:ef:e6:bd:60:39:2e:5a:9b:fe:73:81:96:
39:dd:66:95:69:58:e6:aa:a7:fd:bc:00:70:5a:07:
03:f8:66:82:6e:63:67:3e:ad:92:eb:15:5f:c1:d9:
f4:99:75:a8:43:2c:3a:3b:b5:8c:a7:31:e2:3e:4c:
3c:1d:5e:3c:ab:4d:f7:7c:bf:ec:9f:6c:37:e6:c5:
79:4b:5a:b0:b6:31:c1:61:50:fe:23:af:2e:e0:af:
72:ca:0b:8b:49:2e:d2:2f:d2:4a:44:ae:e3:b0:12:
d0:2e:33:61:5e:e2:09:6f:63:68:92:5c:2d:68:cc:
a5:db:11:4f:cf:32:8f:02:28:16:09:46:6b:c4:21:
fa:35:c8:0e:f0:5a:39:d4:4f:ea:48:83:2b:2d:e8:
d4:36:59:fc:e1:b4:c2:96:81:b7:82:e4:b2:e4:47:
de:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:DB:3F:68:D1:A2:18:2D:DA:33:61:9A:B9:CD:ED:FD:65:8F:BB:0F
X509v3 Authority Key Identifier:
keyid:FF:39:1E:31:AF:D3:FC:E9:E8:6F:2E:45:83:4C:41:B0:AD:DC:6F:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161FE1/99FD8AE019BE11EC88E6281EC4F9AE02/_zkeMa_T_Onoby5Fg0xBsK3cb-k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_zkeMa_T_Onoby5Fg0xBsK3cb-k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161FE1/99FD8AE019BE11EC88E6281EC4F9AE02/5A4D1AAE917811ED904ACF83C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.158.188.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:11:96:ad:6a:ff:37:92:7e:d1:6d:f7:4b:f5:03:93:df:bf:
6a:95:38:02:5d:fb:a7:76:3b:f6:57:05:91:b7:54:e1:42:d0:
29:26:5d:fa:96:72:80:d9:0f:cb:95:c7:cd:9e:9d:72:08:ca:
c2:db:77:ca:93:d3:f7:25:50:78:47:2c:af:d9:2a:ff:cc:b1:
05:f4:ad:f0:f6:5a:5a:61:f3:5f:1e:90:a7:18:c8:a9:52:e9:
83:e3:c2:d7:f8:51:aa:1d:87:bd:4d:59:d1:79:6d:19:e6:a7:
5a:a1:3d:c2:32:19:16:d0:3d:20:82:f1:7a:0e:00:44:70:0a:
85:ad:9c:a4:d2:4b:d2:c0:bc:15:44:c7:f2:25:07:ca:02:22:
a3:47:78:c1:13:32:48:f6:86:0b:c2:2a:1c:47:80:e8:b4:b7:
ad:74:1a:05:14:5e:81:70:2d:a9:c1:52:cf:5c:f7:04:eb:a3:
54:dd:30:ab:b6:d2:14:50:78:c7:6c:87:ac:3b:df:b8:bd:27:
24:8c:92:9c:2a:10:57:30:54:75:c4:be:ac:eb:35:05:ce:a7:
23:1e:34:e5:d8:c5:49:6b:1c:52:96:f9:5e:be:5b:17:d4:81:
b9:29:fa:8d:90:6c:4c:42:75:74:41:31:dd:34:35:f5:50:d3:
a9:26:29:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:09 2024 by rpki-client on console-fra.rpki-client.org