Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167B91/76C46D20E78E11EC9475DA15C4F9AE02/7AA67B0AE87311EC9B7D5986C4F9AE02.roa
File: 7AA67B0AE87311EC9B7D5986C4F9AE02.roa (raw, json)
Hash identifier: KxDSc7m5R94lUfybTEeh5ALXsld9QsYF4ES4ode/4rk=
Subject key identifier: 27:DA:57:52:C0:19:1D:B1:74:F6:50:34:1D:5A:41:08:2C:71:F1:3A
Certificate issuer: /CN=A9167B91/serialNumber=F9EE651048EB42B3A2B55E2E89EEBB4EC7D72640
Certificate serial: 0185
Authority key identifier: F9:EE:65:10:48:EB:42:B3:A2:B5:5E:2E:89:EE:BB:4E:C7:D7:26:40
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-e5lEEjrQrOitV4uie67TsfXJkA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167B91/76C46D20E78E11EC9475DA15C4F9AE02/7AA67B0AE87311EC9B7D5986C4F9AE02.roa
Signing time: Tue 01 Aug 2023 03:43:28 +0000
ROA not before: Tue 01 Aug 2023 03:43:27 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 7575
IP address blocks: 132.234.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 389 (0x185)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167B91/serialNumber=F9EE651048EB42B3A2B55E2E89EEBB4EC7D72640
Validity
Not Before: Aug 1 03:43:27 2023 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=64c87f5f-f97b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b1:c3:c7:76:c2:49:2f:60:1a:a7:bc:25:59:
c0:1c:4b:9c:8a:79:13:1c:25:08:c5:61:5d:d3:74:
b2:c1:0d:a9:0b:04:e8:ea:6b:0e:15:e5:ac:ec:05:
89:c2:71:be:11:c4:3d:17:b5:ed:2e:45:bb:b5:99:
a5:c3:e7:2c:3e:0c:eb:34:72:d8:18:dd:76:b8:d2:
1c:62:6e:23:a4:03:33:61:14:4e:60:41:9b:d5:cf:
dd:60:14:1e:ec:87:29:1c:7e:73:72:0c:19:3c:07:
00:3c:0b:10:e1:f9:91:1d:87:24:a9:07:e0:39:a9:
38:31:dc:2a:8f:df:30:56:46:1a:a7:5e:6e:fa:a7:
6e:52:0e:e1:12:1b:76:bb:ea:24:df:24:02:96:3c:
bc:f1:84:78:0f:6c:80:de:e2:07:d8:82:78:30:c0:
ef:89:5a:a2:00:bb:60:58:01:a5:45:23:c4:3b:b9:
5a:05:ce:33:bc:bb:6c:65:f6:4c:cf:22:ca:cc:dc:
f4:49:27:aa:6a:22:98:23:58:28:de:24:37:a2:a1:
da:0d:81:fc:b1:2c:02:aa:84:1d:16:e9:d1:57:66:
94:67:71:12:1c:b1:05:29:f7:6a:13:64:0f:28:99:
f9:f3:ac:bb:2a:09:6c:4f:0d:8a:6a:32:ba:78:96:
cd:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:DA:57:52:C0:19:1D:B1:74:F6:50:34:1D:5A:41:08:2C:71:F1:3A
X509v3 Authority Key Identifier:
keyid:F9:EE:65:10:48:EB:42:B3:A2:B5:5E:2E:89:EE:BB:4E:C7:D7:26:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167B91/76C46D20E78E11EC9475DA15C4F9AE02/-e5lEEjrQrOitV4uie67TsfXJkA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-e5lEEjrQrOitV4uie67TsfXJkA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167B91/76C46D20E78E11EC9475DA15C4F9AE02/7AA67B0AE87311EC9B7D5986C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
132.234.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a8:25:c9:0b:ae:be:af:44:fa:37:de:d8:b5:a6:c8:c2:9a:dd:
de:9f:56:ab:8f:0a:71:9b:db:4a:83:e6:16:8c:b9:26:33:6a:
e5:0d:e0:7b:76:5d:41:da:c1:09:d9:53:61:74:55:b3:7b:88:
02:9b:93:10:f3:7d:05:83:a0:72:c1:58:71:83:8f:35:ca:00:
b9:34:49:59:bf:57:e6:7c:6e:fd:3e:ee:fd:a7:38:cc:f9:30:
db:19:d4:39:98:e3:cb:27:c2:31:f9:0c:95:aa:d0:ca:b2:85:
94:98:84:40:b5:7a:0f:d3:a3:8b:ce:b2:c6:c8:c1:c3:ba:fc:
17:ab:fa:c3:38:54:e7:01:5c:b3:70:7f:d7:72:95:3a:70:6d:
ec:2d:c9:fc:73:f3:e1:b4:4d:1b:29:66:32:ce:2a:f0:01:41:
5a:60:87:b1:f5:fa:bf:3b:09:d3:72:a2:6f:b1:0c:3f:e8:59:
8e:d9:68:bd:c1:86:f5:82:a4:6c:0c:38:a5:67:66:e2:22:86:
a7:36:98:5c:b3:dc:59:81:f6:d9:e4:25:11:3c:4d:8c:ca:a8:
86:ac:a4:1a:d8:f1:71:8e:cb:1d:4a:33:95:79:01:0d:ac:65:
04:6e:d6:d7:6a:2a:61:ff:37:3f:f4:6a:82:30:56:4e:a3:8a:
2a:ad:79:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:19 2024 by rpki-client on console-ams.rpki-client.org