Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91788FA/0435D160034311ED98849640C4F9AE02/12E83836BC2C11EDA3F95F2EC4F9AE02.roa
File: 12E83836BC2C11EDA3F95F2EC4F9AE02.roa (raw, json)
Hash identifier: U/RLYGk/w8OM8pProsc4uoLINE2HXL9W08pzJLKCDJc=
Subject key identifier: 21:69:EC:0E:2D:6D:27:B7:3D:A2:5A:35:7A:11:E0:63:4D:9C:63:58
Certificate issuer: /CN=A91788FA/serialNumber=FDDCB69FE9B7433D3A48FBEE72E659480515DD19
Certificate serial: F9
Authority key identifier: FD:DC:B6:9F:E9:B7:43:3D:3A:48:FB:EE:72:E6:59:48:05:15:DD:19
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dy2n-m3Qz06SPvucuZZSAUV3Rk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91788FA/0435D160034311ED98849640C4F9AE02/12E83836BC2C11EDA3F95F2EC4F9AE02.roa
Signing time: Mon 06 Mar 2023 14:35:00 +0000
ROA not before: Mon 06 Mar 2023 14:35:00 +0000
ROA not after: Wed 01 May 2024 00:00:00 +0000
asID: 64021
IP address blocks: 43.229.152.0/22 maxlen: 22
43.229.152.0/24 maxlen: 24
43.229.153.0/24 maxlen: 24
43.229.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 249 (0xf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91788FA/serialNumber=FDDCB69FE9B7433D3A48FBEE72E659480515DD19
Validity
Not Before: Mar 6 14:35:00 2023 GMT
Not After : May 1 00:00:00 2024 GMT
Subject: CN=6405fa14-e1a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:0d:cc:59:92:4d:68:c5:b1:a2:67:b5:d9:71:
7f:09:75:b4:5b:75:aa:c9:82:b0:79:73:19:52:22:
60:36:dc:3c:ce:45:24:f3:c0:a8:f1:30:4e:a6:b5:
3c:3a:d3:7c:9d:dc:8c:46:1f:6e:14:00:ba:80:1c:
28:ce:04:ba:28:bb:ca:49:ee:e0:da:bb:d0:3c:53:
ed:16:27:b0:81:30:a0:d2:e6:96:28:99:47:2b:50:
f6:5c:89:8e:00:b6:70:39:e1:70:a3:5a:fc:b1:98:
b0:e7:b1:5b:59:32:dc:a5:99:be:53:d9:13:59:a1:
c1:20:d3:bb:42:79:b4:ab:a0:c9:a5:f2:d7:05:c8:
7e:bf:58:55:44:43:82:63:9e:c6:4a:3d:68:a7:ed:
5e:0e:5b:70:57:13:57:79:2f:ba:c4:08:60:1b:99:
b5:bc:a6:6c:99:a1:26:2f:42:7b:98:82:73:78:c0:
28:16:84:de:13:e9:2e:3e:bb:4a:ce:f1:56:bf:58:
c1:d3:2e:38:dc:25:1e:90:9b:83:08:0b:df:40:d7:
4e:b2:1a:0c:8f:26:c7:06:ad:42:7f:02:f7:22:01:
8a:12:23:9d:d5:43:0e:96:e2:6c:32:c0:14:50:bc:
f7:9b:c1:76:50:62:2c:4d:f1:16:e3:df:42:a0:6a:
6a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:69:EC:0E:2D:6D:27:B7:3D:A2:5A:35:7A:11:E0:63:4D:9C:63:58
X509v3 Authority Key Identifier:
keyid:FD:DC:B6:9F:E9:B7:43:3D:3A:48:FB:EE:72:E6:59:48:05:15:DD:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91788FA/0435D160034311ED98849640C4F9AE02/_dy2n-m3Qz06SPvucuZZSAUV3Rk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dy2n-m3Qz06SPvucuZZSAUV3Rk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91788FA/0435D160034311ED98849640C4F9AE02/12E83836BC2C11EDA3F95F2EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.229.152.0/22
Signature Algorithm: sha256WithRSAEncryption
92:be:12:87:c4:7e:9c:2e:7f:20:bf:6b:31:ad:d6:f6:07:e8:
d1:52:65:27:13:fc:f6:12:e3:63:c9:84:1d:a7:1d:7f:d7:9b:
6a:ea:54:4d:61:26:09:dd:37:dd:71:d2:ae:ae:12:fd:b9:8a:
da:cc:0e:df:28:c3:a2:6c:27:f5:81:b0:f0:aa:19:7d:f3:86:
16:28:32:59:20:35:1f:43:6c:d9:1e:81:10:cc:90:2d:69:c5:
0e:4b:85:c7:b3:19:3a:a2:12:5f:63:ae:18:17:f9:74:b6:90:
a7:80:e2:1e:1d:73:31:fc:8e:36:12:07:74:00:8c:1d:7d:e2:
7f:ad:81:b8:1d:9c:8d:d4:38:ba:a4:cd:55:8d:2d:fb:65:ef:
21:84:f2:7c:d0:bb:f7:ae:1c:8c:47:58:58:84:93:8b:cd:69:
a9:ab:8e:95:c9:80:c9:6c:9e:90:1e:1a:a3:67:5f:be:41:c7:
c8:e1:ec:95:d0:d5:db:4b:d1:0d:a1:9c:ac:cb:9f:d6:01:1b:
91:f6:1f:5a:ff:55:e1:18:a2:50:08:92:62:ef:c2:d3:ba:da:
16:3b:58:f4:6a:76:79:bc:ac:0a:2f:da:67:e0:1b:1f:1e:b5:
c1:67:76:2a:72:37:ab:78:c5:90:bd:3c:07:e8:c6:80:0d:fb:
36:10:de:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:44 2023 by rpki-client on console-ams.rpki-client.org