Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91788FA/0435D160034311ED98849640C4F9AE02/3E9AF180BBE611EDA21A6B69C4F9AE02.roa
File: 3E9AF180BBE611EDA21A6B69C4F9AE02.roa (raw, json)
Hash identifier: sNIsyV8vkDvv6kPIOHUEGnR4by6solW/WLrRlEZzJrY=
Subject key identifier: A2:27:AB:E5:00:78:9C:E9:B9:B8:A1:AA:AE:15:CF:AA:C5:C0:11:83
Certificate issuer: /CN=A91788FA/serialNumber=FDDCB69FE9B7433D3A48FBEE72E659480515DD19
Certificate serial: F5
Authority key identifier: FD:DC:B6:9F:E9:B7:43:3D:3A:48:FB:EE:72:E6:59:48:05:15:DD:19
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dy2n-m3Qz06SPvucuZZSAUV3Rk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91788FA/0435D160034311ED98849640C4F9AE02/3E9AF180BBE611EDA21A6B69C4F9AE02.roa
Signing time: Mon 06 Mar 2023 06:15:09 +0000
ROA not before: Mon 06 Mar 2023 06:15:08 +0000
ROA not after: Wed 01 May 2024 00:00:00 +0000
asID: 64021
IP address blocks: 43.229.152.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 245 (0xf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91788FA/serialNumber=FDDCB69FE9B7433D3A48FBEE72E659480515DD19
Validity
Not Before: Mar 6 06:15:08 2023 GMT
Not After : May 1 00:00:00 2024 GMT
Subject: CN=640584ec-b1e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:20:36:14:a3:6d:40:83:0a:e5:9e:1c:ec:c3:
5e:3d:d0:c0:8d:16:56:55:23:56:9b:6d:0a:c1:ae:
4e:f8:f1:28:f4:f4:ce:96:6c:96:a7:71:e2:23:4c:
b7:76:a1:7c:8b:83:34:8f:f1:af:6a:fa:43:a2:c1:
7a:18:0b:d3:41:7a:ba:31:fe:12:78:a9:e8:5b:b8:
d8:97:62:c8:1d:e9:5b:32:58:3e:87:b8:e0:73:57:
6b:3c:5c:4b:57:2e:ff:b9:63:19:8d:7d:a9:0d:e3:
ac:90:a7:c3:ee:ee:2b:a4:aa:01:68:f6:10:36:27:
68:dc:18:57:24:2c:e5:31:b2:68:a0:f5:d3:17:e4:
09:a2:8e:83:3e:87:8b:5b:78:18:84:3a:d8:da:3b:
65:3d:db:3f:ea:8a:49:00:cd:ef:5f:35:af:48:be:
0c:33:cf:50:ce:a1:49:54:2c:23:04:33:7c:87:fb:
00:09:7a:60:23:a3:70:17:55:66:a3:e4:8a:44:b6:
85:f1:a8:88:6c:7b:b4:c6:a7:04:e7:d6:97:bb:f5:
a0:71:9d:b5:ca:4e:5d:85:a5:8a:13:0f:0e:ff:3f:
56:b4:26:35:80:c6:fd:4f:a4:e5:1b:46:26:11:81:
01:0e:29:84:78:0e:af:13:1f:8f:aa:13:49:94:47:
3f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:27:AB:E5:00:78:9C:E9:B9:B8:A1:AA:AE:15:CF:AA:C5:C0:11:83
X509v3 Authority Key Identifier:
keyid:FD:DC:B6:9F:E9:B7:43:3D:3A:48:FB:EE:72:E6:59:48:05:15:DD:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91788FA/0435D160034311ED98849640C4F9AE02/_dy2n-m3Qz06SPvucuZZSAUV3Rk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dy2n-m3Qz06SPvucuZZSAUV3Rk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91788FA/0435D160034311ED98849640C4F9AE02/3E9AF180BBE611EDA21A6B69C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.229.152.0/22
Signature Algorithm: sha256WithRSAEncryption
00:cd:5e:c5:1e:92:06:08:43:83:51:d6:33:03:12:e7:10:49:
6e:3b:a7:b1:31:bf:90:ce:b7:df:0d:8d:e2:34:45:6d:f6:70:
c7:0a:49:c8:65:af:76:23:c2:08:eb:cb:76:d4:5f:22:25:6c:
f3:93:c1:44:5a:57:7d:0f:7c:cd:4c:17:b4:39:3c:1a:71:38:
65:73:d8:57:2f:45:9f:e2:9f:b7:46:61:ba:7e:4a:b1:c2:91:
8c:19:8b:12:de:85:0f:aa:1a:01:bb:75:34:bc:43:c5:10:ad:
48:01:c2:ca:b5:77:e7:a3:a5:60:ae:4c:c1:70:90:1b:39:98:
ef:21:41:64:75:cd:ed:d7:a0:57:b8:25:11:79:18:79:8d:cc:
b7:2c:9f:23:ec:26:9e:4d:51:b3:8a:84:41:ed:e4:eb:74:94:
77:e6:fe:cd:fe:90:06:ea:81:50:0e:34:78:14:ae:9a:51:9b:
de:39:db:ab:67:63:14:e8:f4:d3:b1:8d:f9:22:81:c6:bd:aa:
1c:4d:f2:a4:3a:9e:d7:ef:eb:11:09:9c:a2:50:df:ea:ef:0d:
c3:4e:6a:04:b6:26:aa:5a:31:ca:1a:3d:dd:92:d6:36:d7:a4:
db:64:ab:3d:0c:11:d7:9c:b2:ec:8b:af:1c:86:c7:d0:1f:32:
55:2b:ac:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:22 2024 by rpki-client on console-ams.rpki-client.org