Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91788FA/0435D160034311ED98849640C4F9AE02/8F31C232BD5C11ED85E59120C4F9AE02.roa
File: 8F31C232BD5C11ED85E59120C4F9AE02.roa (raw, json)
Hash identifier: D4tjor9k6fI0REI7/khDxgbX+Ym/E2w6iz1lXeYlmVY=
Subject key identifier: 39:1F:57:D0:DA:CF:21:A7:46:E0:76:6E:96:E0:C6:C8:F2:5B:66:FF
Certificate issuer: /CN=A91788FA/serialNumber=FDDCB69FE9B7433D3A48FBEE72E659480515DD19
Certificate serial: FC
Authority key identifier: FD:DC:B6:9F:E9:B7:43:3D:3A:48:FB:EE:72:E6:59:48:05:15:DD:19
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dy2n-m3Qz06SPvucuZZSAUV3Rk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91788FA/0435D160034311ED98849640C4F9AE02/8F31C232BD5C11ED85E59120C4F9AE02.roa
Signing time: Wed 08 Mar 2023 02:54:36 +0000
ROA not before: Wed 08 Mar 2023 02:54:36 +0000
ROA not after: Wed 01 May 2024 00:00:00 +0000
asID: 65535
IP address blocks: 43.229.152.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 252 (0xfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91788FA/serialNumber=FDDCB69FE9B7433D3A48FBEE72E659480515DD19
Validity
Not Before: Mar 8 02:54:36 2023 GMT
Not After : May 1 00:00:00 2024 GMT
Subject: CN=6407f8eb-5df1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:64:69:b6:a3:a0:f0:b9:8a:6a:85:df:a3:e7:
f8:7e:29:b9:81:8b:55:6d:4f:bb:c5:d3:90:58:f6:
72:ed:5c:48:63:a2:40:55:d7:a8:5f:2e:14:3a:a9:
96:3c:89:d8:13:26:a7:8e:e5:f5:13:df:3c:d6:72:
8a:f0:39:cb:f7:1f:53:44:ff:bc:f6:07:a5:47:d6:
52:0f:f2:78:8b:d7:a2:23:60:74:46:7c:6d:c7:f3:
e1:15:64:2f:e7:fa:84:f3:e4:00:4b:d5:0f:f6:68:
4a:3a:51:f6:9f:26:19:4c:82:aa:bb:cc:e6:72:a5:
55:f7:19:c3:e6:0a:f6:db:2e:ba:c1:e0:67:81:ec:
29:81:cd:82:67:63:c4:02:74:fa:5a:a8:54:57:08:
b9:c5:85:b7:8e:a1:ec:92:c0:9e:ea:21:fb:62:db:
55:78:ca:71:7e:12:a9:7a:89:54:ba:89:e7:3e:bb:
26:4e:2c:b6:2f:92:48:86:eb:ab:97:53:ed:8d:93:
f6:9f:8f:ae:85:0d:2e:e9:fa:73:c0:89:74:60:23:
ca:12:9a:b6:df:73:b5:73:c5:0d:21:37:39:f2:f7:
c7:6b:88:d5:c9:fd:b0:a6:dd:8a:48:2f:6d:52:c7:
d6:db:d2:96:96:57:07:a1:f1:cd:96:e0:03:e7:2e:
ec:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:1F:57:D0:DA:CF:21:A7:46:E0:76:6E:96:E0:C6:C8:F2:5B:66:FF
X509v3 Authority Key Identifier:
keyid:FD:DC:B6:9F:E9:B7:43:3D:3A:48:FB:EE:72:E6:59:48:05:15:DD:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91788FA/0435D160034311ED98849640C4F9AE02/_dy2n-m3Qz06SPvucuZZSAUV3Rk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dy2n-m3Qz06SPvucuZZSAUV3Rk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91788FA/0435D160034311ED98849640C4F9AE02/8F31C232BD5C11ED85E59120C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.229.152.0/22
Signature Algorithm: sha256WithRSAEncryption
09:1d:be:f7:49:d8:6e:47:9c:a1:6c:46:ed:22:49:3e:3e:6d:
15:37:82:1f:1e:ed:f0:e4:23:3e:67:3c:7b:49:7e:e2:83:42:
38:98:1e:0a:25:4c:7c:c8:31:6c:7a:43:25:b2:7d:de:31:f4:
cf:50:c2:42:05:94:2f:e2:89:df:29:75:c7:d3:f1:5d:7e:fb:
19:dd:4b:ce:1a:ea:3c:69:e9:20:19:8f:9b:64:ad:31:cf:2b:
0a:e3:ba:bf:30:f2:d2:38:b9:2e:7c:c3:7c:16:7e:13:e0:76:
3b:87:e1:c1:0a:b1:15:ea:db:b3:c7:cb:d6:b6:81:03:d8:dd:
c7:c8:ca:e9:00:4a:80:9e:8b:90:3b:b8:f9:25:3c:5f:4e:a7:
bc:76:b7:48:1b:7f:1c:eb:09:2c:95:b8:a5:83:46:17:5d:2d:
f4:7d:35:f9:33:2e:85:e3:40:22:c3:09:ac:d8:89:e2:b6:d5:
d4:0e:ef:07:c6:60:c8:59:0d:03:89:23:26:00:56:45:89:21:
c8:ab:7c:71:44:b1:b1:99:e3:be:2d:e3:8e:d1:0b:0e:71:7a:
16:50:00:b5:2d:85:be:09:d3:80:bd:b7:c2:ac:25:df:50:91:
48:95:d8:99:c1:d0:84:db:32:cd:f3:78:c4:bb:e5:c7:e3:68:
84:c7:6d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:47 2023 by rpki-client on console-fra.rpki-client.org