Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91856F6/879F388E869E11EB9A049627C4F9AE02/4634804EBB7911EE9672F246C4F9AE02.roa
File: 4634804EBB7911EE9672F246C4F9AE02.roa (raw, json)
Hash identifier: EZDtp+yc7SsqRd1RK7b1YsO8l85hsXqMdUe/Voj5j5s=
Subject key identifier: BA:27:6E:45:A8:48:54:A4:84:25:7F:31:97:2D:9E:4E:F7:BC:05:F5
Certificate issuer: /CN=A91856F6/serialNumber=3A084422257FF5F179A50ECBFC02EBF725BB9343
Certificate serial: 05BD
Authority key identifier: 3A:08:44:22:25:7F:F5:F1:79:A5:0E:CB:FC:02:EB:F7:25:BB:93:43
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OghEIiV_9fF5pQ7L_ALr9yW7k0M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91856F6/879F388E869E11EB9A049627C4F9AE02/4634804EBB7911EE9672F246C4F9AE02.roa
Signing time: Thu 25 Jan 2024 12:00:04 +0000
ROA not before: Thu 25 Jan 2024 12:00:04 +0000
ROA not after: Mon 30 Dec 2024 00:00:00 +0000
asID: 45459
IP address blocks: 119.47.116.0/24 maxlen: 24
119.47.120.0/23 maxlen: 24
119.47.125.0/24 maxlen: 24
119.47.126.0/23 maxlen: 24
2404:3800::/48 maxlen: 48
2404:3800:1::/48 maxlen: 48
2404:3800:2::/47 maxlen: 47
2404:3800:4::/46 maxlen: 46
2404:3800:8::/46 maxlen: 46
2404:3800:c::/47 maxlen: 47
2404:3800:e::/48 maxlen: 48
2404:3800:10::/44 maxlen: 44
2404:3800:20::/43 maxlen: 43
2404:3800:40::/42 maxlen: 42
2404:3800:80::/41 maxlen: 41
2404:3800:100::/40 maxlen: 40
2404:3800:200::/39 maxlen: 39
2404:3800:400::/38 maxlen: 38
2404:3800:800::/37 maxlen: 37
2404:3800:1000::/36 maxlen: 36
2404:3800:2000::/35 maxlen: 35
2404:3800:4000::/34 maxlen: 34
2404:3800:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1469 (0x5bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91856F6/serialNumber=3A084422257FF5F179A50ECBFC02EBF725BB9343
Validity
Not Before: Jan 25 12:00:04 2024 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=65b24d44-e826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:6d:cd:97:7f:d8:fa:0a:5d:75:50:41:3d:0f:
d6:34:fe:e7:65:81:e1:b3:4c:55:df:78:75:ee:7f:
01:30:7b:b9:4b:a2:8c:c1:a8:84:c2:8a:16:16:93:
ee:3c:bb:3c:c5:76:b8:f9:c2:66:3b:d3:80:dd:46:
9c:cc:62:8f:77:5a:aa:6c:27:f9:44:d8:70:44:fb:
d0:8b:cf:f5:c3:25:a3:96:9c:0f:35:e5:ab:f7:56:
31:98:f3:43:04:0c:b8:0c:c9:03:6e:78:48:ab:cd:
2a:c2:34:3f:7f:02:5e:22:4d:de:1a:22:c4:fc:07:
ad:41:1f:fc:49:34:a0:ce:62:49:60:b5:02:27:da:
19:50:f7:1c:b5:da:22:fe:8d:c1:21:ae:0a:cd:4c:
76:4a:80:8c:64:53:20:84:6f:d5:bb:13:dd:04:20:
cd:55:1d:38:b1:e6:c5:c1:fe:b2:c4:ec:d9:8d:d3:
e3:b9:a5:53:87:70:cd:44:12:90:10:15:63:8f:21:
ab:56:e0:45:7e:12:47:9a:fe:34:5c:0f:eb:1c:2c:
9b:e9:f3:07:55:1b:0c:99:ba:fe:cd:fb:00:1f:aa:
f0:ac:3f:dc:01:8e:45:0e:1b:c0:56:53:45:ae:fc:
24:9e:9e:3d:aa:f7:39:b7:8d:a1:22:3b:2b:76:e6:
fa:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:27:6E:45:A8:48:54:A4:84:25:7F:31:97:2D:9E:4E:F7:BC:05:F5
X509v3 Authority Key Identifier:
keyid:3A:08:44:22:25:7F:F5:F1:79:A5:0E:CB:FC:02:EB:F7:25:BB:93:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91856F6/879F388E869E11EB9A049627C4F9AE02/OghEIiV_9fF5pQ7L_ALr9yW7k0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OghEIiV_9fF5pQ7L_ALr9yW7k0M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91856F6/879F388E869E11EB9A049627C4F9AE02/4634804EBB7911EE9672F246C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
119.47.116.0/24
119.47.120.0/23
119.47.125.0-119.47.127.255
IPv6:
2404:3800::-2404:3800:e:ffff:ffff:ffff:ffff:ffff
2404:3800:10::-2404:3800:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
4b:75:b2:fd:ad:29:36:4d:89:4c:b1:6d:38:6e:53:17:1a:92:
5f:7e:c9:8c:16:c2:15:46:8f:7d:81:6b:c3:8b:e9:8b:9b:13:
69:03:97:c4:48:c8:84:30:03:67:5a:23:ef:b6:c0:7b:b6:7e:
27:a0:5b:a5:c1:24:97:5e:be:ff:96:e7:19:15:ba:4a:25:a7:
28:61:37:35:41:9e:4c:73:15:a6:61:94:5f:64:4b:fe:a9:57:
cc:fe:65:b6:25:9f:02:39:8f:17:3b:13:6a:31:e0:ef:59:8a:
a1:43:d4:22:f3:0b:39:6e:db:0a:f5:a5:9f:b4:21:b7:5c:56:
b9:6f:36:b8:f7:c7:80:6a:ae:aa:96:b4:0b:a1:cc:10:15:b7:
03:a7:6e:fb:7b:45:83:2f:b8:ff:bb:ad:74:9f:7c:43:b3:f0:
cb:c1:b3:90:45:e3:5a:14:01:66:ae:68:ed:16:1f:53:3c:fd:
0d:38:80:18:c4:e4:2b:7c:93:a9:d6:ff:10:b4:ab:2d:32:1c:
57:8b:2b:2b:31:df:d0:e3:a4:75:4d:3a:3c:a8:3a:31:b1:38:
75:9e:1b:ec:39:d2:4a:66:8d:23:f9:65:72:43:39:f6:a6:54:
28:4b:9e:2e:c4:3c:62:85:8d:bf:ca:1a:d5:2d:ac:d4:75:1c:
e1:39:57:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-ams.rpki-client.org