Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C287/861FD87AF5AA11ECBF15E774C4F9AE02/935E135EADFA11ED96DF813CC4F9AE02.roa
File: 935E135EADFA11ED96DF813CC4F9AE02.roa (raw, json)
Hash identifier: cqtxUtPVmmngQI4ASclIDLgAliDbN5MO2P2l4R1slHs=
Subject key identifier: 27:49:20:92:C2:C1:55:DE:AE:4B:B9:86:0E:E3:32:6A:86:B9:1F:B4
Certificate issuer: /CN=A918C287/serialNumber=847014B15AFA781D228192BE054153DB6667D576
Certificate serial: 0114
Authority key identifier: 84:70:14:B1:5A:FA:78:1D:22:81:92:BE:05:41:53:DB:66:67:D5:76
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHAUsVr6eB0igZK-BUFT22Zn1XY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C287/861FD87AF5AA11ECBF15E774C4F9AE02/935E135EADFA11ED96DF813CC4F9AE02.roa
Signing time: Thu 16 Feb 2023 13:05:25 +0000
ROA not before: Thu 16 Feb 2023 13:05:25 +0000
ROA not after: Sat 01 May 2038 00:00:00 +0000
asID: 12345678
IP address blocks: 203.176.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 276 (0x114)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C287/serialNumber=847014B15AFA781D228192BE054153DB6667D576
Validity
Not Before: Feb 16 13:05:25 2023 GMT
Not After : May 1 00:00:00 2038 GMT
Subject: CN=63ee2a14-a491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:30:a1:97:d7:2b:6e:b9:da:e8:da:1b:c6:95:
fc:d3:bd:6a:c8:dc:cc:78:4b:66:c6:e0:f7:9f:89:
3d:aa:81:6a:7a:40:53:3f:f6:aa:f3:7a:9e:f3:53:
38:00:97:e3:f1:a9:46:0f:1f:7e:59:eb:b9:e7:09:
40:d2:19:7b:6a:e1:b4:80:0f:27:85:75:ff:d9:02:
4c:44:63:2b:30:6b:32:01:17:59:ef:a0:5a:21:53:
39:f0:27:3d:6c:31:24:c6:09:d5:8d:39:57:d1:36:
7d:80:4f:3d:0e:9f:38:19:7e:b0:52:d2:12:1d:75:
1e:77:60:68:89:fb:10:9b:11:1b:e8:98:8e:bd:88:
13:87:3f:f7:8a:bc:7b:7f:c0:0d:2c:a4:45:9e:dc:
ce:b6:57:57:96:af:5d:d5:2d:c9:e3:71:d4:00:90:
61:7d:d9:cd:24:da:de:ef:fb:bd:53:c0:1e:77:a6:
cc:b9:d5:72:3b:07:68:52:6b:e7:1d:88:ab:d5:8a:
57:1e:de:aa:b5:61:64:83:82:38:92:4b:12:8b:f8:
4a:47:ab:37:af:ae:36:12:b2:7b:24:7e:e4:bc:00:
c7:1a:65:65:d1:90:1d:44:8d:1c:b8:9b:0b:d3:6c:
2d:53:46:bb:73:15:74:fb:fd:ae:4b:7f:95:1f:e3:
20:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:49:20:92:C2:C1:55:DE:AE:4B:B9:86:0E:E3:32:6A:86:B9:1F:B4
X509v3 Authority Key Identifier:
keyid:84:70:14:B1:5A:FA:78:1D:22:81:92:BE:05:41:53:DB:66:67:D5:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C287/861FD87AF5AA11ECBF15E774C4F9AE02/hHAUsVr6eB0igZK-BUFT22Zn1XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHAUsVr6eB0igZK-BUFT22Zn1XY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C287/861FD87AF5AA11ECBF15E774C4F9AE02/935E135EADFA11ED96DF813CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.176.189.0/24
Signature Algorithm: sha256WithRSAEncryption
72:00:ad:65:ad:92:a8:1b:8b:dc:12:b1:8d:08:e7:8f:48:15:
ce:0d:3d:8f:0f:17:79:4c:e5:8d:e7:23:32:55:8f:5c:5b:41:
9f:ed:9f:c4:8f:85:29:9b:3a:17:9a:d8:86:2c:8d:f8:3d:86:
aa:2f:a7:97:61:0e:80:a2:d7:d8:7f:fe:4b:eb:df:24:d2:92:
88:12:22:da:f1:2f:2e:7d:da:69:24:2a:0d:5a:a3:fa:d5:d5:
be:07:6b:01:86:ac:f3:da:e9:ce:2b:15:6d:54:35:9f:58:fe:
ef:cf:fe:2d:8c:89:f7:c9:57:95:e4:d1:98:d4:fd:a0:bc:bf:
e6:d8:a1:ec:49:fe:21:7e:a8:a4:ec:76:4d:bb:1e:3c:f9:f8:
95:fe:11:82:cc:54:a9:7f:64:9d:e5:cc:26:95:2c:d1:28:71:
ee:fa:40:11:2c:69:97:62:e7:8e:c9:f7:d2:ef:91:fd:89:ea:
ad:13:87:55:bb:53:4a:65:14:60:ac:9f:57:a1:fc:7d:f0:ea:
ac:6c:25:73:13:ef:ed:d3:fa:65:78:30:47:bd:13:63:6c:54:
12:ce:90:40:a0:63:a4:42:f3:20:cb:ef:f3:d5:28:ef:42:55:
5b:a7:a9:c5:68:35:12:e7:9f:fb:5f:be:90:ea:4d:20:a5:da:
b1:6d:2d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:15 2024 by rpki-client on console-fra.rpki-client.org