Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C287/861FD87AF5AA11ECBF15E774C4F9AE02/F63CD20C210A11EE8A73CC30C4F9AE02.roa
File: F63CD20C210A11EE8A73CC30C4F9AE02.roa (raw, json)
Hash identifier: H44xzBOtu2YW/szrM1+UaQ4g8u5Ifp5r6UY91kQ4XtU=
Subject key identifier: 03:96:21:AF:84:67:DD:62:D1:6F:8F:14:94:32:7F:A5:E2:7D:BE:0E
Certificate issuer: /CN=A918C287/serialNumber=847014B15AFA781D228192BE054153DB6667D576
Certificate serial: 0173
Authority key identifier: 84:70:14:B1:5A:FA:78:1D:22:81:92:BE:05:41:53:DB:66:67:D5:76
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHAUsVr6eB0igZK-BUFT22Zn1XY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C287/861FD87AF5AA11ECBF15E774C4F9AE02/F63CD20C210A11EE8A73CC30C4F9AE02.roa
Signing time: Wed 12 Jul 2023 23:22:26 +0000
ROA not before: Wed 12 Jul 2023 23:22:26 +0000
ROA not after: Sat 01 May 2038 00:00:00 +0000
asID: 121212121
IP address blocks: 203.176.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 371 (0x173)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C287/serialNumber=847014B15AFA781D228192BE054153DB6667D576
Validity
Not Before: Jul 12 23:22:26 2023 GMT
Not After : May 1 00:00:00 2038 GMT
Subject: CN=64af35b2-45b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:d7:09:16:f8:cf:4f:73:d1:b8:b5:03:24:f7:
4d:59:4f:dc:5f:13:a2:06:0b:02:ed:0b:e6:50:d6:
c8:7f:7c:78:8e:82:74:5a:84:e5:ba:3a:fc:d1:12:
02:2a:39:d4:12:c8:5e:35:09:7f:8a:38:73:28:25:
43:8d:c6:87:d2:ea:c8:4d:b0:d8:fc:ee:73:4f:71:
a9:5e:8f:67:82:76:44:cc:98:dc:8b:47:94:8a:c1:
2e:a9:93:9b:63:53:cd:d1:96:eb:1c:cb:e3:00:85:
56:8a:86:ca:24:21:7d:28:07:8b:99:7f:f0:fd:81:
03:3b:78:90:33:2c:5e:33:62:83:cf:cc:ee:e6:86:
f6:1f:14:2b:35:35:be:f4:16:20:56:4a:bf:28:8b:
e0:2f:03:f0:ce:b3:91:1f:5c:82:24:a9:7a:41:85:
91:9c:bd:0f:ee:f3:38:c1:df:0f:c1:94:03:8e:f3:
51:f9:4a:57:fb:ae:7b:bf:bc:8d:8b:3e:90:0f:8f:
10:c4:42:4e:1f:1f:d9:0f:a6:bf:57:45:98:28:cc:
7f:d1:8c:2b:89:66:80:d4:b3:5c:75:95:6b:d7:94:
67:9d:3c:04:78:06:b8:72:29:ab:6b:75:d9:6f:7d:
aa:2b:5d:ab:58:5b:b6:d0:97:96:84:37:8e:1c:d1:
bf:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:96:21:AF:84:67:DD:62:D1:6F:8F:14:94:32:7F:A5:E2:7D:BE:0E
X509v3 Authority Key Identifier:
keyid:84:70:14:B1:5A:FA:78:1D:22:81:92:BE:05:41:53:DB:66:67:D5:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C287/861FD87AF5AA11ECBF15E774C4F9AE02/hHAUsVr6eB0igZK-BUFT22Zn1XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHAUsVr6eB0igZK-BUFT22Zn1XY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C287/861FD87AF5AA11ECBF15E774C4F9AE02/F63CD20C210A11EE8A73CC30C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.176.189.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:40:78:cc:fb:b3:53:2b:ef:bc:40:c3:51:2d:3c:43:3f:3e:
d7:3a:25:80:ca:cd:81:0d:ea:4b:f4:70:f6:ba:e5:9a:d2:03:
6e:97:38:8f:50:fb:20:a2:3e:3c:60:fe:4f:46:2a:9f:be:73:
83:06:fc:f7:12:94:8f:0b:af:34:39:e4:91:8e:26:3d:88:2a:
1e:7b:02:3f:20:ee:39:52:87:1e:58:91:b7:be:fc:f7:c1:cf:
6d:2a:42:9b:66:f0:6a:65:cf:44:71:7d:0e:91:b3:48:da:00:
9c:f7:a4:21:ea:cd:1c:26:c3:84:94:70:e7:70:f1:bd:7f:0e:
9f:48:c8:cb:ba:c3:fb:e4:0b:bc:c9:08:b4:5a:ff:7c:79:95:
0c:9d:2c:bc:89:12:82:ed:67:b8:5f:df:de:bd:88:57:c3:b5:
f6:f7:05:16:bd:09:86:de:12:1e:e6:3b:d0:5e:65:2a:7f:58:
9d:5d:3f:25:9d:1d:cc:25:dc:0d:b7:41:29:47:da:07:97:27:
9b:00:65:0a:f4:79:6e:4f:93:7f:42:c0:a6:9b:70:22:fa:93:
47:1f:15:be:14:55:5f:d0:01:b2:99:cd:05:fa:8c:f3:27:9f:
43:3a:ae:be:76:81:74:8d:99:c7:df:cb:43:72:e0:d2:cc:92:
5d:b4:26:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:15 2024 by rpki-client on console-fra.rpki-client.org