Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919E833/4AA3E6E2C64B11E495FF9635C4F9AE02/0B706CBAD2FD11EAAAFB3967C4F9AE02.roa
File: 0B706CBAD2FD11EAAAFB3967C4F9AE02.roa (raw, json)
Hash identifier: ExXI4DmnoKsjv+K+jiglG6FC7DXl1dFHG9g/xziWOHg=
Subject key identifier: 49:3B:2C:C1:BD:F8:DC:3F:F9:57:1B:B8:4D:35:13:BD:EB:88:79:03
Certificate issuer: /CN=A919E833/serialNumber=48AAE00D13DFB3CCDFB3A7D25FDC356FADC5BEC8
Certificate serial: 2164
Authority key identifier: 48:AA:E0:0D:13:DF:B3:CC:DF:B3:A7:D2:5F:DC:35:6F:AD:C5:BE:C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SKrgDRPfs8zfs6fSX9w1b63Fvsg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919E833/4AA3E6E2C64B11E495FF9635C4F9AE02/0B706CBAD2FD11EAAAFB3967C4F9AE02.roa
Signing time: Fri 30 Apr 2021 16:21:51 +0000
ROA not before: Fri 30 Apr 2021 16:21:51 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 45807
IP address blocks: 110.164.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8548 (0x2164)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919E833/serialNumber=48AAE00D13DFB3CCDFB3A7D25FDC356FADC5BEC8
Validity
Not Before: Apr 30 16:21:51 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=608c2e9e-9f76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:61:b2:00:30:c9:80:ac:6a:85:91:81:0e:49:
5a:32:f4:3e:90:41:a8:7b:26:6a:c9:7f:8c:7a:a5:
c8:2c:8a:5c:89:e1:5a:3b:96:bc:60:7b:aa:22:ec:
67:6a:57:6e:3b:72:a0:0c:5a:ad:c8:a7:1c:00:3a:
62:b5:dc:cc:fa:76:9b:d5:94:63:d1:8b:75:03:3e:
81:f1:34:2e:a1:68:be:02:55:e2:b0:ee:4f:36:fd:
71:94:c0:74:64:25:28:e0:c3:b4:a1:0c:b7:ab:da:
85:8d:b6:84:15:15:62:52:b6:ad:99:f2:91:04:05:
b8:5c:1b:81:92:49:b1:cd:d3:59:ff:b8:7f:b2:8c:
ef:dc:db:1e:e5:40:a0:c6:a0:00:45:d4:56:15:39:
a4:8a:fb:70:1b:f9:ea:38:55:fe:dc:ff:f9:b6:dc:
b1:86:29:6c:bf:1d:e8:1e:97:de:3c:a1:16:0a:af:
b9:2f:40:e2:3f:43:71:37:9c:c7:7e:fe:f8:8a:e5:
d2:37:bb:e2:35:4c:47:f3:2a:c5:5b:3d:06:75:5d:
87:4d:90:52:c0:ae:9a:9d:0f:63:0c:6a:df:04:67:
56:a1:5c:bf:06:30:28:77:54:01:98:3f:46:a8:aa:
37:25:3f:c1:59:02:3d:0c:be:44:62:3c:f1:62:f8:
fe:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:3B:2C:C1:BD:F8:DC:3F:F9:57:1B:B8:4D:35:13:BD:EB:88:79:03
X509v3 Authority Key Identifier:
keyid:48:AA:E0:0D:13:DF:B3:CC:DF:B3:A7:D2:5F:DC:35:6F:AD:C5:BE:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919E833/4AA3E6E2C64B11E495FF9635C4F9AE02/SKrgDRPfs8zfs6fSX9w1b63Fvsg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SKrgDRPfs8zfs6fSX9w1b63Fvsg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E833/4AA3E6E2C64B11E495FF9635C4F9AE02/0B706CBAD2FD11EAAAFB3967C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
110.164.143.0/24
Signature Algorithm: sha256WithRSAEncryption
35:2e:5d:fd:ce:c2:5b:39:f1:61:d5:b0:ca:80:f6:d3:88:e5:
a0:d6:db:de:8f:2f:08:b8:b8:9c:fe:51:d4:11:f4:c5:37:25:
4c:d1:15:60:31:6a:b1:d2:9f:4f:37:ec:9c:05:92:7b:6d:d9:
0e:e4:aa:cd:9c:d0:bd:c7:c9:14:ca:e3:df:01:cf:24:cb:d8:
ac:67:d4:b8:1f:ec:1d:58:7a:e8:2c:f9:09:32:a6:4f:48:2a:
8f:9e:a3:4c:f3:8e:8b:af:2f:7d:15:56:ea:4b:9b:c5:17:c3:
f5:d7:48:35:0f:7a:2b:7a:74:78:70:1d:fb:0d:38:00:02:96:
95:3a:35:f6:51:89:7b:52:2e:d2:56:40:69:cf:75:a9:14:a9:
0f:d6:7f:77:89:21:65:b7:a6:b2:a2:86:77:ea:d3:4c:85:2e:
ca:48:fe:67:d8:f9:72:25:e0:85:6c:a4:65:4c:75:4a:f4:66:
e1:4a:df:92:ba:b3:c7:40:5c:8b:f7:b4:62:70:30:da:71:8f:
4c:32:b2:ea:64:9a:3c:6f:69:e5:14:81:07:d9:09:5b:04:a9:
96:b7:4b:91:6e:d2:9e:12:3e:d1:1c:85:7f:dd:4a:7e:35:4a:
88:12:90:b7:42:38:28:3f:af:78:b9:71:10:72:18:ff:39:55:
fb:dc:31:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:49 2024 by rpki-client on console-ams.rpki-client.org