Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919E833/4AA3E6E2C64B11E495FF9635C4F9AE02/5D0C8586324211ECB1A4E147C4F9AE02.roa
File: 5D0C8586324211ECB1A4E147C4F9AE02.roa (raw, json)
Hash identifier: /CFcemdKZ8TyBhGwM2A4eaR/l1OoMVq2ooNjrc0FZ0M=
Subject key identifier: A5:8C:CD:C4:14:DA:A5:AE:77:BD:39:9C:A2:7B:C8:29:2F:5E:6A:55
Certificate issuer: /CN=A919E833/serialNumber=48AAE00D13DFB3CCDFB3A7D25FDC356FADC5BEC8
Certificate serial: 22DC
Authority key identifier: 48:AA:E0:0D:13:DF:B3:CC:DF:B3:A7:D2:5F:DC:35:6F:AD:C5:BE:C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SKrgDRPfs8zfs6fSX9w1b63Fvsg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919E833/4AA3E6E2C64B11E495FF9635C4F9AE02/5D0C8586324211ECB1A4E147C4F9AE02.roa
Signing time: Thu 21 Oct 2021 07:41:55 +0000
ROA not before: Thu 21 Oct 2021 07:41:55 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 37992
IP address blocks: 110.164.178.0/24 maxlen: 24
110.164.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8924 (0x22dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919E833/serialNumber=48AAE00D13DFB3CCDFB3A7D25FDC356FADC5BEC8
Validity
Not Before: Oct 21 07:41:55 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=617119c3-41f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:63:16:79:ac:ed:01:bc:ed:ac:2d:8c:9f:4f:
69:e1:61:e3:c8:fb:ce:4a:17:f9:b9:69:d6:5c:af:
0e:e1:7f:b1:2f:e8:4f:c0:93:47:49:7d:95:be:83:
aa:cf:b7:dd:87:a1:31:69:a3:a5:f6:2e:3c:13:93:
6d:85:21:e7:c7:1b:c2:b5:f4:a5:e3:30:02:06:34:
74:7d:87:76:52:e0:fe:05:49:43:a9:f3:d9:e5:f9:
85:6a:63:c6:c5:c4:9f:15:73:7d:8f:07:c3:b3:40:
c4:b5:5e:d2:4a:70:d2:64:ca:a0:53:7d:56:f1:d4:
99:24:df:ae:80:94:72:c2:85:2d:0d:c4:6a:bc:e1:
f6:41:68:86:27:21:50:72:73:99:62:6d:fc:0f:80:
4d:6d:28:cb:22:ec:19:d7:7d:d9:f0:21:35:f9:8f:
5c:11:4c:39:21:08:a9:6e:78:bc:8f:76:77:0d:9a:
79:d3:4b:55:31:cd:a3:38:77:3b:d1:9e:95:25:38:
f8:e4:d9:98:20:bd:f6:ea:d9:a0:3a:44:d6:f6:da:
32:bb:ee:15:32:cc:0f:d5:04:af:62:73:51:cd:4f:
22:3f:60:78:9a:33:55:9e:d4:47:9c:ef:90:a2:1b:
0d:fc:9c:ec:2e:d2:2c:a1:77:4b:e8:29:d6:e4:d1:
f3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:8C:CD:C4:14:DA:A5:AE:77:BD:39:9C:A2:7B:C8:29:2F:5E:6A:55
X509v3 Authority Key Identifier:
keyid:48:AA:E0:0D:13:DF:B3:CC:DF:B3:A7:D2:5F:DC:35:6F:AD:C5:BE:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919E833/4AA3E6E2C64B11E495FF9635C4F9AE02/SKrgDRPfs8zfs6fSX9w1b63Fvsg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SKrgDRPfs8zfs6fSX9w1b63Fvsg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E833/4AA3E6E2C64B11E495FF9635C4F9AE02/5D0C8586324211ECB1A4E147C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
110.164.178.0/23
Signature Algorithm: sha256WithRSAEncryption
94:de:65:64:24:77:38:e1:06:32:08:21:05:0c:24:21:9e:91:
04:25:ed:0d:4e:12:d3:f0:66:83:bd:97:c5:76:ad:a7:5f:71:
9f:6d:36:fc:da:b5:0a:2e:e7:e1:c8:5f:64:7a:1f:e9:f8:62:
fa:fa:14:c5:f7:29:94:07:a9:f5:1b:76:40:f4:3a:ec:5e:e8:
6c:bb:c8:76:03:81:04:84:d1:1e:b1:c8:59:c2:a3:e9:77:b7:
50:45:2c:a1:3a:0f:16:2f:92:a8:88:b5:01:8b:4e:0c:5a:45:
00:be:1b:24:50:a8:4b:fb:48:16:f6:fc:77:80:c2:12:cd:49:
32:35:a6:b4:b5:de:7e:53:b9:e6:9f:7d:05:23:46:2b:fb:d3:
a5:f0:6a:97:11:5c:97:b3:c8:6a:2f:f2:80:32:96:88:c0:da:
93:c9:fa:fd:86:a7:01:53:93:aa:25:e1:6c:b7:43:37:57:4f:
12:f8:74:a5:41:1c:c2:dc:12:9c:99:91:90:b8:ee:41:0b:b3:
cf:4d:05:16:ed:68:4a:cb:e0:c4:36:22:64:69:64:48:7a:d1:
9b:c4:09:32:52:db:15:c0:1e:7a:e8:49:48:d0:d7:55:c1:94:
9c:48:06:4f:ee:97:61:0d:55:b3:eb:2b:e1:e2:25:b5:95:cc:
ca:a5:44:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:35 2024 by rpki-client on console-fra.rpki-client.org