Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919E833/4AA3E6E2C64B11E495FF9635C4F9AE02/74611956219211EC99713582C4F9AE02.roa
File: 74611956219211EC99713582C4F9AE02.roa (raw, json)
Hash identifier: YUuXAz9Zc1G6LV2j9Cd4mWG05OH47LCMApd0DwaWIRM=
Subject key identifier: 92:57:E5:03:A0:5F:31:74:A3:36:5C:4B:58:68:0E:06:16:A8:EE:0F
Certificate issuer: /CN=A919E833/serialNumber=48AAE00D13DFB3CCDFB3A7D25FDC356FADC5BEC8
Certificate serial: 22AD
Authority key identifier: 48:AA:E0:0D:13:DF:B3:CC:DF:B3:A7:D2:5F:DC:35:6F:AD:C5:BE:C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SKrgDRPfs8zfs6fSX9w1b63Fvsg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919E833/4AA3E6E2C64B11E495FF9635C4F9AE02/74611956219211EC99713582C4F9AE02.roa
Signing time: Thu 30 Sep 2021 02:02:24 +0000
ROA not before: Thu 30 Sep 2021 02:02:24 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 147027
IP address blocks: 110.164.234.0/24 maxlen: 24
110.164.235.0/24 maxlen: 24
2403:6200:7928::/48 maxlen: 48
2403:6200:7929::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8877 (0x22ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919E833/serialNumber=48AAE00D13DFB3CCDFB3A7D25FDC356FADC5BEC8
Validity
Not Before: Sep 30 02:02:24 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=61551ab0-8e83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b0:4e:28:2e:3f:a8:14:ae:20:77:6f:4c:f5:
cc:0f:9e:c2:45:a6:1f:3b:a5:33:9f:6d:d4:28:ac:
14:88:a2:bc:63:31:f2:78:6c:7a:a7:f3:5c:c5:42:
eb:de:a9:9c:aa:f4:99:29:ff:85:fb:10:7c:4b:5e:
d0:2b:31:ab:3c:13:59:11:5d:aa:95:17:30:a9:b9:
95:e4:01:e9:4e:64:b9:eb:b5:34:1b:5b:b9:1f:8f:
93:ef:21:de:ee:b6:51:38:e4:3f:79:da:bc:8f:c5:
65:ae:8a:3e:fd:bf:9b:d0:9f:83:17:db:89:c0:d6:
19:6b:69:9f:56:b0:64:da:7d:14:db:ef:74:f5:bb:
83:77:26:b1:5c:46:42:1e:f0:a1:40:41:01:da:29:
1a:1b:d4:b1:75:c4:6d:db:03:19:89:da:f0:dd:8b:
b9:7d:42:45:76:f6:54:0e:9d:3c:10:29:3f:30:97:
b4:ef:4d:55:ed:a2:05:0e:34:d4:c8:3e:47:ee:a5:
32:77:55:42:dd:06:fa:a8:55:1e:95:88:30:3d:0a:
cf:7f:8f:63:f1:e0:4c:eb:3c:44:e2:60:f4:cf:68:
74:d0:68:95:1a:80:75:75:cc:a5:de:bb:b9:77:7e:
86:04:62:10:5f:ed:03:ab:d4:85:22:2c:98:20:a0:
0d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:57:E5:03:A0:5F:31:74:A3:36:5C:4B:58:68:0E:06:16:A8:EE:0F
X509v3 Authority Key Identifier:
keyid:48:AA:E0:0D:13:DF:B3:CC:DF:B3:A7:D2:5F:DC:35:6F:AD:C5:BE:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919E833/4AA3E6E2C64B11E495FF9635C4F9AE02/SKrgDRPfs8zfs6fSX9w1b63Fvsg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SKrgDRPfs8zfs6fSX9w1b63Fvsg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E833/4AA3E6E2C64B11E495FF9635C4F9AE02/74611956219211EC99713582C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
110.164.234.0/23
IPv6:
2403:6200:7928::/47
Signature Algorithm: sha256WithRSAEncryption
32:a2:65:80:99:6f:3b:d6:1f:a1:11:2a:68:64:79:c1:e4:04:
7b:80:0b:f2:6d:3a:f0:57:fa:13:9d:0a:d1:88:9e:e5:cc:ab:
d7:cf:c7:3a:b2:03:72:d4:8e:e6:5c:7e:bf:03:e3:bb:82:17:
5b:a8:d7:8f:7d:b9:17:3e:85:31:6f:3c:87:f1:25:e6:07:bc:
4e:8e:bc:81:61:6f:f7:87:49:24:ca:0b:99:b4:cc:49:3a:ed:
83:0e:5b:88:2f:4c:c5:04:10:17:b0:99:a0:b2:ec:a5:7d:fa:
9e:8e:28:7a:ab:c9:55:99:ba:4b:0b:c1:17:66:6b:5a:43:ae:
0c:88:8e:f1:91:51:c6:a1:a6:7d:01:f8:b4:59:d6:ee:57:41:
cc:68:d1:43:a4:3c:44:89:97:6f:88:5f:c1:32:01:1a:10:59:
38:c3:01:55:88:75:51:7f:7f:6a:47:15:2c:81:85:81:3f:93:
21:b0:db:0f:1d:5f:ef:04:1e:e7:b9:a8:6e:9a:15:06:62:7f:
28:48:a4:9f:6b:6a:97:11:29:a6:68:d7:e1:df:69:21:94:82:
c4:ae:1f:ca:55:a3:64:f8:9a:f0:4b:83:e6:b9:50:1f:90:7d:
a3:db:9c:02:b7:3a:c7:08:19:5f:ed:2f:38:90:91:56:a0:4b:
29:9d:87:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:49 2024 by rpki-client on console-ams.rpki-client.org