Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919E833/4AA3E6E2C64B11E495FF9635C4F9AE02/9569D000C27C11EA9473D216C4F9AE02.roa
File: 9569D000C27C11EA9473D216C4F9AE02.roa (raw, json)
Hash identifier: OuhesnEpIiyeBtFuP+VLNOjGOX5rH8W49BkgHe2nuQ8=
Subject key identifier: 12:B5:9D:9D:4E:D0:A8:F3:7D:A7:23:B7:5E:4D:4E:64:D1:B9:70:49
Certificate issuer: /CN=A919E833/serialNumber=48AAE00D13DFB3CCDFB3A7D25FDC356FADC5BEC8
Certificate serial: 215C
Authority key identifier: 48:AA:E0:0D:13:DF:B3:CC:DF:B3:A7:D2:5F:DC:35:6F:AD:C5:BE:C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SKrgDRPfs8zfs6fSX9w1b63Fvsg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919E833/4AA3E6E2C64B11E495FF9635C4F9AE02/9569D000C27C11EA9473D216C4F9AE02.roa
Signing time: Fri 30 Apr 2021 16:21:42 +0000
ROA not before: Fri 30 Apr 2021 16:21:42 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 132493
IP address blocks: 110.164.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8540 (0x215c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919E833/serialNumber=48AAE00D13DFB3CCDFB3A7D25FDC356FADC5BEC8
Validity
Not Before: Apr 30 16:21:42 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=608c2e95-73c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9e:7f:ad:92:be:25:1b:47:97:72:13:3f:35:
a1:16:86:88:69:63:65:47:c6:4d:92:f3:b7:d6:19:
c0:63:e6:c0:46:ff:72:b2:42:70:98:2a:3e:a4:cd:
49:63:6f:aa:32:a6:0f:53:59:fe:09:88:56:2a:71:
12:32:1a:c6:70:d4:32:5f:61:ea:e6:dc:e2:79:6e:
d4:8f:3e:27:30:5e:7a:3d:3d:d9:cf:50:e0:36:e4:
1d:cb:9c:d3:10:f3:5c:37:d3:a9:dc:de:c3:c9:89:
65:68:44:a5:8f:2a:2c:fc:e2:29:0f:e5:53:e7:32:
73:3f:5f:3d:2b:b9:58:85:43:1a:59:0f:74:22:b8:
3a:70:da:3f:59:b3:b1:b8:50:36:0d:0c:93:5c:5e:
67:97:40:4a:f9:c8:68:26:2f:12:bb:a7:92:79:46:
bc:fe:21:7b:c6:c0:f5:65:5a:32:48:80:d9:b2:a5:
04:50:8c:e0:9b:91:f1:e4:43:cc:c9:cb:4e:a8:42:
ab:ea:48:15:4d:f5:71:86:d7:4d:8a:80:74:26:1e:
97:53:f8:44:a5:56:c9:76:3f:30:f7:bc:9f:92:ef:
c1:cd:f4:4c:c0:c8:87:27:85:fe:71:9c:08:a6:b1:
16:c8:3e:42:8b:5d:7e:d4:a4:38:ac:12:53:ab:94:
e9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:B5:9D:9D:4E:D0:A8:F3:7D:A7:23:B7:5E:4D:4E:64:D1:B9:70:49
X509v3 Authority Key Identifier:
keyid:48:AA:E0:0D:13:DF:B3:CC:DF:B3:A7:D2:5F:DC:35:6F:AD:C5:BE:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919E833/4AA3E6E2C64B11E495FF9635C4F9AE02/SKrgDRPfs8zfs6fSX9w1b63Fvsg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SKrgDRPfs8zfs6fSX9w1b63Fvsg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E833/4AA3E6E2C64B11E495FF9635C4F9AE02/9569D000C27C11EA9473D216C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
110.164.137.0/24
Signature Algorithm: sha256WithRSAEncryption
05:da:ff:ff:52:45:78:ba:e6:85:e1:b6:b7:20:36:27:b4:a9:
2a:fe:85:1e:a2:60:3b:eb:d3:bc:6e:95:11:f0:83:d8:aa:ee:
f8:7c:6f:d4:47:00:de:9d:04:ae:79:ea:fe:b9:24:bb:94:0b:
ac:da:8f:f0:3e:ee:da:e5:67:9a:a8:3a:5f:62:cf:b7:46:7c:
cd:c1:7f:2d:35:84:c8:66:02:6c:26:a1:a1:d1:fa:34:db:69:
d7:4b:37:98:cb:e6:aa:7b:71:a1:f9:74:d6:6b:e4:07:1d:0e:
52:bf:21:70:64:93:87:03:9a:c9:3c:43:95:60:86:51:4c:9e:
67:54:0b:d8:af:76:84:3d:51:f0:87:bf:77:80:22:9a:0c:3c:
c5:d9:cb:e6:2e:50:8c:50:71:0a:2e:2b:fa:d4:35:92:4e:34:
c1:73:5b:75:a7:08:e8:f3:e3:0d:e7:84:0d:56:49:73:87:1a:
9d:c0:ca:63:08:c1:d5:de:b1:5a:26:ac:04:18:4b:eb:08:cd:
85:c7:54:cb:7b:f1:c3:2e:8c:a1:30:f8:6e:37:3d:b2:bb:90:
2b:b2:d4:df:ff:a5:49:63:1e:a5:86:29:df:da:13:25:b5:0d:
f4:21:b7:b8:27:48:97:04:f8:c9:d4:cc:de:66:60:5c:03:a2:
37:56:fb:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:35 2024 by rpki-client on console-fra.rpki-client.org