Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919E833/4AA3E6E2C64B11E495FF9635C4F9AE02/FE9EF2806B7811EB9A072869C4F9AE02.roa
File: FE9EF2806B7811EB9A072869C4F9AE02.roa (raw, json)
Hash identifier: Qxd/tryb+PPRyl3VsGQxDdj5aNQSW6wkMtWMJW+IYHI=
Subject key identifier: D7:B6:33:F8:6D:18:9B:8A:0D:DD:27:42:A6:64:06:14:23:6B:6E:AB
Certificate issuer: /CN=A919E833/serialNumber=48AAE00D13DFB3CCDFB3A7D25FDC356FADC5BEC8
Certificate serial: 21AB
Authority key identifier: 48:AA:E0:0D:13:DF:B3:CC:DF:B3:A7:D2:5F:DC:35:6F:AD:C5:BE:C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SKrgDRPfs8zfs6fSX9w1b63Fvsg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919E833/4AA3E6E2C64B11E495FF9635C4F9AE02/FE9EF2806B7811EB9A072869C4F9AE02.roa
Signing time: Tue 01 Jun 2021 09:03:44 +0000
ROA not before: Tue 01 Jun 2021 09:03:44 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 141428
IP address blocks: 110.164.184.0/22 maxlen: 22
110.164.184.0/24 maxlen: 24
110.164.185.0/24 maxlen: 24
110.164.186.0/24 maxlen: 24
110.164.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8619 (0x21ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919E833/serialNumber=48AAE00D13DFB3CCDFB3A7D25FDC356FADC5BEC8
Validity
Not Before: Jun 1 09:03:44 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=60b5f7f0-69c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:03:73:d2:69:b0:63:5d:77:87:0c:8a:90:fa:
1b:08:0d:6e:54:2b:cd:de:a3:f2:3b:c9:4d:bf:38:
76:68:f0:89:a7:f2:51:0e:34:df:6d:1a:b4:e5:51:
54:b3:d2:4f:60:0f:d3:40:c2:50:84:e7:7c:f1:51:
13:18:70:18:77:ff:d6:29:e6:ea:be:fe:c7:6c:86:
1a:32:ec:f1:80:0e:c4:74:c9:5f:d7:33:d7:96:ac:
e8:48:44:6d:ef:3f:ab:be:3b:79:aa:cc:92:65:e2:
66:74:40:54:13:a0:07:bc:13:d1:2b:4e:88:f4:b1:
cb:7d:a4:65:40:29:76:15:58:9a:2c:cc:1a:20:47:
35:b3:18:e9:61:93:6f:5f:75:2c:13:e4:fc:0a:c6:
62:a5:1f:a7:33:b8:b7:5b:1f:de:3d:7b:d9:42:cf:
2d:f0:63:fa:2a:a1:67:34:80:f3:26:f2:a0:57:d2:
8b:2a:cd:77:01:e2:db:5d:23:ef:d7:06:25:11:f3:
d4:66:a9:8d:11:c3:ac:c4:2d:5a:cb:4b:63:c8:32:
72:12:27:53:f0:a2:1e:ca:cb:dc:5e:b8:c5:b1:6e:
4c:89:78:d4:ac:8d:ba:f1:34:5c:d8:72:e8:20:8c:
78:b1:49:9e:1b:c1:89:46:b7:35:5f:1c:ac:6e:72:
81:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:B6:33:F8:6D:18:9B:8A:0D:DD:27:42:A6:64:06:14:23:6B:6E:AB
X509v3 Authority Key Identifier:
keyid:48:AA:E0:0D:13:DF:B3:CC:DF:B3:A7:D2:5F:DC:35:6F:AD:C5:BE:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919E833/4AA3E6E2C64B11E495FF9635C4F9AE02/SKrgDRPfs8zfs6fSX9w1b63Fvsg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SKrgDRPfs8zfs6fSX9w1b63Fvsg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E833/4AA3E6E2C64B11E495FF9635C4F9AE02/FE9EF2806B7811EB9A072869C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
110.164.184.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:59:e2:87:03:f8:e6:c5:ba:b6:c3:fe:28:60:c9:94:2b:72:
50:7b:37:3e:e4:49:df:9d:8f:1f:e3:bc:c1:fe:bc:16:ad:9b:
22:8f:05:85:d9:21:b0:a8:7a:8a:7c:85:8f:3f:14:d3:07:2b:
57:64:7d:1a:41:36:17:cc:4d:ad:e5:3e:af:a6:fe:91:ea:6b:
6b:b0:9b:b3:5a:fc:5d:c0:1f:3f:30:e5:86:f9:c0:9e:77:5d:
b5:40:f1:d8:ab:b5:ce:2e:70:b5:18:a9:55:df:ee:0f:76:45:
3e:59:c5:46:8c:d4:ed:cd:cf:7d:80:9a:46:e8:68:c9:3c:92:
78:ed:76:d7:78:e9:73:79:a1:db:0b:a1:12:cf:51:d2:d6:ba:
70:d9:13:d0:b6:7e:d6:c3:c9:3b:a1:70:a2:9e:90:e8:37:5d:
a3:82:05:9c:83:65:eb:d8:2a:e2:3b:64:1d:6f:64:80:fc:74:
1c:ae:88:80:12:76:57:d5:10:13:b5:f5:da:ef:5e:24:c5:16:
4b:3c:6b:20:22:14:49:e3:33:0d:ca:85:18:70:ec:b5:d7:e8:
8a:e6:0d:cc:37:ce:48:51:f4:9c:9b:48:6e:cb:ed:93:63:14:
28:ec:ee:c6:09:b3:58:15:9a:6c:3a:f4:d4:65:4d:7e:30:81:
a2:59:3b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:49 2024 by rpki-client on console-ams.rpki-client.org