Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A129B/38C35252343E11E680B1E72CC4F9AE02/C0FA097C886111ECA34BF81EC4F9AE02.roa
File: C0FA097C886111ECA34BF81EC4F9AE02.roa (raw, json)
Hash identifier: V/X2X07D9r7iSNpWWjAB9RYsMNTY9a0KccbVNkG578U=
Subject key identifier: 09:8A:14:D9:C7:58:32:5A:E4:75:1B:40:64:15:09:AE:D7:4E:29:7D
Certificate issuer: /CN=A91A129B/serialNumber=BC7A905EA763CE702FC26DC0FC2FB82542BC1300
Certificate serial: 1D39
Authority key identifier: BC:7A:90:5E:A7:63:CE:70:2F:C2:6D:C0:FC:2F:B8:25:42:BC:13:00
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vHqQXqdjznAvwm3A_C-4JUK8EwA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A129B/38C35252343E11E680B1E72CC4F9AE02/C0FA097C886111ECA34BF81EC4F9AE02.roa
Signing time: Thu 16 Jun 2022 18:53:49 +0000
ROA not before: Thu 16 Jun 2022 18:53:49 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 8075
IP address blocks: 40.162.0.0/16 maxlen: 16
128.94.0.0/16 maxlen: 16
135.149.0.0/16 maxlen: 16
138.239.0.0/16 maxlen: 16
147.145.0.0/16 maxlen: 16
148.7.0.0/16 maxlen: 16
155.62.0.0/16 maxlen: 16
158.23.0.0/16 maxlen: 16
158.158.0.0/16 maxlen: 16
167.105.0.0/16 maxlen: 16
167.220.240.0/22 maxlen: 24
169.138.0.0/16 maxlen: 16
170.165.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7481 (0x1d39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A129B/serialNumber=BC7A905EA763CE702FC26DC0FC2FB82542BC1300
Validity
Not Before: Jun 16 18:53:49 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=62ab7c3d-b8f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9b:89:0e:f9:27:4d:9e:0b:10:6f:fc:83:e5:
39:3d:2e:4b:7e:c7:cc:d5:c0:aa:36:ae:29:27:e9:
a4:88:f0:02:ec:cc:63:27:7e:81:8d:92:82:29:8f:
fd:d5:06:b2:1e:d1:e0:f7:4d:48:8e:b0:d9:ac:38:
64:6b:d4:e1:ce:4b:60:fa:93:c2:aa:82:c9:5e:5b:
80:be:e1:83:c3:fe:70:a9:2d:6a:a1:45:36:d9:5a:
07:00:1b:ba:4b:c8:97:48:b6:76:4a:d0:37:d1:d7:
d3:f0:4c:e9:43:0a:16:88:eb:18:d3:e7:c8:e5:3a:
cc:12:b4:cd:76:a4:73:0e:d0:8d:a8:62:3a:54:8d:
97:51:55:e0:3d:35:9e:ef:81:7a:79:2b:65:8a:b2:
36:9d:a4:81:d3:08:54:28:b3:5b:5f:60:46:ef:b4:
b2:f0:61:e7:3f:ab:f2:88:8d:79:86:51:1a:a6:5c:
d4:d3:12:c7:6b:01:25:fd:48:8f:83:79:65:c7:6a:
d3:dc:08:77:80:1b:76:d9:36:81:20:20:f5:27:3a:
a3:9e:73:26:98:63:a5:0f:44:16:dd:94:04:aa:ca:
4f:8f:a0:74:4a:82:ce:be:c9:8c:81:47:53:cc:1f:
df:2c:e6:4f:61:37:5d:db:15:ed:78:95:8a:b7:ac:
f4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:8A:14:D9:C7:58:32:5A:E4:75:1B:40:64:15:09:AE:D7:4E:29:7D
X509v3 Authority Key Identifier:
keyid:BC:7A:90:5E:A7:63:CE:70:2F:C2:6D:C0:FC:2F:B8:25:42:BC:13:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A129B/38C35252343E11E680B1E72CC4F9AE02/vHqQXqdjznAvwm3A_C-4JUK8EwA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vHqQXqdjznAvwm3A_C-4JUK8EwA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A129B/38C35252343E11E680B1E72CC4F9AE02/C0FA097C886111ECA34BF81EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
40.162.0.0/16
128.94.0.0/16
135.149.0.0/16
138.239.0.0/16
147.145.0.0/16
148.7.0.0/16
155.62.0.0/16
158.23.0.0/16
158.158.0.0/16
167.105.0.0/16
167.220.240.0/22
169.138.0.0/16
170.165.0.0/16
Signature Algorithm: sha256WithRSAEncryption
81:02:24:08:69:b1:44:74:3a:64:bd:4d:aa:7d:e5:0d:9f:0f:
ef:24:3e:b1:66:39:48:6a:6f:26:d5:03:b1:ef:27:d0:00:28:
7b:93:6a:7b:ac:50:68:b0:af:be:ea:21:63:8a:b9:be:ac:3e:
03:2f:a4:03:f5:8c:7f:d3:b7:68:96:74:71:d3:27:88:05:c3:
af:74:1d:21:7a:9d:6c:f4:0f:34:ba:c6:a2:95:2e:ba:b4:96:
06:fd:50:cc:f4:b4:dd:1a:05:41:46:d2:4c:37:ca:35:67:cb:
fa:bd:e7:53:b2:be:56:bf:8a:e5:1e:1c:a1:8f:57:66:33:5e:
7c:b3:1b:56:96:19:de:da:bc:7e:4b:85:87:52:dc:2b:22:13:
32:2a:cc:6d:a2:a1:e7:ae:70:14:8b:60:58:ef:28:81:1b:83:
6e:2d:87:ef:76:eb:e8:7f:fc:65:55:59:2b:dd:44:90:1b:b3:
a9:e5:10:bb:e3:4d:73:22:07:33:76:f9:b0:ba:ca:ec:7b:6f:
96:09:b4:a6:4c:31:da:2d:8e:43:79:0b:15:e2:77:d3:af:33:
8b:87:9f:dc:ae:f8:65:0d:84:41:8d:6a:58:19:2e:47:46:9f:
0f:c6:ea:85:8d:a3:57:f4:ba:65:7e:48:10:6c:a3:50:87:18:
a3:2d:3f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:35 2024 by rpki-client on console-fra.rpki-client.org