Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/A46A09BC6BAC11EE90182566C4F9AE02.roa
File: A46A09BC6BAC11EE90182566C4F9AE02.roa (raw, json)
Hash identifier: Nr7S5a+k6mp/cUey0an5k7fecgGnhnsDCcHYd7eW5KM=
Subject key identifier: CE:87:22:FE:4D:66:E8:F8:5C:9F:B0:E4:71:3C:78:96:06:39:F3:53
Certificate issuer: /CN=A91A6131/serialNumber=7B059CCC60BAAAFCF6F141216EFDD68E870C2551
Certificate serial: 06A8
Authority key identifier: 7B:05:9C:CC:60:BA:AA:FC:F6:F1:41:21:6E:FD:D6:8E:87:0C:25:51
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewWczGC6qvz28UEhbv3WjocMJVE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/A46A09BC6BAC11EE90182566C4F9AE02.roa
Signing time: Sun 15 Oct 2023 22:46:13 +0000
ROA not before: Sun 15 Oct 2023 22:46:13 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 834
IP address blocks: 43.255.82.0/24 maxlen: 24
43.255.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1704 (0x6a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6131/serialNumber=7B059CCC60BAAAFCF6F141216EFDD68E870C2551
Validity
Not Before: Oct 15 22:46:13 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=652c6bb5-400e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:23:87:44:1d:24:f4:e2:f2:ab:ca:71:e6:1e:
a2:66:98:bf:a8:e5:79:30:f8:5d:90:5a:6a:78:42:
58:7d:60:b6:fc:06:66:5d:dd:36:78:36:76:29:40:
fc:17:dc:ee:de:3c:fb:f7:36:b5:27:7b:98:17:0e:
af:a8:61:92:55:cc:40:a3:fd:d1:ce:7d:e2:e2:75:
ee:0d:07:7b:d2:f0:02:ac:92:cf:e7:6a:e5:2b:8f:
6f:69:5c:86:ed:24:9b:82:94:98:77:1b:94:1d:9c:
9f:ce:41:bf:45:79:03:c3:33:75:d3:fd:5b:d2:2e:
86:f9:79:3f:87:6a:c0:6c:b1:c3:f1:7a:bd:d5:07:
c4:1c:79:e3:bc:a0:bf:70:27:8f:a0:b6:52:17:a5:
16:35:a1:21:fb:0a:84:cc:ee:6c:8d:4c:5e:54:cd:
a4:14:7f:a4:a3:f2:04:28:d0:54:1c:d7:62:6d:a6:
13:57:1f:ae:c9:ef:c3:eb:25:e5:4f:10:41:83:7a:
c0:88:ad:07:e3:a9:1d:e7:d0:03:18:83:94:23:a1:
bb:36:b6:7f:ee:9a:e8:28:e1:3b:6a:ef:ad:73:eb:
bc:02:c2:36:87:37:1b:05:90:89:ab:65:1f:3f:a3:
28:0c:e9:49:6b:6d:5e:a7:69:d1:e1:7a:be:38:95:
43:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:87:22:FE:4D:66:E8:F8:5C:9F:B0:E4:71:3C:78:96:06:39:F3:53
X509v3 Authority Key Identifier:
keyid:7B:05:9C:CC:60:BA:AA:FC:F6:F1:41:21:6E:FD:D6:8E:87:0C:25:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/ewWczGC6qvz28UEhbv3WjocMJVE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewWczGC6qvz28UEhbv3WjocMJVE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/A46A09BC6BAC11EE90182566C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.255.82.0/23
Signature Algorithm: sha256WithRSAEncryption
47:1f:d1:46:ce:2b:ac:d3:e0:2c:fd:50:1d:08:ac:2d:c9:a0:
11:71:b1:2e:8a:27:bb:36:c8:8a:2d:52:8f:11:16:34:10:04:
85:9c:2c:ee:be:00:92:95:4a:fb:31:08:a8:6c:e3:80:7f:9a:
70:b3:54:5f:d9:8c:3b:32:ea:95:d2:3c:a5:6e:1f:61:18:d3:
6a:99:83:d2:eb:05:0c:be:5c:8f:fa:99:8c:9f:34:5e:b6:0b:
51:b9:3c:dc:9d:29:4f:46:31:98:e2:63:4e:be:e2:f8:72:17:
63:07:16:9b:5f:db:9c:08:3a:bd:ca:53:5b:5b:99:34:f6:fd:
37:68:66:2f:7b:9f:4b:48:0b:09:f2:3a:d9:3d:82:54:41:db:
60:e0:78:51:41:6d:be:ae:25:dc:f6:bb:25:0e:0c:61:aa:c3:
72:d3:a1:70:cf:2b:1c:55:5f:25:d1:56:16:09:2d:57:7c:ea:
3f:64:25:a8:c8:b8:31:1e:9e:d3:8e:57:68:10:a9:1d:a4:f7:
07:d2:57:a4:0f:4f:dd:de:93:ab:40:7b:4f:10:65:48:af:fc:
85:5a:d6:13:f3:6b:b6:fe:de:76:8e:13:3c:2e:6b:db:b6:41:
23:5b:06:82:57:99:a5:f1:7a:b1:3f:4d:25:2b:dc:2c:f8:ab:
9b:9e:b6:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 17 23:38:31 2023 by rpki-client on console-fra.rpki-client.org