Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/ACBE0A3CDE3F11EDA261B618C4F9AE02.roa
File: ACBE0A3CDE3F11EDA261B618C4F9AE02.roa (raw, json)
Hash identifier: gWbQ2A1BNYHLExELOIKaLkbY9zuo6WYwcFoURvxuSRk=
Subject key identifier: 88:26:19:2A:B8:38:4E:D9:A4:7A:D2:70:37:48:C7:37:F5:3A:3F:34
Certificate issuer: /CN=A91A6131/serialNumber=7B059CCC60BAAAFCF6F141216EFDD68E870C2551
Certificate serial: 0673
Authority key identifier: 7B:05:9C:CC:60:BA:AA:FC:F6:F1:41:21:6E:FD:D6:8E:87:0C:25:51
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewWczGC6qvz28UEhbv3WjocMJVE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/ACBE0A3CDE3F11EDA261B618C4F9AE02.roa
Signing time: Fri 28 Jul 2023 22:59:21 +0000
ROA not before: Fri 28 Jul 2023 22:59:21 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 202662
IP address blocks: 43.255.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1651 (0x673)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6131/serialNumber=7B059CCC60BAAAFCF6F141216EFDD68E870C2551
Validity
Not Before: Jul 28 22:59:21 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=64c44848-d5eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:99:c1:48:88:25:6d:61:a9:06:e7:a9:67:bd:
1b:aa:2a:b7:4b:55:93:d8:1c:cf:6b:23:ef:5b:b2:
38:c9:09:3f:50:32:b8:16:ad:c0:68:b1:f7:40:9f:
92:71:20:fb:d2:5c:b4:58:32:5d:c7:04:80:c9:d0:
d5:2e:39:68:5e:cf:30:0d:28:24:e4:2a:a5:70:c4:
b0:9c:26:4b:18:a4:9f:d6:5b:52:1c:76:b3:b9:48:
1c:0c:02:e9:8c:ae:74:f0:da:61:8c:58:38:27:1f:
40:d6:cb:d4:b9:74:b9:f5:bc:c3:69:d8:5c:15:e3:
a0:86:6d:ec:00:09:99:60:53:b2:27:c7:53:cf:68:
6c:71:f0:01:c7:e1:b1:6d:c0:e2:83:70:40:e0:27:
54:66:84:c2:13:c7:a7:6e:58:23:59:ca:09:11:4e:
12:83:0b:03:d4:a1:b2:50:2f:b0:d5:86:8d:19:5c:
fd:dd:48:68:a1:3e:3e:06:74:bc:b8:1c:7d:cc:3b:
68:ae:17:65:99:33:ec:2a:10:d9:89:b7:58:c6:9d:
07:6f:11:82:ed:4d:55:dc:f1:a3:d3:b3:eb:7f:53:
6b:13:5c:32:17:87:9e:e3:38:37:69:cc:58:f2:c6:
a4:ee:75:cd:3b:cf:5f:53:a5:4c:0c:38:6a:0f:b8:
00:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:26:19:2A:B8:38:4E:D9:A4:7A:D2:70:37:48:C7:37:F5:3A:3F:34
X509v3 Authority Key Identifier:
keyid:7B:05:9C:CC:60:BA:AA:FC:F6:F1:41:21:6E:FD:D6:8E:87:0C:25:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/ewWczGC6qvz28UEhbv3WjocMJVE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewWczGC6qvz28UEhbv3WjocMJVE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/ACBE0A3CDE3F11EDA261B618C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.255.80.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:ca:0f:b5:f4:a8:a9:9e:27:a5:cb:68:59:06:f3:c9:84:f4:
4e:14:18:11:e1:d7:ca:a7:8f:b6:bc:cb:5d:e8:70:65:b7:5e:
25:d1:b6:b7:df:7a:ee:9b:0a:7c:80:35:fc:cb:8c:eb:35:61:
8f:62:16:2a:2d:68:70:a4:21:63:6d:c9:a5:10:0d:41:35:eb:
8a:73:86:2f:2c:c9:2b:af:97:1b:9b:d2:e4:b6:de:d4:a8:30:
9e:97:19:1a:36:52:cd:07:70:2e:f6:23:d5:6f:3b:94:f9:bf:
08:38:73:42:6b:3f:e8:14:9b:dc:b1:49:4c:52:e7:ec:9c:7a:
5a:e8:0e:1b:80:85:ef:d3:e2:3e:54:34:18:1e:85:54:ac:25:
52:63:97:3b:6b:c8:f0:28:7c:57:f0:6c:5d:8e:20:38:44:b1:
b0:66:a9:8e:74:2c:8b:08:78:2b:b4:b1:14:0b:4d:0a:db:a1:
64:eb:cd:81:86:ef:e2:ad:1a:94:e9:d9:fc:a2:8e:0d:e3:7d:
d4:52:59:9f:4e:a1:f8:0e:c7:35:06:88:e2:09:88:58:fc:ff:
62:e2:b0:00:dd:f5:1d:31:35:22:19:15:4b:7b:3e:a4:31:c6:
22:3c:4f:73:25:1c:07:20:ad:95:25:54:e8:29:90:d9:ef:09:
8c:9d:fd:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 17 23:38:31 2023 by rpki-client on console-fra.rpki-client.org