Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/AD6F880CDE3F11EDA261B618C4F9AE02.roa
File: AD6F880CDE3F11EDA261B618C4F9AE02.roa (raw, json)
Hash identifier: 79dmY3C6m2yapqQGGE1gjz9bCGyrWwbsQXOtWY18Dwc=
Subject key identifier: BF:94:77:B0:82:CC:51:25:18:D6:E5:E8:32:D1:5C:04:80:91:4E:BB
Certificate issuer: /CN=A91A6131/serialNumber=7B059CCC60BAAAFCF6F141216EFDD68E870C2551
Certificate serial: 0679
Authority key identifier: 7B:05:9C:CC:60:BA:AA:FC:F6:F1:41:21:6E:FD:D6:8E:87:0C:25:51
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewWczGC6qvz28UEhbv3WjocMJVE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/AD6F880CDE3F11EDA261B618C4F9AE02.roa
Signing time: Fri 28 Jul 2023 22:59:25 +0000
ROA not before: Fri 28 Jul 2023 22:59:25 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 984
IP address blocks: 43.255.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1657 (0x679)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6131/serialNumber=7B059CCC60BAAAFCF6F141216EFDD68E870C2551
Validity
Not Before: Jul 28 22:59:25 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=64c4484d-2b75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9f:7e:0c:20:4c:ed:c0:3f:9b:16:ad:b9:1e:
d9:3b:94:b1:bd:4c:94:6c:c7:d8:45:92:22:e7:61:
ed:59:07:86:70:c3:d7:cb:ee:96:23:cb:de:b7:b6:
5e:2a:93:a0:a6:e9:23:af:88:f1:2d:b0:2e:37:49:
c5:d4:b8:a0:b7:77:65:77:07:b9:78:fe:38:ee:a5:
a5:c4:37:bc:20:71:55:fc:a4:0a:bc:63:0b:76:76:
0d:70:a2:33:6b:51:ad:6a:fc:ea:73:b8:02:27:d7:
3c:d3:63:ad:73:c4:4a:d6:72:16:74:d3:a4:f7:2f:
76:10:c1:61:80:1c:eb:3e:34:d4:40:40:ee:1d:28:
f5:ee:36:2e:01:22:a1:e8:67:0e:31:1b:71:22:10:
e6:75:36:14:31:cd:47:e8:39:53:4e:f9:37:0c:0f:
a9:e7:a5:95:d5:04:9e:33:18:ce:55:16:78:13:ee:
47:3b:98:8a:46:77:3d:83:46:39:d3:bd:36:c5:18:
6a:26:46:6e:43:97:9d:48:15:12:f3:c2:c9:70:36:
ad:53:20:9b:69:8a:0f:a5:32:39:84:3b:19:e2:9f:
86:63:b3:b9:c6:74:ea:ca:33:d5:02:cb:73:d6:cf:
87:1a:54:a2:32:ff:da:50:f7:84:ce:55:e2:6d:61:
87:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:94:77:B0:82:CC:51:25:18:D6:E5:E8:32:D1:5C:04:80:91:4E:BB
X509v3 Authority Key Identifier:
keyid:7B:05:9C:CC:60:BA:AA:FC:F6:F1:41:21:6E:FD:D6:8E:87:0C:25:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/ewWczGC6qvz28UEhbv3WjocMJVE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewWczGC6qvz28UEhbv3WjocMJVE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/AD6F880CDE3F11EDA261B618C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.255.82.0/24
Signature Algorithm: sha256WithRSAEncryption
86:3c:c3:6b:41:ee:2d:cf:42:6f:87:a7:d0:db:ae:e9:bf:64:
99:c9:11:f3:1d:d9:a5:09:26:d7:6b:aa:3d:9a:5c:f6:0f:8c:
de:ab:cb:eb:a5:76:6d:f1:5d:53:00:77:43:aa:cc:87:e6:38:
83:2a:79:f0:60:57:6a:b2:87:ec:1c:ab:34:f8:14:22:22:df:
1c:01:13:4a:4b:ce:3f:46:a1:63:21:94:77:4a:8d:35:76:fb:
40:2b:fe:af:87:95:a8:8c:84:3e:00:66:6c:b3:18:09:4f:be:
4d:16:05:cf:06:1c:ef:eb:0b:06:a3:df:19:29:2f:21:5c:d5:
b8:af:d1:60:12:a8:e4:f7:4e:f4:ed:86:46:b3:46:f1:fc:33:
4e:36:72:f7:b6:af:73:a3:58:1c:34:e3:2c:a0:75:8e:9a:73:
8c:70:08:53:b8:72:5a:97:f3:c3:3d:e2:91:6e:45:dd:e9:5d:
36:c8:df:ea:a0:2f:70:71:7f:d1:c7:16:42:e7:03:2e:e5:dc:
76:03:60:1c:d2:fb:18:d2:4c:7d:11:3d:0d:43:9c:25:54:24:
32:69:8c:3d:12:ce:0f:a5:d1:7c:33:32:83:b5:f9:0a:eb:82:
d2:65:f5:da:b9:02:37:44:13:b1:7a:48:d2:ef:bc:41:49:1e:
54:fc:9c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 17 23:38:31 2023 by rpki-client on console-fra.rpki-client.org