Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE0C4/63A92766F14711E99A9AB712C4F9AE02/2D5E902E2A1C11EBA229CF86C4F9AE02.roa
File: 2D5E902E2A1C11EBA229CF86C4F9AE02.roa (raw, json)
Hash identifier: TXhkOPn0z7CChcJcPcb+0JqSkTQBMcLetxj6zEimBjc=
Subject key identifier: C0:B6:44:47:D9:D4:23:DD:D8:69:02:02:3C:69:F4:69:A2:15:B1:C3
Certificate issuer: /CN=A91AE0C4/serialNumber=412B480176124E0884602689602C2AE574F0B876
Certificate serial: 0ACF
Authority key identifier: 41:2B:48:01:76:12:4E:08:84:60:26:89:60:2C:2A:E5:74:F0:B8:76
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QStIAXYSTgiEYCaJYCwq5XTwuHY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE0C4/63A92766F14711E99A9AB712C4F9AE02/2D5E902E2A1C11EBA229CF86C4F9AE02.roa
Signing time: Sun 28 Aug 2022 19:55:58 +0000
ROA not before: Sun 28 Aug 2022 19:55:58 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 132815
IP address blocks: 131.203.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2767 (0xacf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE0C4/serialNumber=412B480176124E0884602689602C2AE574F0B876
Validity
Not Before: Aug 28 19:55:58 2022 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=630bc84d-53cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:78:bc:42:e6:a9:8b:12:d2:fe:79:12:6c:e9:
d3:bc:16:62:d8:8c:d3:be:37:04:99:ed:9c:7f:fd:
cc:9e:24:b3:36:0d:bf:3a:99:3f:4f:aa:34:ac:d9:
51:02:f2:64:84:70:e8:bc:65:cd:72:e6:37:ea:23:
2b:25:19:b8:12:92:fb:97:92:7d:68:15:10:b4:3a:
cd:f7:73:0f:ce:d5:90:9a:d5:c1:09:aa:03:9e:1a:
2f:77:d2:45:ca:8e:61:ad:49:cc:f6:85:7d:50:bb:
da:d2:c6:b9:a0:d7:d3:10:75:9f:f1:ae:c9:f9:40:
8a:9f:51:37:73:e0:47:a6:11:4d:8f:10:6f:74:48:
a9:3a:d4:80:40:70:1b:a8:7a:4b:f6:38:f7:cf:5b:
35:90:78:94:8f:8c:5c:56:7a:c0:a0:08:7d:94:92:
94:ba:ff:11:9d:b4:0e:a1:76:45:fb:44:3e:24:e4:
58:dd:4e:0f:ff:0c:ab:15:96:fd:7f:33:06:3c:5d:
78:31:e6:c8:e8:e8:6d:5f:48:02:a1:6b:cd:08:7b:
51:41:77:50:a4:bc:0d:c2:b1:6a:49:99:ae:95:ab:
9f:65:7d:d2:ca:2a:96:13:3e:d3:35:2c:14:62:07:
1d:98:88:f6:f1:84:03:db:7a:18:60:90:18:05:4f:
91:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B6:44:47:D9:D4:23:DD:D8:69:02:02:3C:69:F4:69:A2:15:B1:C3
X509v3 Authority Key Identifier:
keyid:41:2B:48:01:76:12:4E:08:84:60:26:89:60:2C:2A:E5:74:F0:B8:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE0C4/63A92766F14711E99A9AB712C4F9AE02/QStIAXYSTgiEYCaJYCwq5XTwuHY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QStIAXYSTgiEYCaJYCwq5XTwuHY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE0C4/63A92766F14711E99A9AB712C4F9AE02/2D5E902E2A1C11EBA229CF86C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
131.203.185.0/24
Signature Algorithm: sha256WithRSAEncryption
46:a4:d9:64:f0:2b:1b:36:1e:96:8f:fc:88:a9:16:f4:32:fd:
3e:4d:88:bc:1e:9a:ba:6c:3f:b9:d7:4e:3a:43:2f:aa:a0:29:
2f:fa:39:3b:7d:73:fd:26:14:07:c2:1e:27:14:f3:fc:ec:c7:
5a:09:35:3f:18:85:22:8f:4d:a4:51:23:69:ad:61:f9:7d:f3:
de:c3:78:88:9c:93:ef:97:0a:2c:35:b7:bc:3e:82:46:11:52:
29:50:c7:ba:91:19:de:b5:59:80:54:99:5e:2e:b3:a9:4d:91:
ea:fa:8c:dc:ac:4c:bf:8b:45:f1:61:3f:e0:35:5c:69:1d:35:
b0:f0:ea:68:19:c5:28:45:f3:bf:19:20:92:c6:91:f9:ac:2f:
47:99:32:e1:a8:b8:6a:4a:1b:90:48:02:58:6e:1e:aa:d4:52:
7f:59:b5:43:fc:93:4e:9f:15:63:64:7c:6c:16:03:21:6d:f9:
48:00:f4:e3:1b:c0:ed:3a:72:b7:ba:48:b2:d7:d4:40:2e:63:
05:9a:0b:5f:11:49:d3:01:f2:9b:02:01:0f:8d:a4:07:28:51:
92:57:ca:79:52:17:1f:d1:ac:fd:d3:9f:7f:c3:d9:7a:c9:3b:
cc:1d:1e:dc:65:8b:55:ae:55:44:1e:f0:fd:d3:bd:fd:6f:00:
1f:b9:4d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:37 2024 by rpki-client on console-fra.rpki-client.org