Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE0C4/63A92766F14711E99A9AB712C4F9AE02/B17CA83CFF7F11E9B16F491BC4F9AE02.roa
File: B17CA83CFF7F11E9B16F491BC4F9AE02.roa (raw, json)
Hash identifier: ub6grFZoQtyAUBhSCddh3JhzV8SIWtWgcj1EnWcPDGA=
Subject key identifier: 76:43:C7:00:6D:11:4D:F9:8D:1A:7B:DF:5C:42:9C:73:88:3A:C3:25
Certificate issuer: /CN=A91AE0C4/serialNumber=412B480176124E0884602689602C2AE574F0B876
Certificate serial: 0AD0
Authority key identifier: 41:2B:48:01:76:12:4E:08:84:60:26:89:60:2C:2A:E5:74:F0:B8:76
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QStIAXYSTgiEYCaJYCwq5XTwuHY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE0C4/63A92766F14711E99A9AB712C4F9AE02/B17CA83CFF7F11E9B16F491BC4F9AE02.roa
Signing time: Sun 28 Aug 2022 19:55:59 +0000
ROA not before: Sun 28 Aug 2022 19:55:59 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 134359
IP address blocks: 131.203.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2768 (0xad0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE0C4/serialNumber=412B480176124E0884602689602C2AE574F0B876
Validity
Not Before: Aug 28 19:55:59 2022 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=630bc84f-d7a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:71:62:3b:1c:03:9c:2f:27:42:66:e1:94:20:
70:7b:ef:1f:03:d7:93:d3:54:20:ca:25:a0:e6:5c:
43:ee:9e:d4:45:50:b7:e2:43:fc:2d:a7:3c:5e:7b:
01:a7:37:94:04:21:15:e3:ec:0f:65:f2:9c:e8:8e:
f3:20:48:d4:c2:36:4c:2d:c3:7f:07:66:2e:5a:e1:
93:69:db:9c:a9:fd:43:d8:49:43:60:1e:3e:0f:0e:
3c:9b:a9:99:f9:7d:cc:43:2a:8a:97:10:a0:ae:86:
ae:69:8c:b2:4a:f4:54:a8:7c:cd:9a:7d:64:4b:35:
88:17:3e:91:e1:59:6d:f7:fd:d8:8c:1f:6e:1b:2f:
4d:9b:d3:fa:7f:35:6e:81:b3:88:9a:e7:6e:bb:8d:
59:99:90:8f:74:9e:80:27:48:b1:f1:8d:5c:13:d5:
28:0f:1b:cd:c6:4e:8a:8a:c9:cb:be:de:eb:6d:cf:
67:84:88:39:0e:16:b0:e5:35:66:d2:de:24:1c:eb:
ad:b1:b0:c7:9f:c8:2c:61:68:c0:98:b6:6a:01:18:
38:fb:23:50:61:c9:ef:3f:93:c8:44:fd:3d:d5:78:
0f:2b:5b:8d:9d:16:86:e0:e4:dd:40:c6:ed:c3:73:
f2:3c:ec:08:0e:9f:b6:7d:9c:7a:03:78:9f:b3:7d:
aa:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:43:C7:00:6D:11:4D:F9:8D:1A:7B:DF:5C:42:9C:73:88:3A:C3:25
X509v3 Authority Key Identifier:
keyid:41:2B:48:01:76:12:4E:08:84:60:26:89:60:2C:2A:E5:74:F0:B8:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE0C4/63A92766F14711E99A9AB712C4F9AE02/QStIAXYSTgiEYCaJYCwq5XTwuHY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QStIAXYSTgiEYCaJYCwq5XTwuHY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE0C4/63A92766F14711E99A9AB712C4F9AE02/B17CA83CFF7F11E9B16F491BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
131.203.131.0/24
Signature Algorithm: sha256WithRSAEncryption
62:2f:49:1b:1f:9f:dc:98:c5:30:4e:ad:0e:54:09:a0:d6:83:
93:3a:c2:8b:91:20:ff:93:c2:8b:ab:31:26:c8:9d:5c:97:ee:
46:75:9a:ca:77:5d:49:bd:74:21:be:51:9d:22:56:7b:30:ab:
4d:32:00:0a:5c:80:53:31:f5:92:6e:88:54:d4:22:5f:8d:66:
c6:16:44:7c:ac:21:d5:48:70:fd:cd:72:10:b0:03:e1:13:11:
66:1a:db:c4:ea:be:57:b2:46:5c:d3:09:6a:b7:da:6c:64:22:
fa:49:66:2d:fd:8c:70:58:f6:15:bf:cb:37:d4:0b:15:9f:98:
22:bd:25:bb:d6:5a:d3:e8:22:a2:6a:9c:de:ea:ea:14:fe:4f:
4f:df:ad:d4:d3:94:df:0c:de:b6:e1:f3:9a:68:8f:01:3d:ed:
ed:ae:60:76:8d:82:f1:96:36:26:38:8f:80:54:d0:58:be:80:
2e:42:09:ef:49:d7:3e:26:9b:d6:87:79:d6:ac:6f:1b:64:7e:
d6:10:c5:8b:75:16:67:c2:eb:97:ad:f3:db:d5:65:32:28:08:
44:26:74:79:0b:6d:a4:19:9c:a6:b0:6e:af:cf:f4:b6:81:78:
d0:e4:10:3f:7d:e5:29:6a:bf:d0:4f:5a:4f:4e:d8:1d:85:17:
dc:de:37:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:37 2024 by rpki-client on console-fra.rpki-client.org