Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE0C4/63A92766F14711E99A9AB712C4F9AE02/D4A0A620482411ECA1A68F13C4F9AE02.roa
File: D4A0A620482411ECA1A68F13C4F9AE02.roa (raw, json)
Hash identifier: owQIJ82lQKmdaH3fI831RxCuJid7Sft3IAdhK5L9rWI=
Subject key identifier: 6B:1D:EF:C2:2E:D8:71:D0:EF:9C:5E:DC:33:0B:26:8F:58:5D:9A:C0
Certificate issuer: /CN=A91AE0C4/serialNumber=412B480176124E0884602689602C2AE574F0B876
Certificate serial: 0AD2
Authority key identifier: 41:2B:48:01:76:12:4E:08:84:60:26:89:60:2C:2A:E5:74:F0:B8:76
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QStIAXYSTgiEYCaJYCwq5XTwuHY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE0C4/63A92766F14711E99A9AB712C4F9AE02/D4A0A620482411ECA1A68F13C4F9AE02.roa
Signing time: Sun 28 Aug 2022 19:56:01 +0000
ROA not before: Sun 28 Aug 2022 19:56:01 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 16625
IP address blocks: 131.203.4.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2770 (0xad2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE0C4/serialNumber=412B480176124E0884602689602C2AE574F0B876
Validity
Not Before: Aug 28 19:56:01 2022 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=630bc850-7755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b0:4e:96:91:ee:4f:df:4a:65:83:d9:1c:b5:
2b:8f:0c:5e:f4:7c:ab:36:41:ef:ab:81:87:df:e0:
ff:65:48:bd:36:e2:fd:2c:02:d3:f8:7e:bf:77:f6:
fd:5d:8c:9c:bf:a9:56:eb:50:ee:a4:d1:25:3a:4e:
bf:3c:60:8f:fb:23:51:02:e9:7f:81:ed:e7:08:2a:
4e:63:d7:1b:84:7f:cd:0f:8b:b3:ff:b0:c6:35:86:
f8:d1:e0:aa:7a:73:95:df:d5:34:14:33:fa:71:5f:
9f:1b:4f:59:22:91:8d:db:9c:c2:00:be:5b:2a:bc:
a0:2f:32:51:eb:96:d1:a2:a7:d9:3e:72:c0:45:51:
35:b5:41:cf:48:95:6a:60:66:fd:1e:ce:d0:fd:60:
de:5c:b2:0c:fd:05:2d:55:39:c1:4c:d7:b8:d6:78:
8d:68:2d:31:eb:6e:c7:e3:36:29:56:3f:91:f9:ab:
e1:4b:8d:91:a2:b3:db:f2:4a:22:94:4b:38:f2:8b:
a4:6c:66:2c:ca:54:80:3d:d3:80:d9:c1:c5:b1:10:
d4:d7:74:ce:88:52:a9:2a:37:4c:70:12:f2:b6:dd:
01:15:62:0a:5b:7f:29:25:db:8b:b7:80:fc:0e:c2:
95:7e:d9:92:38:d3:72:dc:a7:cd:86:37:c0:56:02:
71:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:1D:EF:C2:2E:D8:71:D0:EF:9C:5E:DC:33:0B:26:8F:58:5D:9A:C0
X509v3 Authority Key Identifier:
keyid:41:2B:48:01:76:12:4E:08:84:60:26:89:60:2C:2A:E5:74:F0:B8:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE0C4/63A92766F14711E99A9AB712C4F9AE02/QStIAXYSTgiEYCaJYCwq5XTwuHY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QStIAXYSTgiEYCaJYCwq5XTwuHY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE0C4/63A92766F14711E99A9AB712C4F9AE02/D4A0A620482411ECA1A68F13C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
131.203.4.0/22
Signature Algorithm: sha256WithRSAEncryption
44:d0:eb:77:c1:38:fe:0c:fc:c8:6a:73:c0:69:61:34:b8:81:
21:e8:26:cc:32:07:02:a3:08:c2:92:d6:7d:02:9f:8c:47:9f:
23:93:8b:76:ae:62:1e:c5:e7:4c:04:01:8e:6b:ae:7c:8d:2f:
7d:6e:d3:41:e7:24:6c:6c:25:eb:34:fd:ed:0d:d8:88:b8:43:
f8:2c:67:3a:27:db:71:22:24:2d:44:be:d1:1d:2f:af:00:74:
ac:3e:46:9a:32:1a:47:ce:db:c1:6c:fe:00:c1:9d:82:39:63:
b2:53:68:7e:4c:27:0a:7e:f8:67:1c:21:24:9c:b1:87:6b:f8:
58:f7:bd:99:4f:8c:8f:85:80:f0:47:9f:77:72:32:c0:bc:76:
64:58:7a:cd:2e:7c:80:7c:d2:eb:a5:15:c4:b2:4c:22:ce:1a:
56:5b:9a:6b:51:67:90:a4:12:e9:67:dc:a7:e6:97:0e:d4:9f:
9d:d8:30:0e:c0:60:5a:17:58:4f:27:b7:40:6c:a8:17:65:d6:
c0:a0:5e:41:91:4f:b9:33:b8:4c:34:ce:10:40:b6:ec:38:5f:
69:d2:88:b3:94:00:d5:c5:ec:04:7c:17:ef:fe:f2:84:3f:cf:
19:55:a6:ac:db:8d:fe:24:91:b5:81:38:f9:e1:69:93:78:47:
be:27:aa:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:55 2024 by rpki-client on console-ams.rpki-client.org