Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE0C4/6A9E3BD8F14711E99A9AB712C4F9AE02/2D289088481F11ECB355097BC4F9AE02.roa
File: 2D289088481F11ECB355097BC4F9AE02.roa (raw, json)
Hash identifier: fJmZ+rJsQev0rS7XS71DnjmlESposhLV27o8cOUoXOY=
Subject key identifier: 69:03:DB:A9:8A:DD:9C:2C:61:E2:1C:4B:C8:B5:AB:F9:EE:84:95:34
Certificate issuer: /CN=A91AE0C4/serialNumber=E11FE937006A25D7C605A5E43B492B286C64998C
Certificate serial: 0B28
Authority key identifier: E1:1F:E9:37:00:6A:25:D7:C6:05:A5:E4:3B:49:2B:28:6C:64:99:8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4R_pNwBqJdfGBaXkO0krKGxkmYw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE0C4/6A9E3BD8F14711E99A9AB712C4F9AE02/2D289088481F11ECB355097BC4F9AE02.roa
Signing time: Sun 28 Aug 2022 19:56:10 +0000
ROA not before: Sun 28 Aug 2022 19:56:10 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 38052
IP address blocks: 202.53.186.0/24 maxlen: 24
202.53.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2856 (0xb28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE0C4/serialNumber=E11FE937006A25D7C605A5E43B492B286C64998C
Validity
Not Before: Aug 28 19:56:10 2022 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=630bc85a-99be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:80:b5:69:60:31:92:db:c6:5a:87:29:53:0e:
cc:e5:ca:92:b5:87:33:18:e6:a4:db:5e:c7:59:21:
25:c6:6a:7c:cf:85:4f:fe:b7:f1:60:56:ae:6f:7d:
d9:2c:4c:64:a5:bd:62:a9:fe:3a:01:3a:2b:10:ee:
3c:b9:be:f0:3e:b2:1b:a4:0e:54:2c:7f:10:59:2b:
b0:41:99:c9:fc:5e:82:d0:09:83:a9:95:13:f4:c9:
62:36:2f:e0:13:f5:aa:84:36:88:2a:e9:18:7c:cc:
f0:95:07:11:7b:12:d8:62:4d:ea:58:32:e8:3d:57:
ed:dc:50:1b:23:ab:eb:e6:b8:ca:1d:f9:aa:36:aa:
bd:10:ab:ec:a4:b4:fa:9b:e0:89:2a:61:8a:c3:fc:
15:42:4c:82:c2:1c:af:3b:37:1c:90:d0:04:1f:0f:
70:a7:40:8b:ec:6a:b3:47:2c:40:f0:fc:3b:2b:c4:
c5:76:b8:0a:fd:d5:d1:6c:20:35:3a:54:01:90:26:
cb:30:bc:89:ef:3b:06:b9:3a:c8:a9:74:75:c2:74:
c5:4d:d4:35:5f:5b:87:70:09:28:d6:ce:2c:8d:ad:
2d:a0:f7:e8:b9:5e:14:5c:2c:d2:b9:eb:2b:49:97:
5b:ff:7c:1e:ef:98:30:7a:3a:8c:21:aa:1d:7c:33:
56:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:03:DB:A9:8A:DD:9C:2C:61:E2:1C:4B:C8:B5:AB:F9:EE:84:95:34
X509v3 Authority Key Identifier:
keyid:E1:1F:E9:37:00:6A:25:D7:C6:05:A5:E4:3B:49:2B:28:6C:64:99:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE0C4/6A9E3BD8F14711E99A9AB712C4F9AE02/4R_pNwBqJdfGBaXkO0krKGxkmYw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4R_pNwBqJdfGBaXkO0krKGxkmYw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE0C4/6A9E3BD8F14711E99A9AB712C4F9AE02/2D289088481F11ECB355097BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.53.186.0/24
202.53.191.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:71:e0:90:31:36:f0:01:42:91:14:ca:54:e4:2a:6d:f0:a6:
c5:be:62:ca:cb:8d:3c:74:42:16:e7:91:0d:1f:7d:02:90:ca:
01:a8:5e:91:38:75:fa:39:70:d6:ac:43:0f:ba:bd:00:3f:50:
5f:e0:5a:31:67:f5:06:ae:c7:b9:52:bb:01:b2:b1:16:df:03:
86:03:97:4c:a1:d8:6c:ed:9c:17:46:2a:53:e5:6b:21:6e:ec:
f5:e6:ce:e0:6c:61:cb:d1:fc:9e:e2:89:0d:7f:90:4d:02:15:
21:c1:5c:6c:c5:ec:a5:71:25:db:50:5f:fa:68:2b:51:7f:b2:
ae:ba:41:90:60:7e:f0:43:68:ee:62:fe:6f:ea:31:10:eb:b3:
59:29:c7:e0:02:6c:e4:5d:26:c8:61:b5:41:96:83:e6:82:43:
b8:f0:d3:c6:0e:1b:6d:72:b3:a0:1f:97:6c:91:ca:63:02:be:
37:96:94:17:78:5a:50:8e:f5:21:c0:e3:08:4f:f0:96:a4:e5:
77:a8:50:84:7e:27:2c:08:da:8e:2a:41:be:68:dd:4e:e5:de:
65:3a:8d:f0:9a:85:ee:74:fe:d4:41:8f:3f:27:27:f8:20:5c:
53:db:e9:ad:97:4d:be:a2:bb:fc:6b:7e:42:3f:27:b5:77:ec:
67:cd:17:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:37 2024 by rpki-client on console-fra.rpki-client.org