Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAD5A/6E1A5344154811EABA3DC974C4F9AE02/E3D65280154911EA93A38077C4F9AE02.roa
File: E3D65280154911EA93A38077C4F9AE02.roa (raw, json)
Hash identifier: OAPuiTLdvIISXMpCEAslsTQhb+lW8P0q7n4vNIsQAag=
Subject key identifier: 6D:B9:BE:23:B6:15:42:66:1D:19:3E:95:E5:B6:03:A4:16:21:81:44
Certificate issuer: /CN=A91BAD5A/serialNumber=5A35F27CEC24994CE29C21DFD59A5D6D4FBE2470
Certificate serial: 091D
Authority key identifier: 5A:35:F2:7C:EC:24:99:4C:E2:9C:21:DF:D5:9A:5D:6D:4F:BE:24:70
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WjXyfOwkmUzinCHf1ZpdbU--JHA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BAD5A/6E1A5344154811EABA3DC974C4F9AE02/E3D65280154911EA93A38077C4F9AE02.roa
Signing time: Mon 13 Jun 2022 08:30:18 +0000
ROA not before: Mon 13 Jun 2022 08:30:18 +0000
ROA not after: Sat 30 Sep 2023 00:00:00 +0000
asID: 132596
IP address blocks: 202.2.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2333 (0x91d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BAD5A/serialNumber=5A35F27CEC24994CE29C21DFD59A5D6D4FBE2470
Validity
Not Before: Jun 13 08:30:18 2022 GMT
Not After : Sep 30 00:00:00 2023 GMT
Subject: CN=62a6f59a-0db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:21:a1:91:78:b5:08:2a:1b:f9:d5:e4:25:93:
94:bd:27:01:83:ae:13:b2:44:4e:8a:e9:10:c2:98:
76:95:99:b6:6f:09:d8:b0:b8:81:c6:c5:77:00:f7:
f0:d8:92:8c:ef:cd:ff:f9:f5:f4:49:ae:14:23:42:
6d:31:b9:ed:87:21:ba:97:7a:1a:19:be:a8:e1:5b:
bc:37:20:8c:4f:68:1c:eb:05:3d:36:ed:89:3a:76:
99:a0:01:04:25:dc:ed:ef:a7:5e:91:0c:ae:ae:c1:
2d:03:b6:63:ec:70:56:a4:6a:9b:3f:12:23:7b:04:
a2:14:3f:9a:20:89:9c:50:51:6f:69:3a:e5:ab:78:
2e:d4:aa:b8:32:35:ca:06:f8:77:79:40:69:fe:8f:
94:9a:b3:b1:90:ec:ca:a6:39:dc:b5:a7:93:ea:72:
26:a4:23:ab:27:a0:1e:be:3f:ab:67:f4:03:b3:4e:
2f:24:af:24:65:25:7f:66:38:10:31:11:2c:b9:a8:
cb:42:9c:be:6c:1c:f3:7f:3b:1d:a8:8a:1f:df:61:
a6:1b:10:12:69:71:99:48:5c:c6:dd:08:89:8b:64:
44:4d:55:09:a1:96:c8:3f:6a:14:ed:4e:5d:5c:83:
72:1a:71:dd:e4:8b:a1:f9:85:f1:50:45:23:e8:c0:
fa:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:B9:BE:23:B6:15:42:66:1D:19:3E:95:E5:B6:03:A4:16:21:81:44
X509v3 Authority Key Identifier:
keyid:5A:35:F2:7C:EC:24:99:4C:E2:9C:21:DF:D5:9A:5D:6D:4F:BE:24:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BAD5A/6E1A5344154811EABA3DC974C4F9AE02/WjXyfOwkmUzinCHf1ZpdbU--JHA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WjXyfOwkmUzinCHf1ZpdbU--JHA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAD5A/6E1A5344154811EABA3DC974C4F9AE02/E3D65280154911EA93A38077C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.2.15.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:33:34:7e:94:9d:20:3b:dc:9e:bf:f9:42:89:68:8c:e8:26:
fb:28:ab:1f:45:27:12:a0:94:c5:eb:0e:88:75:2e:6e:03:61:
d9:b2:d6:68:a9:90:03:00:94:60:87:07:a1:36:a9:32:c2:05:
d0:f3:1a:95:f9:1d:b3:8c:e6:f1:57:ec:42:99:f2:28:09:93:
70:85:f2:99:63:dd:24:f2:ff:cf:8a:20:a8:9b:a9:41:99:1f:
ec:d6:90:b2:6b:53:7d:be:f1:a9:9d:9e:a3:5d:c0:c9:91:c2:
3f:23:48:62:aa:4e:36:c2:8a:fb:34:8d:4a:71:d9:3e:da:88:
42:ba:b6:eb:35:8b:51:a4:42:8c:c6:b2:e5:02:b0:e0:dc:0e:
9d:9f:77:f7:4c:2b:d8:d6:4c:54:1c:c5:54:b3:8f:3c:bb:4c:
2b:44:33:78:c6:7e:96:6b:05:d6:a5:7a:67:c5:85:76:3f:d3:
00:a5:83:ea:a5:2b:8d:7f:9c:0b:19:88:7b:9a:9e:a2:2a:09:
52:8a:f4:db:5a:7b:22:fc:4c:a9:44:b0:0f:da:d9:88:91:06:
5e:ae:de:ec:da:ae:08:33:27:17:07:ed:72:98:e9:ba:2d:2d:
b3:6e:8b:b5:b9:0f:8a:c6:6f:5e:5c:90:d8:59:ba:a2:b8:55:
cc:83:47:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:58 2024 by rpki-client on console-ams.rpki-client.org