Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1446/76741B34CA1811EBA8A71E7AC4F9AE02/487A6926CDDE11EB8CC8880FC4F9AE02.roa
File: 487A6926CDDE11EB8CC8880FC4F9AE02.roa (raw, json)
Hash identifier: mG3RLsm7uzxNJV7X/serSFv0oCGfkQKlGSjxdkjWjVU=
Subject key identifier: E3:87:E0:75:EF:A9:8B:64:D0:1A:DB:D5:99:67:84:0F:8F:09:6B:03
Certificate issuer: /CN=A91D1446/serialNumber=22E01D437E386D387929D72C512228D35011CF8C
Certificate serial: 049B
Authority key identifier: 22:E0:1D:43:7E:38:6D:38:79:29:D7:2C:51:22:28:D3:50:11:CF:8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IuAdQ344bTh5KdcsUSIo01ARz4w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1446/76741B34CA1811EBA8A71E7AC4F9AE02/487A6926CDDE11EB8CC8880FC4F9AE02.roa
Signing time: Tue 07 Nov 2023 01:13:21 +0000
ROA not before: Tue 07 Nov 2023 01:13:21 +0000
ROA not after: Mon 30 Dec 2024 00:00:00 +0000
asID: 134584
IP address blocks: 202.58.140.0/24 maxlen: 24
202.58.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1179 (0x49b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1446/serialNumber=22E01D437E386D387929D72C512228D35011CF8C
Validity
Not Before: Nov 7 01:13:21 2023 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=65498f31-2795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:90:b6:76:f3:85:da:6a:e0:e3:96:e2:cc:ca:
f1:86:93:bd:3e:66:1e:9d:af:70:6e:01:c1:87:01:
41:21:ef:d7:d9:3d:b1:1e:5e:70:44:59:1a:e4:31:
aa:da:e4:ca:29:84:66:c5:09:c9:f9:9d:4c:fc:be:
6c:66:7c:b0:86:66:75:ef:83:d9:2f:86:66:5b:dd:
1d:b1:69:9b:ba:cc:7d:f5:ff:06:23:de:19:60:f2:
81:ae:28:e3:03:fa:07:26:3e:ad:ac:93:e7:f7:53:
6a:96:61:81:6b:72:a7:9e:2f:80:a0:a4:3a:18:77:
53:02:cb:00:6e:09:62:f9:80:6a:b5:e5:ee:90:23:
90:fe:55:17:e0:40:82:00:df:b5:4b:4e:cf:12:31:
bf:ff:04:75:a7:30:c6:18:df:0b:13:06:ae:dd:d1:
fd:d8:2e:cb:10:1e:d3:f8:f1:17:4c:64:72:56:e1:
94:61:9f:20:bc:5c:35:aa:da:47:a0:f5:5f:ba:8c:
e7:79:08:9e:2b:62:4b:e1:ce:e4:60:23:15:c4:57:
7c:c7:5e:60:f7:7d:6f:c6:b6:ea:40:0e:aa:65:43:
19:bf:0d:e6:d6:d6:4e:01:ce:31:8f:95:ca:8b:4b:
42:53:ad:cf:32:a7:28:c6:ec:05:03:72:6b:61:a0:
2c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:87:E0:75:EF:A9:8B:64:D0:1A:DB:D5:99:67:84:0F:8F:09:6B:03
X509v3 Authority Key Identifier:
keyid:22:E0:1D:43:7E:38:6D:38:79:29:D7:2C:51:22:28:D3:50:11:CF:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1446/76741B34CA1811EBA8A71E7AC4F9AE02/IuAdQ344bTh5KdcsUSIo01ARz4w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IuAdQ344bTh5KdcsUSIo01ARz4w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1446/76741B34CA1811EBA8A71E7AC4F9AE02/487A6926CDDE11EB8CC8880FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.58.140.0/24
202.58.142.0/24
Signature Algorithm: sha256WithRSAEncryption
92:40:b9:66:7a:e0:f7:68:34:f3:71:65:11:48:c6:83:9f:6e:
df:2a:f2:1f:10:21:f6:35:8a:72:c6:20:85:88:42:73:57:33:
41:22:5a:c0:e0:70:d5:81:00:54:fd:8b:fa:01:b3:29:34:c9:
59:5e:d7:ca:bc:6e:92:b6:b9:84:74:ce:57:95:11:48:2c:60:
bd:48:cf:bf:68:55:e5:d5:4a:ee:5f:38:a0:4b:e5:a8:67:32:
26:49:b8:06:3d:a4:bf:45:28:98:46:25:53:9c:7c:b0:69:b3:
71:89:51:c1:a1:09:83:80:32:5a:b2:2e:90:ef:eb:7b:c4:53:
b0:5c:cc:5a:f8:53:31:4d:0e:04:db:5a:e6:b4:f6:b8:7b:83:
e2:1e:f8:17:21:e1:23:11:53:c6:fc:ad:ec:e9:50:0f:c8:13:
53:63:74:17:13:76:de:42:c2:c5:ea:94:41:d0:fb:61:16:bb:
e7:59:68:5d:5b:c1:14:0f:10:e9:c2:a5:e4:36:c1:ed:c3:b6:
94:df:2f:0d:cf:c5:ea:a4:01:61:61:d6:71:3f:3e:4b:b0:ac:
dc:13:90:e5:11:df:2f:13:3c:18:03:a6:c0:5e:65:d4:39:41:
c3:c0:76:a2:2b:90:d6:66:4e:6a:dd:71:f4:9e:f8:8d:99:c2:
cc:bc:7b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:28 2024 by rpki-client on console-ams.rpki-client.org