Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1446/76741B34CA1811EBA8A71E7AC4F9AE02/99A50D2CCEB211EBA58CD00EC4F9AE02.roa
File: 99A50D2CCEB211EBA58CD00EC4F9AE02.roa (raw, json)
Hash identifier: zgJ49OonHZbLGlcZOjiqQU1Cu9gnA9XcIERT4MmiGvA=
Subject key identifier: CF:2B:6C:9E:9A:FB:70:AC:A2:68:0F:14:6F:98:44:FB:F1:94:42:B7
Certificate issuer: /CN=A91D1446/serialNumber=22E01D437E386D387929D72C512228D35011CF8C
Certificate serial: 049C
Authority key identifier: 22:E0:1D:43:7E:38:6D:38:79:29:D7:2C:51:22:28:D3:50:11:CF:8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IuAdQ344bTh5KdcsUSIo01ARz4w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1446/76741B34CA1811EBA8A71E7AC4F9AE02/99A50D2CCEB211EBA58CD00EC4F9AE02.roa
Signing time: Tue 07 Nov 2023 01:13:22 +0000
ROA not before: Tue 07 Nov 2023 01:13:22 +0000
ROA not after: Mon 30 Dec 2024 00:00:00 +0000
asID: 21734
IP address blocks: 111.221.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1180 (0x49c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1446/serialNumber=22E01D437E386D387929D72C512228D35011CF8C
Validity
Not Before: Nov 7 01:13:22 2023 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=65498f32-ed93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:86:c0:fa:ff:28:91:f6:06:99:8f:c0:52:35:
b1:a8:70:2d:8e:0b:aa:7d:92:f1:7f:0e:3e:d9:97:
4e:b0:65:54:fa:5d:5c:0d:91:e0:d8:2d:1c:49:11:
de:53:cf:23:ad:c8:f8:00:d0:8c:a8:cf:2b:be:bb:
74:5c:83:7f:77:8f:df:81:fc:cc:5a:9e:32:43:b7:
12:d5:cb:5c:f1:46:fd:a8:c7:0b:1c:de:33:79:03:
b2:c6:8d:58:14:1c:3d:4c:a8:c0:da:cb:78:59:eb:
ea:b4:05:56:4f:c6:e9:65:6c:c1:a3:ea:e7:7f:f0:
93:f6:c7:41:04:81:a0:1a:2c:96:bc:c0:9a:5b:51:
1d:fe:8f:c3:a6:34:2b:e2:d0:f4:62:68:a8:b0:9d:
f5:d5:55:b6:44:3f:15:f8:48:8e:c7:47:ba:fd:2e:
3e:8e:a8:b7:d7:9f:f8:40:99:98:ba:4a:62:ba:8a:
dd:cc:50:15:96:fd:89:ea:3a:be:96:53:3d:0a:f0:
79:e2:e2:ad:15:64:fe:a5:f6:79:dc:5f:41:9b:a5:
d8:cb:2d:6f:e4:2f:c1:eb:7e:ba:ff:92:8d:7b:4d:
6c:08:b0:d4:32:2a:44:8d:1a:1b:eb:bb:94:a2:57:
21:09:84:70:7e:96:b9:7d:90:f2:0b:b0:7c:2d:cf:
d4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:2B:6C:9E:9A:FB:70:AC:A2:68:0F:14:6F:98:44:FB:F1:94:42:B7
X509v3 Authority Key Identifier:
keyid:22:E0:1D:43:7E:38:6D:38:79:29:D7:2C:51:22:28:D3:50:11:CF:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1446/76741B34CA1811EBA8A71E7AC4F9AE02/IuAdQ344bTh5KdcsUSIo01ARz4w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IuAdQ344bTh5KdcsUSIo01ARz4w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1446/76741B34CA1811EBA8A71E7AC4F9AE02/99A50D2CCEB211EBA58CD00EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.221.56.0/24
Signature Algorithm: sha256WithRSAEncryption
77:aa:00:f9:00:48:e4:eb:00:cb:1a:c4:40:c9:85:ca:90:06:
98:26:3c:fd:1b:de:6e:d2:52:d7:a0:62:6d:c0:07:db:75:b1:
db:d1:0a:1c:3f:79:91:0f:aa:5e:f3:6f:64:1d:f8:44:2d:d6:
6a:b2:83:0b:85:64:a3:7f:67:4b:5a:58:ab:6e:0d:e4:a3:23:
93:47:d7:f2:8d:8c:af:ae:ac:e3:15:31:d9:70:e0:1b:e5:14:
cf:8e:43:43:52:59:15:79:7c:14:3c:33:a5:2c:9f:5d:38:ad:
e1:5b:d4:08:03:f1:9b:30:ca:28:d7:ea:b1:fc:a7:1b:12:40:
6b:81:53:dc:4a:d4:69:c1:d0:4a:5e:cc:d5:d8:45:88:79:23:
8d:26:cd:e1:3a:e5:a2:b9:bb:4d:6b:a7:57:36:e8:f1:7a:94:
26:f7:ea:f2:d0:63:5b:15:90:5c:6a:d7:3c:4e:20:59:4f:97:
f3:fc:8e:c4:54:bd:f1:1e:5d:cf:88:97:ef:53:c8:02:d3:16:
74:79:f8:58:22:0d:1b:a1:99:3a:e8:8c:03:1d:60:3b:4b:25:
2e:15:a2:0a:e2:bf:02:1d:90:77:4a:94:f7:91:85:13:de:95:
25:06:f8:27:44:71:66:2a:5c:7d:8a:a4:90:65:1b:5e:a5:e4:
59:04:0f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:41 2024 by rpki-client on console-fra.rpki-client.org