Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9BC7/A0390FC290E011EBA7FCA01EC4F9AE02/6ABAB046912911EBBB0F2409C4F9AE02.roa
File: 6ABAB046912911EBBB0F2409C4F9AE02.roa (raw, json)
Hash identifier: iDFmx5wRdpb3ghdfB11s4NwBSeluHcOowW6/LNycuGk=
Subject key identifier: 04:95:51:A3:91:2B:06:85:50:CB:D1:39:2B:46:40:AD:DB:CF:92:C0
Certificate issuer: /CN=A91E9BC7/serialNumber=18896EFB3385F432ED82371E9340FFCE6A662233
Certificate serial: 0568
Authority key identifier: 18:89:6E:FB:33:85:F4:32:ED:82:37:1E:93:40:FF:CE:6A:66:22:33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GIlu-zOF9DLtgjcek0D_zmpmIjM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9BC7/A0390FC290E011EBA7FCA01EC4F9AE02/6ABAB046912911EBBB0F2409C4F9AE02.roa
Signing time: Wed 03 Apr 2024 01:03:32 +0000
ROA not before: Wed 03 Apr 2024 01:03:32 +0000
ROA not after: Thu 01 Aug 2024 00:00:00 +0000
asID: 56062
IP address blocks: 202.14.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1384 (0x568)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9BC7/serialNumber=18896EFB3385F432ED82371E9340FFCE6A662233
Validity
Not Before: Apr 3 01:03:32 2024 GMT
Not After : Aug 1 00:00:00 2024 GMT
Subject: CN=660caae3-d88d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:25:93:0b:1f:8b:0b:a5:26:c5:cd:8b:4d:9e:
dc:ab:ab:32:9d:dd:a2:4e:8f:c5:cb:c1:27:21:65:
69:fc:19:de:55:3f:a6:d8:07:ec:3e:49:2f:ef:50:
12:c1:7f:2c:10:3c:a6:06:b1:2e:01:aa:8a:f4:b3:
c8:ed:1d:a9:f4:19:49:0f:10:6f:e5:0e:92:c6:f2:
11:92:63:9d:78:49:21:db:4e:c1:9f:27:46:8c:8d:
61:a1:f7:00:23:77:36:31:e1:51:d5:74:d3:23:1f:
6b:01:c2:7d:cc:f5:a7:dd:03:fb:e0:c6:ec:f4:1e:
cf:4a:ec:e7:d1:ff:06:95:46:93:1c:a1:d3:6e:9a:
ea:97:19:b2:37:a5:c4:7f:e6:d7:b7:2d:2a:57:a2:
bf:6f:7f:4f:04:b7:ab:a7:f6:a3:c5:22:c5:e2:23:
fc:63:f4:c2:04:f5:e5:d0:77:98:8e:74:35:3b:6c:
4f:ee:85:49:f9:60:ac:28:f2:95:c4:f9:7f:aa:d2:
c4:ce:4e:db:a0:fe:87:bf:bd:c7:b3:d0:d2:f5:1b:
a7:23:86:17:f6:d2:b9:74:83:67:8a:8d:a7:eb:76:
03:13:c5:d7:db:fa:ea:9b:f7:70:16:9e:91:7f:23:
3e:37:07:34:93:f1:49:96:0e:bb:d9:31:fa:ae:0c:
11:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:95:51:A3:91:2B:06:85:50:CB:D1:39:2B:46:40:AD:DB:CF:92:C0
X509v3 Authority Key Identifier:
keyid:18:89:6E:FB:33:85:F4:32:ED:82:37:1E:93:40:FF:CE:6A:66:22:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9BC7/A0390FC290E011EBA7FCA01EC4F9AE02/GIlu-zOF9DLtgjcek0D_zmpmIjM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GIlu-zOF9DLtgjcek0D_zmpmIjM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9BC7/A0390FC290E011EBA7FCA01EC4F9AE02/6ABAB046912911EBBB0F2409C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.14.150.0/24
Signature Algorithm: sha256WithRSAEncryption
47:4e:5e:c7:18:0b:57:d9:11:b1:1e:6f:c9:ee:cf:04:16:e6:
c1:18:f7:1a:44:67:68:9b:76:d9:06:0e:b5:59:76:86:66:30:
a0:ed:52:1a:f3:89:78:99:cb:20:2a:07:3e:fc:7b:3e:23:89:
c5:30:97:8d:45:22:24:e6:17:cb:07:f2:fd:90:df:f7:a0:1d:
9e:1b:6c:89:f2:cb:29:83:82:bd:3b:45:a7:1c:b0:a4:7b:57:
79:95:0e:e3:dc:41:04:49:11:71:ea:68:b8:f7:81:4f:38:ed:
9b:c9:28:08:21:04:37:24:f0:90:36:f9:91:a6:a3:0e:fe:57:
ae:71:95:b2:7a:9b:b5:40:1b:70:9b:2f:37:00:f4:10:68:e5:
eb:5c:dc:4b:30:b4:d3:ed:ba:3b:b9:9b:23:9b:63:ef:00:6f:
9e:e0:6b:57:f3:f1:b3:47:71:a3:e0:55:f3:a3:31:d8:2d:56:
87:24:40:84:30:4e:48:ed:df:2b:0e:89:05:3f:bc:da:a8:60:
e0:12:88:eb:d5:1d:22:9a:7c:a5:59:6e:2a:6f:79:88:17:68:
c0:04:0a:c0:bd:5d:0c:a7:da:55:48:32:52:1b:6b:e3:65:96:
9c:f7:59:a3:5e:48:bd:dd:e0:b8:84:ed:7c:b3:b7:22:a6:13:
7d:9a:a9:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:46 2024 by rpki-client on console-fra.rpki-client.org