Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE1FB/4584C148FA5D11E6B8814F19C4F9AE02/A3436BD6FA5D11E6AA12A219C4F9AE02.roa
File: A3436BD6FA5D11E6AA12A219C4F9AE02.roa (raw, json)
Hash identifier: AEkbhlHCZoSAdf5bTxzBqec94+uTUsF0jdM0DiiwKmA=
Subject key identifier: 17:B1:14:C6:6B:0A:49:08:E1:43:EF:CC:44:62:F7:01:5E:10:B7:DE
Certificate issuer: /CN=A91EE1FB/serialNumber=2AE63331F7199A55A2BAD9CB14F83FAB5066E958
Certificate serial: 1A96
Authority key identifier: 2A:E6:33:31:F7:19:9A:55:A2:BA:D9:CB:14:F8:3F:AB:50:66:E9:58
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KuYzMfcZmlWiutnLFPg_q1Bm6Vg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE1FB/4584C148FA5D11E6B8814F19C4F9AE02/A3436BD6FA5D11E6AA12A219C4F9AE02.roa
Signing time: Thu 12 Oct 2023 16:43:29 +0000
ROA not before: Thu 12 Oct 2023 16:43:29 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 55743
IP address blocks: 202.59.232.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6806 (0x1a96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE1FB/serialNumber=2AE63331F7199A55A2BAD9CB14F83FAB5066E958
Validity
Not Before: Oct 12 16:43:29 2023 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=65282231-a3c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:af:08:ea:b1:a4:92:44:2c:2b:15:eb:31:1a:
24:ad:83:21:f2:1a:2c:11:56:21:41:6c:f0:e9:bd:
9b:f8:d7:10:5d:a9:5f:fd:56:fa:ff:51:1b:d9:2a:
83:4a:47:8f:c7:cc:de:3d:64:65:0b:b8:d5:e9:3e:
ed:ca:ff:17:cc:fe:10:7c:f6:a6:bb:4e:d9:7b:79:
85:99:c0:a6:80:87:bf:a9:94:cc:95:66:1e:ed:03:
a4:82:39:a6:7c:49:95:7d:37:36:2e:45:5e:00:38:
66:53:64:3e:cd:2b:94:36:c5:17:2f:3d:62:62:26:
78:53:c5:0b:13:8c:16:22:6f:b2:0f:f7:de:0b:e3:
0a:83:aa:91:7d:2b:3a:1e:af:d9:1a:05:6d:8d:c1:
5d:f2:70:20:dc:ba:18:3f:01:95:23:b8:29:e8:e7:
14:1b:38:7d:bc:d5:82:cb:b6:3c:e8:14:95:3b:1c:
c5:a1:da:da:76:dc:6c:c3:1e:80:a8:37:d1:b8:05:
40:c9:63:c3:b2:04:b7:42:2b:72:55:cd:dc:6f:be:
ca:3b:e1:15:fb:79:9c:83:a0:2e:d7:82:94:16:60:
7b:89:09:47:80:f0:13:26:e7:95:1a:ed:d0:ac:6a:
91:be:25:83:b4:6f:7a:f9:d5:2a:1c:aa:41:38:e4:
8b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B1:14:C6:6B:0A:49:08:E1:43:EF:CC:44:62:F7:01:5E:10:B7:DE
X509v3 Authority Key Identifier:
keyid:2A:E6:33:31:F7:19:9A:55:A2:BA:D9:CB:14:F8:3F:AB:50:66:E9:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE1FB/4584C148FA5D11E6B8814F19C4F9AE02/KuYzMfcZmlWiutnLFPg_q1Bm6Vg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KuYzMfcZmlWiutnLFPg_q1Bm6Vg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE1FB/4584C148FA5D11E6B8814F19C4F9AE02/A3436BD6FA5D11E6AA12A219C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.59.232.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:c5:5c:a1:66:08:6c:68:de:c5:11:ab:be:a7:fa:e6:44:ca:
8a:9f:ca:c1:f2:0f:31:99:ea:3e:ff:c6:5e:09:0f:3c:19:86:
f5:f7:f8:b0:58:c1:74:ba:db:28:5e:77:8c:02:71:31:99:84:
5e:ec:b6:4b:c0:88:0d:ba:10:a3:14:4c:15:e5:01:14:c5:f6:
78:3d:a3:7d:dc:ee:61:3e:b4:46:41:75:65:6f:9e:06:c0:38:
67:a0:a2:49:e4:04:69:18:47:74:6a:60:7c:16:db:4e:95:39:
95:9f:57:8e:07:40:89:b5:b6:6c:93:0d:7f:6a:af:eb:12:a1:
2b:dc:cb:12:d2:97:76:9d:84:29:d7:51:bd:e9:5c:83:37:43:
a4:92:25:07:48:8d:c9:a2:67:1b:0a:bb:b0:22:88:9f:4b:11:
3b:b1:b4:ab:19:41:57:d9:99:6e:3b:7b:e4:9c:a7:84:6d:df:
7d:56:dd:3d:42:e7:83:8a:7f:a7:eb:7f:81:f6:ed:0c:f1:a9:
8e:79:66:34:79:cd:0a:d1:9d:a9:89:b3:03:f2:40:7d:f5:18:
0e:b1:95:fa:5b:5f:38:c6:1c:fd:85:e6:12:b1:eb:2c:dc:96:
27:94:86:e5:e6:d3:c4:b6:d6:52:76:45:35:3b:d7:6e:79:94:
48:fd:a5:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 24 03:05:10 2024 by rpki-client on console-fra.rpki-client.org