Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F50AA/1494547A6C9411EA9B286233C4F9AE02/5280C986431811EEA53BF377C4F9AE02.roa
File: 5280C986431811EEA53BF377C4F9AE02.roa (raw, json)
Hash identifier: C82PSlG8bEQbBfxu96PFln/MIICwf6HDZhc9yIEr/EI=
Subject key identifier: D0:5E:79:FE:22:56:3E:E4:EC:A5:2C:6D:A9:BB:25:BB:27:FB:69:20
Certificate issuer: /CN=A91F50AA/serialNumber=8B195F37810549BB5B77A27ECCA73A2E2FC7A207
Certificate serial: 0919
Authority key identifier: 8B:19:5F:37:81:05:49:BB:5B:77:A2:7E:CC:A7:3A:2E:2F:C7:A2:07
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixlfN4EFSbtbd6J-zKc6Li_Hogc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F50AA/1494547A6C9411EA9B286233C4F9AE02/5280C986431811EEA53BF377C4F9AE02.roa
Signing time: Thu 02 Nov 2023 21:08:23 +0000
ROA not before: Thu 02 Nov 2023 21:08:23 +0000
ROA not after: Mon 30 Dec 2024 00:00:00 +0000
asID: 139760
IP address blocks: 118.127.67.0/29 maxlen: 29
118.127.72.32/29 maxlen: 29
118.127.89.112/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2329 (0x919)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F50AA/serialNumber=8B195F37810549BB5B77A27ECCA73A2E2FC7A207
Validity
Not Before: Nov 2 21:08:23 2023 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=65440fc7-1aee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7e:84:ad:e8:ff:66:39:c4:ab:0d:ec:b4:76:
88:4b:49:01:87:cf:03:83:9a:5e:00:18:9d:95:ec:
67:22:6c:29:8d:be:e5:84:f1:d9:01:c8:0e:19:7e:
7f:d4:f8:d1:f9:e2:ba:39:78:03:7e:a3:6e:da:e9:
5a:6d:ca:63:56:3c:87:9f:c2:44:3f:67:06:e5:e8:
df:af:2e:c4:2e:aa:35:d1:ed:8e:61:52:30:7d:4d:
c3:8f:c2:0e:ee:2a:04:a5:65:e4:d9:0f:1c:78:00:
6a:8b:98:3b:6b:4e:f0:7a:19:10:b4:36:3c:fb:44:
79:ab:e8:9a:73:94:fd:84:58:0b:3d:00:aa:5d:f1:
13:38:14:15:84:4e:7c:7e:41:e7:50:53:ae:3d:06:
5b:a2:1e:3e:eb:21:65:21:d1:dd:c9:b9:de:cb:9e:
53:f7:8b:ce:31:7d:46:26:8b:19:7c:bd:a0:4b:f1:
3b:8d:f5:44:50:9a:ef:ae:06:bd:21:db:6b:a5:48:
3e:a2:87:d4:90:5d:ff:2b:e0:8c:0f:e0:d0:c0:41:
2f:ed:e3:8f:97:7f:38:9a:b8:c9:25:36:dc:52:b4:
41:6a:43:46:1f:f4:c6:82:c4:b9:b0:56:49:19:e1:
f5:de:ba:28:65:67:87:56:82:0e:d9:9d:13:e7:b0:
bd:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:5E:79:FE:22:56:3E:E4:EC:A5:2C:6D:A9:BB:25:BB:27:FB:69:20
X509v3 Authority Key Identifier:
keyid:8B:19:5F:37:81:05:49:BB:5B:77:A2:7E:CC:A7:3A:2E:2F:C7:A2:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F50AA/1494547A6C9411EA9B286233C4F9AE02/ixlfN4EFSbtbd6J-zKc6Li_Hogc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixlfN4EFSbtbd6J-zKc6Li_Hogc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F50AA/1494547A6C9411EA9B286233C4F9AE02/5280C986431811EEA53BF377C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
118.127.67.0/29
118.127.72.32/29
118.127.89.112/29
Signature Algorithm: sha256WithRSAEncryption
93:08:05:3c:59:19:78:73:09:e0:70:37:0e:fd:72:9f:70:6f:
39:e9:cf:a2:4c:09:f9:7f:35:32:0e:9c:ae:e4:6e:67:fb:b8:
5e:b6:1b:a4:29:2a:ea:05:27:a8:83:9f:e9:54:6f:bc:29:8b:
81:f1:06:e3:0d:26:4b:3a:3c:79:49:d3:b5:29:dc:e2:16:8e:
3b:6c:ce:da:15:8c:08:b3:45:56:4e:65:78:ba:f7:66:c0:70:
dc:3a:cb:a7:6f:d1:33:64:27:1e:56:e8:92:7b:93:6f:83:d3:
4b:74:34:86:06:0c:3b:18:24:78:78:5f:82:a8:ae:50:f4:45:
6f:33:9b:75:6f:5e:c3:33:51:18:7a:ac:4b:ff:85:96:77:49:
59:49:c2:7c:f7:84:ad:b9:83:a9:bf:44:d4:dd:94:4b:01:3b:
aa:e4:40:45:2a:b0:63:26:d4:e1:5e:9d:1a:39:08:b3:b0:75:
d3:c3:c1:d4:92:8d:d0:f0:ab:f7:02:87:ca:92:63:0d:77:1b:
99:ee:5d:5b:2b:58:3d:32:69:dd:dd:67:85:f7:d6:63:3f:61:
e2:f7:e8:86:da:61:9c:4f:5d:98:c4:b4:03:4b:31:fb:76:7c:
f9:ef:da:d2:1c:a2:57:b0:62:11:b0:d3:dc:5f:8b:2e:df:8f:
25:3c:99:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:38 2024 by rpki-client on console-ams.rpki-client.org