Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/08B27620421011ECB2B93E5AC4F9AE02.roa
File: 08B27620421011ECB2B93E5AC4F9AE02.roa (raw, json)
Hash identifier: oQ126VEelmziPD5zdeh6/ZkYUmCBXM/r/iGTgmSjte8=
Subject key identifier: FD:43:4D:CD:71:1D:1F:67:1C:65:85:04:7B:71:0F:F6:0E:EC:D9:FC
Certificate issuer: /CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Certificate serial: 25B4
Authority key identifier: F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/08B27620421011ECB2B93E5AC4F9AE02.roa
Signing time: Wed 08 Jun 2022 04:22:51 +0000
ROA not before: Wed 08 Jun 2022 04:22:51 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 7029
IP address blocks: 122.254.72.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9652 (0x25b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Validity
Not Before: Jun 8 04:22:51 2022 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=62a0241b-0514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:92:49:81:a9:da:ff:93:49:da:f2:1d:e2:60:
b3:6d:ff:47:ca:09:6b:e6:5e:36:0c:dd:3c:a2:84:
de:53:19:e7:cf:ed:92:d3:ef:c3:23:41:fe:43:25:
27:46:79:dd:11:64:2b:d3:02:e6:d9:4c:09:0e:33:
90:34:5d:1f:94:ee:b6:a0:ee:a1:8b:77:c7:bd:ce:
9d:a2:61:12:0f:39:d2:6c:bc:a5:56:bb:cd:d1:13:
20:56:cf:ca:36:27:60:86:ca:a0:18:b5:d7:0d:4f:
8a:a8:25:af:09:5c:e5:89:8e:e4:72:bd:b5:bf:bc:
20:11:00:5e:f3:f5:9c:c1:dc:41:c3:86:cb:ac:55:
55:84:f4:69:b9:27:61:18:19:c7:79:b3:d8:0a:3b:
37:da:a6:b8:4e:7f:b0:66:5d:f4:d5:42:d7:5e:c2:
3f:7e:27:27:69:af:01:18:b5:04:71:c3:77:d5:27:
8f:37:e3:b3:96:ae:62:53:f7:38:bb:ae:08:44:0c:
ae:26:85:7b:e3:85:f3:ac:12:e8:af:64:e2:e2:5e:
6c:46:e9:4f:80:5b:a1:d6:19:d3:23:ef:e2:49:a2:
37:d3:02:41:35:a6:b0:cc:1c:73:d2:48:e5:56:2c:
11:41:69:96:0e:80:79:c8:e8:fd:d7:70:ab:fa:cd:
29:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:43:4D:CD:71:1D:1F:67:1C:65:85:04:7B:71:0F:F6:0E:EC:D9:FC
X509v3 Authority Key Identifier:
keyid:F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/8A5-TIBTz_oGjrc-lYiS3YvmGow.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/08B27620421011ECB2B93E5AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.72.0/22
Signature Algorithm: sha256WithRSAEncryption
31:54:75:b8:12:2c:c0:0d:92:90:8c:ec:d3:eb:d9:c4:51:93:
aa:32:b9:f2:a5:47:cf:71:4a:f9:4c:4c:73:c5:d4:53:ef:e3:
f5:46:af:30:82:01:40:7a:ab:77:31:51:83:0d:63:76:e2:a5:
7f:57:0e:0e:b6:1d:77:68:71:5e:78:cb:74:9c:1a:e3:8e:b6:
82:c6:c1:a6:43:fc:10:52:bf:01:93:e7:57:66:37:1b:eb:fc:
29:3a:61:9b:23:4f:e6:f5:b1:a5:62:d4:45:09:68:72:32:ca:
ea:92:dd:d2:5f:d3:03:14:8a:e2:da:82:c5:cb:49:82:c5:d8:
4b:ea:ea:42:ab:1c:8e:79:d6:73:d3:1c:c4:0d:aa:e6:8d:89:
bd:30:f0:f9:c7:bc:7c:ea:96:3d:3d:ee:d1:5d:39:4a:41:d5:
8a:6f:e6:74:4c:aa:8e:0d:bd:e2:22:58:91:4b:46:09:47:db:
66:ad:e7:20:4f:b5:c8:ce:e2:5a:0c:97:e5:99:e6:c5:4f:8e:
8a:08:eb:17:6f:e5:f7:03:c3:f4:a1:84:7d:07:fb:2c:75:a2:
a3:7d:63:1d:dc:ca:28:70:52:63:4e:a5:16:b9:74:cd:28:d6:
cf:78:f4:78:47:d3:ac:6b:3c:2f:a6:e5:9e:e6:bf:13:b9:61:
e9:e0:51:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:40 2024 by rpki-client on console-ams.rpki-client.org