Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/55ACADBC3F4B11EE9252DC51C4F9AE02.roa
File: 55ACADBC3F4B11EE9252DC51C4F9AE02.roa (raw, json)
Hash identifier: qmeVR4PAuZqu1K1hoK/LHaXLLjlJ3ywo8VnV0DOKfK8=
Subject key identifier: FC:5F:97:2B:01:BB:D1:E0:4F:95:30:B4:97:D5:B5:38:2B:8D:3E:5A
Certificate issuer: /CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Certificate serial: 27A1
Authority key identifier: F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/55ACADBC3F4B11EE9252DC51C4F9AE02.roa
Signing time: Sun 20 Aug 2023 11:18:49 +0000
ROA not before: Sun 20 Aug 2023 11:18:49 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 138195
IP address blocks: 122.254.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10145 (0x27a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Validity
Not Before: Aug 20 11:18:49 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=64e1f699-c3bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8d:60:c4:cd:50:a1:ac:be:d6:34:a7:7a:e7:
a5:62:6c:5b:09:4f:28:30:6d:cf:33:54:38:45:f7:
4f:26:53:16:ea:c5:f7:07:dd:80:6f:50:d6:b3:0e:
67:c6:5a:4d:33:48:ba:78:c7:69:d9:0b:03:11:73:
12:36:4e:65:71:90:6e:d8:eb:5e:ac:69:56:bb:a5:
96:e9:01:20:51:cf:57:ad:9e:ec:68:5d:81:04:44:
fd:91:f0:b8:69:7f:08:56:73:ba:f8:28:44:a7:85:
4a:0b:df:6c:7e:87:88:f4:bb:f7:2c:c5:91:57:f9:
56:4c:01:3c:8b:f4:89:45:1c:53:b2:7a:00:25:f3:
8b:1c:d2:e0:82:2c:f9:90:6e:f8:e0:6a:51:e2:15:
c3:19:d6:ab:7e:77:35:38:60:04:5b:c1:7f:d2:d4:
cf:e1:44:db:4b:03:9e:ab:d8:b5:39:1d:fb:ec:b5:
c2:5f:f7:29:be:de:18:4d:06:00:0a:74:ab:fe:a1:
23:7c:85:ad:4d:7d:d6:fe:36:64:34:a4:dd:bc:1a:
fc:36:0a:a9:22:5f:49:7d:cb:68:cd:a3:d9:47:aa:
49:1f:5a:3a:82:29:1d:44:d0:f3:7d:1b:3a:9f:43:
fb:cd:ad:2b:e6:bf:eb:24:17:73:19:7e:7f:8b:c1:
76:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:5F:97:2B:01:BB:D1:E0:4F:95:30:B4:97:D5:B5:38:2B:8D:3E:5A
X509v3 Authority Key Identifier:
keyid:F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/8A5-TIBTz_oGjrc-lYiS3YvmGow.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/55ACADBC3F4B11EE9252DC51C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.64.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:3f:8b:76:04:26:69:8a:37:e8:06:98:bc:1b:a3:f5:67:b2:
29:c4:3b:a4:5a:df:6d:45:2a:ad:0b:7c:28:b6:61:cd:e3:c0:
5f:87:4b:a6:4a:99:09:d0:6b:43:bf:9e:ec:94:a8:6f:8c:1c:
8e:4b:89:f8:8a:04:7f:ce:82:12:a1:5f:9a:2b:12:96:7f:d3:
58:09:62:11:42:ed:35:03:38:02:ae:0b:ed:ff:91:56:67:78:
bb:0a:1e:5b:f5:fe:89:02:5c:72:13:44:a6:d9:77:67:55:43:
6c:ba:71:d7:ea:2c:26:05:55:c8:07:4f:b8:e4:70:99:44:b9:
61:4b:5b:19:88:58:c7:76:b0:b4:d1:2c:c6:19:94:6b:b4:9d:
99:58:7a:ff:94:3f:34:4f:6c:84:f8:70:91:1f:55:74:83:ae:
44:c8:23:85:31:f1:d8:3a:bd:94:c6:f1:af:38:6e:4d:1d:fc:
8e:a0:e1:ba:00:7d:8d:d5:60:2d:1a:ee:a1:08:b6:af:32:2e:
6d:a5:f7:dc:ee:e3:6a:b9:6b:ce:02:77:46:43:a1:fa:f8:55:
fd:c0:20:79:ee:35:c6:4e:26:ce:57:e0:f3:81:5f:70:bc:e7:
ed:a9:84:27:3e:2e:fe:c7:ec:0e:90:59:29:12:93:cd:f2:04:
fa:0b:56:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:52 2024 by rpki-client on console-fra.rpki-client.org