Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/6CD476343F3F11EE931D0D76C4F9AE02.roa
File: 6CD476343F3F11EE931D0D76C4F9AE02.roa (raw, json)
Hash identifier: Kg42gFHgZKSdyuWrv/E/kyrRT3DrH1X/aGOmQhKHSrM=
Subject key identifier: 79:8D:AE:9C:72:5B:43:BB:6E:D1:DC:98:F5:34:9A:3D:27:78:AD:C8
Certificate issuer: /CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Certificate serial: 2793
Authority key identifier: F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/6CD476343F3F11EE931D0D76C4F9AE02.roa
Signing time: Sun 20 Aug 2023 09:53:34 +0000
ROA not before: Sun 20 Aug 2023 09:53:34 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 36231
IP address blocks: 122.254.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10131 (0x2793)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Validity
Not Before: Aug 20 09:53:34 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=64e1e29d-4ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:5f:67:59:8a:78:f3:9b:31:04:5a:d9:7b:9e:
6c:73:4c:ce:10:05:2e:30:3a:31:2e:a0:16:1b:91:
3d:4c:c4:93:17:09:6b:de:4a:4c:a7:15:b4:39:a7:
2f:12:84:5d:f8:67:60:8f:a6:4f:60:68:72:59:8c:
f7:ad:c3:2e:21:ee:28:91:75:70:cd:53:12:ce:af:
6d:d2:af:64:2f:3d:ed:5a:35:6e:b7:1c:6a:8d:53:
65:cd:6c:de:dd:64:36:ee:3a:06:27:fe:04:93:8f:
c4:24:7e:cf:4e:f1:09:e2:72:1e:0e:01:ba:5d:0e:
7f:e3:47:7b:72:3a:d5:bc:8d:b2:ad:49:16:b4:0c:
62:20:9e:8b:72:d2:3a:ea:57:29:fc:b8:7a:65:4a:
48:b3:c2:0e:a4:d4:01:0d:71:04:df:02:68:12:8d:
23:bc:0c:5b:ec:dc:6e:ac:e6:f1:e2:d9:8e:0a:dc:
8d:d9:5e:d4:de:2f:48:42:35:f5:33:9c:32:ff:6f:
c4:60:d3:80:4e:ce:f2:72:6b:d7:52:bb:6f:3e:3c:
75:71:df:ab:52:81:01:45:1c:1b:d0:15:11:79:54:
30:12:b2:1c:43:32:1d:ec:89:67:06:03:57:a3:cc:
82:51:47:ce:cc:1b:62:a8:1f:51:31:c4:fd:3b:31:
70:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:8D:AE:9C:72:5B:43:BB:6E:D1:DC:98:F5:34:9A:3D:27:78:AD:C8
X509v3 Authority Key Identifier:
keyid:F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/8A5-TIBTz_oGjrc-lYiS3YvmGow.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/6CD476343F3F11EE931D0D76C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.64.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:87:91:b2:48:e8:8b:70:0b:97:88:4c:6c:17:64:75:e9:2b:
7a:56:35:dd:51:fa:05:f5:18:8e:27:be:80:5d:1d:d4:35:f0:
8d:6a:ac:21:e4:ba:42:31:d0:6e:ad:d6:30:90:c8:93:a0:f4:
38:ad:4a:2a:94:09:b9:60:16:65:d7:dc:9c:6d:07:43:15:f9:
d3:68:94:fd:0d:58:cd:0a:04:c7:c6:0b:29:b4:b7:c5:2e:01:
db:6d:eb:7a:d1:4b:09:19:ca:0b:0d:5c:4e:1b:1b:a1:d2:4f:
29:e9:32:db:1b:6f:31:27:27:dd:dc:b5:c2:88:df:5f:2b:ba:
59:a2:d9:1e:1f:6e:84:cb:84:14:11:c6:ef:9e:b4:43:6f:c8:
5b:45:36:cf:cb:24:7e:7d:3c:ec:c5:62:f3:98:6a:8d:7d:8c:
3b:67:36:95:2a:9f:2c:6b:07:f0:6d:ad:9a:1d:dc:d7:10:5f:
f7:71:e7:97:9b:6f:59:3e:1b:3d:ad:95:29:0c:ca:5a:25:32:
90:22:db:90:cb:e6:8d:34:a1:4f:e3:bd:08:a7:6b:7b:87:57:
28:35:35:95:7b:73:85:63:c8:83:63:8a:a4:76:7d:29:6a:07:
6c:cf:ff:da:a2:a0:74:54:3e:18:fa:68:65:76:c2:6c:f1:ea:
0c:82:60:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:52 2024 by rpki-client on console-fra.rpki-client.org