Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/6F10B170AA0011EE8A93B210C4F9AE02.roa
File: 6F10B170AA0011EE8A93B210C4F9AE02.roa (raw, json)
Hash identifier: P28XeVkJ2Eo2X8qVWsf1tl/5n8LP/Y9s0SEYNM3sh3k=
Subject key identifier: 94:C7:C8:F3:FB:B9:56:BB:31:D8:6D:A4:D1:51:32:C7:AA:C3:E1:B6
Certificate issuer: /CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Certificate serial: 2831
Authority key identifier: F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/6F10B170AA0011EE8A93B210C4F9AE02.roa
Signing time: Wed 03 Jan 2024 06:22:14 +0000
ROA not before: Wed 03 Jan 2024 06:22:14 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 141718
IP address blocks: 122.254.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10289 (0x2831)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Validity
Not Before: Jan 3 06:22:14 2024 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=6594fd15-719f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:e8:9a:be:58:70:22:57:a5:55:9a:5b:3b:ed:
40:72:3d:4d:f4:c8:ec:ea:97:3b:92:05:48:07:21:
bb:5d:08:8a:fd:a2:3e:bb:0a:3a:9f:1b:83:6c:c0:
67:74:78:2b:f3:e2:56:e7:f2:71:e3:f2:2b:88:5d:
f7:3d:9f:e4:08:f2:1d:71:09:fa:fc:da:ed:0e:ca:
82:db:26:7e:72:61:2e:2d:df:05:12:03:67:5d:69:
42:0a:70:57:6b:2b:50:71:54:71:dd:75:e0:56:f0:
90:54:20:43:67:1c:51:63:95:42:ca:c9:e4:a1:a4:
51:2d:28:3b:e0:42:3a:c2:76:dd:af:e7:42:cc:f2:
7f:f9:29:b9:81:b6:a6:2e:09:8d:f4:c3:cd:58:9c:
f7:83:56:36:95:5f:d1:41:ae:65:02:40:b1:7d:47:
5f:30:3e:fd:43:2c:22:13:6a:96:2d:3e:fe:9f:ca:
fa:24:1d:85:d9:67:57:53:d5:73:8f:e5:82:ec:18:
16:6e:3d:82:6e:6d:48:3e:42:60:50:4f:ac:0e:f9:
b3:f4:d9:df:13:a7:db:5f:66:88:a2:74:5d:0e:26:
f1:ef:0c:ea:c3:fe:8a:e7:88:d9:26:01:8f:11:50:
aa:84:a5:62:68:b5:49:8b:a4:88:1d:8e:43:d0:cf:
3d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C7:C8:F3:FB:B9:56:BB:31:D8:6D:A4:D1:51:32:C7:AA:C3:E1:B6
X509v3 Authority Key Identifier:
keyid:F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/8A5-TIBTz_oGjrc-lYiS3YvmGow.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/6F10B170AA0011EE8A93B210C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.116.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:d4:48:80:9a:be:5b:5b:9b:db:1e:f3:09:14:c5:60:01:b3:
0b:bb:80:6b:57:9e:76:92:25:c4:e4:3e:76:82:1a:3f:c7:c9:
13:9b:99:8b:75:1e:ae:35:60:58:9e:7d:42:9d:bf:ba:c3:ce:
97:5c:a7:97:9d:7e:64:82:77:a5:f3:97:17:67:c1:da:75:c2:
26:c0:ed:ab:c1:09:ad:c6:04:b4:02:5b:f9:ba:6c:4d:43:22:
be:6a:33:71:91:31:4d:94:17:45:32:57:86:ea:b2:68:0a:ae:
ae:5f:05:1a:06:d8:c5:44:dd:b3:2a:e9:dd:bc:a8:15:3e:91:
e8:3e:5e:77:8a:78:cf:c6:90:4d:dc:e8:f3:3b:6c:23:12:c1:
ca:4e:82:76:a1:9b:80:c1:2c:0d:93:ca:b4:4b:82:a0:6b:e1:
be:ac:3d:78:1a:be:3f:ec:6c:97:d2:76:18:71:45:7c:6f:9a:
fb:9c:6f:dc:ee:50:08:39:3b:a4:29:de:a3:58:46:b0:1f:5f:
7a:e2:9d:f0:0f:ba:fb:97:62:fa:93:53:80:58:07:c3:c5:30:
e8:21:64:2e:41:b2:84:b4:87:ae:5f:ae:fb:2d:ca:c7:ee:80:
4c:2f:41:a6:1b:9e:15:51:b0:e8:fb:ae:31:28:59:55:56:17:
cd:cc:a4:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 24 01:01:16 2024 by rpki-client on console-fra.rpki-client.org