Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/6FCDB6A8AA0011EE8A93B210C4F9AE02.roa
File: 6FCDB6A8AA0011EE8A93B210C4F9AE02.roa (raw, json)
Hash identifier: J/2Rf25Zy9QXyUnyAX7wVuLLPBvRXaeIFEX3922OCEc=
Subject key identifier: B6:14:0C:A4:C9:C6:FD:21:23:72:27:33:EF:EC:BB:85:97:60:8A:15
Certificate issuer: /CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Certificate serial: 2832
Authority key identifier: F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/6FCDB6A8AA0011EE8A93B210C4F9AE02.roa
Signing time: Wed 03 Jan 2024 06:22:15 +0000
ROA not before: Wed 03 Jan 2024 06:22:15 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 215938
IP address blocks: 122.254.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10290 (0x2832)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Validity
Not Before: Jan 3 06:22:15 2024 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=6594fd17-8c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0a:1d:e8:19:17:f9:7d:be:2a:d2:64:74:dc:
18:dc:67:2e:23:54:7c:6f:00:ec:98:ad:f4:7c:fa:
7e:94:b7:1d:e2:e3:83:27:6d:6f:42:2c:47:9c:30:
c8:d4:0a:f5:8c:30:c0:73:60:98:45:3d:f8:fa:7e:
91:a7:dc:35:d7:dd:8c:1d:d5:8f:1d:2f:1c:03:5f:
19:74:ce:44:5f:41:66:5a:69:44:f8:40:97:96:0b:
60:39:d8:4b:a7:19:78:7e:87:10:c1:b6:3d:82:81:
68:3f:3a:f3:8a:51:00:ae:88:d9:e1:5e:41:ff:7a:
74:db:f8:d1:ea:68:62:57:0a:56:38:67:3b:5b:b5:
b9:79:df:e4:4a:ec:b2:5b:57:82:a6:ad:ba:f4:e6:
d4:c1:50:52:65:56:8d:05:d1:ec:3a:c7:98:18:2f:
47:0e:d0:8d:75:5b:9a:0d:96:c7:59:1a:49:88:67:
bb:a5:20:80:f9:5f:4a:f2:e2:93:8b:1d:11:94:07:
ba:2f:c1:be:a8:d9:04:b5:a2:c3:00:8b:93:5c:03:
de:d3:3b:9d:68:87:2b:ef:89:e2:2d:cf:8b:81:fb:
b7:4a:fb:78:d8:f1:50:43:de:fa:12:0f:91:a2:f1:
35:24:fa:33:cc:4a:a2:ec:ed:d2:56:d1:77:9e:7e:
30:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:14:0C:A4:C9:C6:FD:21:23:72:27:33:EF:EC:BB:85:97:60:8A:15
X509v3 Authority Key Identifier:
keyid:F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/8A5-TIBTz_oGjrc-lYiS3YvmGow.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/6FCDB6A8AA0011EE8A93B210C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.66.0/24
Signature Algorithm: sha256WithRSAEncryption
97:89:2f:93:06:21:71:1c:f1:3d:e7:f2:1f:45:da:07:e5:d8:
01:5d:85:77:f0:6f:14:b4:08:89:83:bc:b1:e4:0c:87:f1:16:
9c:4d:60:a6:03:42:a2:95:17:06:eb:39:b3:b5:9f:ed:2a:fc:
3b:05:44:c6:db:a5:32:e6:56:14:a2:c7:09:19:f6:0a:ea:76:
22:63:02:14:9d:56:f9:55:b9:2f:29:a3:1e:ea:16:98:f2:82:
a0:45:75:4d:f3:aa:9f:3a:42:e5:c5:8e:38:ff:ad:ae:7c:d0:
1a:3c:11:89:7a:c3:c6:f7:9d:8d:5f:f1:31:c4:63:60:56:4d:
22:15:40:30:55:e5:86:a4:d7:8d:11:05:05:24:2e:ca:ce:e4:
34:27:46:fc:f7:0e:27:ff:e9:c8:f9:0e:82:80:28:11:11:ae:
e2:60:bf:70:35:fe:e0:5e:45:bd:7f:37:37:60:42:07:c4:21:
92:34:e7:f9:30:bf:a7:33:c3:77:76:3c:e6:c5:8e:88:0d:68:
d0:7d:d3:96:05:b7:ab:4a:24:b1:8b:ad:99:07:f1:e6:0b:41:
df:a9:80:31:0b:20:a7:12:a3:0b:2d:e3:38:71:62:79:45:ea:
42:f7:0d:92:8c:da:15:33:04:2f:c1:a9:5b:ef:98:48:63:72:
d1:bd:10:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 24 01:09:35 2024 by rpki-client on console-ams.rpki-client.org