Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/75828B2AC25A11EDB1218A54C4F9AE02.roa
File: 75828B2AC25A11EDB1218A54C4F9AE02.roa (raw, json)
Hash identifier: iLBvvtnYmdKnu+5XoTx/m6X+foEydaa9J2Y5JDN6nFk=
Subject key identifier: 06:4B:38:25:B4:C1:AB:81:0F:3F:26:76:14:59:33:31:7A:B8:40:1C
Certificate issuer: /CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Certificate serial: 276A
Authority key identifier: F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/75828B2AC25A11EDB1218A54C4F9AE02.roa
Signing time: Wed 28 Jun 2023 16:02:33 +0000
ROA not before: Wed 28 Jun 2023 16:02:33 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 206264
IP address blocks: 122.254.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10090 (0x276a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Validity
Not Before: Jun 28 16:02:33 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=649c5999-acb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:49:36:78:4e:a1:b9:f9:fd:ef:fa:b5:dd:da:
23:c4:7d:b1:6e:16:39:20:a4:64:6d:ea:81:c9:83:
2d:84:20:1b:01:09:c2:b4:cd:83:2f:7a:40:9b:66:
d3:a5:09:25:18:0c:45:8c:0e:25:ef:6d:bd:e7:26:
b8:3e:07:bd:a1:f8:af:31:d4:4a:11:0c:80:10:ac:
31:3c:b9:73:0d:58:7a:04:33:89:85:03:ee:e8:78:
e2:d9:1f:43:12:1d:2c:e7:56:b7:48:51:f6:ff:82:
17:17:68:ee:2f:59:d1:aa:4f:da:7a:4f:a5:a6:3f:
ae:b5:3a:62:8d:97:4f:66:4d:33:d3:59:de:d7:66:
af:70:e6:b9:02:0e:8d:18:20:31:9d:83:06:a2:e1:
12:ce:82:9a:f6:e6:7b:ec:dd:f3:08:3b:6a:da:0a:
3e:38:94:00:84:74:27:1c:8a:d9:79:cd:8f:3a:0f:
56:c2:33:13:c9:47:9b:41:79:18:17:50:db:b9:c0:
77:81:f2:54:c6:2d:26:b6:f0:d6:d0:6d:fd:9c:0d:
4f:7c:bd:b2:61:d3:d3:ea:4d:4c:0a:26:ed:b4:12:
1d:8f:fd:c5:da:61:77:66:14:89:7a:e9:bb:1c:ac:
b1:2e:cd:f9:bf:be:c4:00:5d:6f:4e:1b:76:67:f5:
a3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:4B:38:25:B4:C1:AB:81:0F:3F:26:76:14:59:33:31:7A:B8:40:1C
X509v3 Authority Key Identifier:
keyid:F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/8A5-TIBTz_oGjrc-lYiS3YvmGow.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/75828B2AC25A11EDB1218A54C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.117.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:74:bc:21:54:a1:c6:b8:66:31:11:9e:f5:9e:3f:28:eb:20:
70:40:69:cc:54:25:6c:9a:2f:31:08:db:c6:12:fa:ae:a9:3a:
fa:68:cc:d9:17:93:ca:93:06:ed:0c:50:51:bb:90:38:49:9c:
9b:60:07:95:46:7e:dc:b7:5f:8d:4d:8d:0a:a6:20:12:7d:75:
18:33:59:c4:de:fa:ad:d0:3e:15:90:fd:71:1d:21:43:9a:10:
1a:23:86:9a:6a:6a:d0:a1:30:bc:46:bc:49:31:89:ba:d4:f8:
aa:42:76:2c:bd:f3:8e:aa:6d:0e:07:b0:d5:fe:06:05:c4:b3:
5e:ac:ab:0f:e6:34:71:e3:21:33:fd:d8:bd:91:d3:11:9d:44:
40:4d:15:92:3d:1b:98:57:19:fd:9d:2a:fc:b3:bd:90:c2:85:
63:57:d9:e1:b8:03:71:3f:ec:ed:4e:dc:da:80:74:77:a1:18:
89:32:24:0f:aa:d8:f4:82:ab:df:82:73:2f:bd:0c:9b:26:c3:
1f:c0:53:e0:41:5a:d5:a1:ca:8d:9e:7e:aa:d8:37:54:2c:9b:
ff:95:d8:28:a2:ff:7c:02:bb:5c:55:fc:70:bb:6e:1b:e3:52:
b8:25:8f:b6:a7:bb:37:25:b0:98:ec:10:98:28:6a:61:95:b9:
48:08:e8:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:52 2024 by rpki-client on console-fra.rpki-client.org