Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/83606396837711EE83E14C68C4F9AE02.roa
File: 83606396837711EE83E14C68C4F9AE02.roa (raw, json)
Hash identifier: b1EEeCRhyEet2aqV3GCVm2ylTJ4ZO9/AIGI2JJxtM/0=
Subject key identifier: B0:ED:AA:F6:72:49:20:28:F7:BD:6E:17:55:F5:E7:17:79:74:92:5F
Certificate issuer: /CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Certificate serial: 280B
Authority key identifier: F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/83606396837711EE83E14C68C4F9AE02.roa
Signing time: Wed 15 Nov 2023 05:26:22 +0000
ROA not before: Wed 15 Nov 2023 05:26:22 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 399045
IP address blocks: 122.254.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10251 (0x280b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Validity
Not Before: Nov 15 05:26:22 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=6554567e-3c90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9d:60:11:e5:fa:66:8f:a5:d2:fa:28:bf:00:
33:87:90:13:7d:ca:fb:bf:b2:55:27:ea:88:b8:24:
da:be:76:eb:e4:45:53:07:ce:52:b4:7a:6d:22:8e:
ee:eb:5a:cf:4f:0f:f1:66:32:f5:14:eb:48:f7:91:
da:aa:fc:2e:53:97:72:5e:ea:63:69:7e:1c:c8:c3:
f1:48:9e:f7:9d:9f:74:1c:ea:3f:c6:25:b4:91:52:
91:09:27:62:dc:f4:fc:de:3d:32:12:2e:2c:df:d9:
a6:37:10:1c:e4:f2:e2:78:a8:2e:27:a3:6c:5e:14:
66:0d:14:a5:92:58:5a:b7:16:dd:a8:50:be:43:75:
24:a1:ee:cf:58:f8:fc:4e:5f:e8:93:3d:9c:84:5f:
d2:d8:41:52:36:c8:27:0b:bd:78:c5:db:51:30:d4:
ac:e1:a0:89:9c:9a:58:d8:67:02:11:fd:f3:2d:9d:
ac:d2:70:47:3b:53:c0:e8:d1:82:19:43:e1:af:05:
2e:a8:e3:a5:9f:c7:5d:80:7d:f4:16:71:a1:87:5d:
95:eb:af:e9:2a:73:ef:8d:5a:b4:db:f5:17:1f:52:
bc:71:3d:b0:92:89:90:5d:dd:4f:d1:5b:e7:36:e3:
79:88:41:43:de:53:d1:4a:7d:49:18:40:c5:bd:9e:
9a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:ED:AA:F6:72:49:20:28:F7:BD:6E:17:55:F5:E7:17:79:74:92:5F
X509v3 Authority Key Identifier:
keyid:F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/8A5-TIBTz_oGjrc-lYiS3YvmGow.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/83606396837711EE83E14C68C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.66.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:61:b5:0b:ce:75:d1:4b:ae:3e:c0:ea:3b:10:af:eb:d7:16:
2f:a5:d4:f3:5d:74:e4:24:3c:49:76:a3:4f:b3:50:23:6f:24:
ed:fe:28:8f:28:a6:5d:f3:88:ba:db:ae:09:4b:b6:af:fb:a7:
6b:e8:64:6a:ee:4e:72:c9:6f:d5:ec:d1:c1:90:c7:64:b4:ee:
3d:39:67:7d:25:6d:01:a1:71:e8:75:f0:7f:3a:18:d3:4a:c3:
cf:b4:ec:61:ee:c4:b3:1f:72:c8:27:2f:e3:93:25:34:f5:cb:
47:db:3a:fd:15:4a:60:19:a1:69:7c:a8:6d:97:a9:18:c5:d6:
f9:5c:df:61:cb:e6:2d:1f:25:77:5a:84:4a:e2:64:fe:9d:08:
5f:cc:00:4d:c5:08:8f:93:20:d7:77:8d:96:ca:0c:65:53:6e:
88:66:65:78:ad:26:ff:f6:05:db:73:dd:5f:69:75:30:c3:b4:
26:b7:6b:41:eb:fb:08:5c:7c:ed:3b:fd:61:bd:7f:4c:ec:73:
60:29:ff:45:6d:07:43:3a:26:c7:c0:dc:72:b6:c9:92:f0:99:
7a:b3:4d:cd:52:c7:76:4c:2a:6a:e4:36:71:8a:09:6a:22:78:
12:b8:ac:94:c8:18:1d:20:1a:48:92:fa:89:9c:45:27:b0:d4:
cb:e4:96:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:52 2024 by rpki-client on console-fra.rpki-client.org