Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/A0FADAE8661E11EDA956F111C4F9AE02.roa
File: A0FADAE8661E11EDA956F111C4F9AE02.roa (raw, json)
Hash identifier: QAIQeJaolXEAbnlBvkumg1qmowGSb7QA6tGv7UEZxHw=
Subject key identifier: 8D:A8:C8:1D:B6:B0:D0:2B:E4:7D:F2:79:D8:56:2D:50:57:C8:E0:7B
Certificate issuer: /CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Certificate serial: 26DB
Authority key identifier: F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/A0FADAE8661E11EDA956F111C4F9AE02.roa
Signing time: Thu 17 Nov 2022 02:22:06 +0000
ROA not before: Thu 17 Nov 2022 02:22:06 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 400377
IP address blocks: 122.254.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9947 (0x26db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Validity
Not Before: Nov 17 02:22:06 2022 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=63759acd-7b09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ca:78:2f:fb:ba:39:df:2a:89:31:04:1b:1b:
cc:10:a1:36:79:27:47:3e:ae:1b:7c:be:e7:d8:5c:
14:a4:c3:f3:e2:ac:1a:bb:07:a4:73:a3:b0:1e:c2:
20:67:90:a9:37:04:86:45:6c:e0:66:0f:e1:73:db:
87:f9:f5:13:a8:ed:0e:38:a9:bf:c3:56:a0:e4:44:
ed:18:ad:a5:ab:43:84:55:09:1b:b1:50:6f:65:bd:
f2:69:46:05:41:4d:89:06:cc:15:e5:7c:80:02:d3:
79:70:db:d4:c5:c2:c0:fc:8b:7f:a8:b3:65:40:fa:
65:10:4f:f5:58:4a:36:43:77:7f:72:a0:ad:66:05:
62:41:d5:2a:29:f9:b6:97:2f:ad:25:8c:18:63:01:
24:b7:f2:aa:16:b0:66:cc:f8:9b:70:77:e4:1c:21:
89:06:bf:4c:99:8c:4d:80:fc:98:cf:1f:68:a6:19:
96:25:04:c8:00:9d:a3:95:27:b9:cc:d3:72:55:17:
f1:d1:25:4b:01:0a:ec:bc:15:7a:55:90:d6:d0:6c:
5d:dd:4f:63:b2:dc:bb:37:cd:45:21:ff:21:6a:e8:
3d:1e:97:ee:ad:8f:34:e0:90:32:bb:57:12:4d:dd:
9d:c6:68:f5:b0:0a:a9:94:6c:ff:12:4a:06:41:09:
45:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A8:C8:1D:B6:B0:D0:2B:E4:7D:F2:79:D8:56:2D:50:57:C8:E0:7B
X509v3 Authority Key Identifier:
keyid:F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/8A5-TIBTz_oGjrc-lYiS3YvmGow.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/A0FADAE8661E11EDA956F111C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.117.0/24
Signature Algorithm: sha256WithRSAEncryption
da:0c:9a:ba:e6:77:19:26:08:b5:8d:f0:a3:54:24:a1:3d:5e:
ad:ec:0b:6a:40:f1:cc:16:dd:2e:48:db:f3:1c:0a:9a:8f:55:
42:5d:31:a9:ea:73:9b:f1:33:2b:30:c2:c5:d7:d7:93:a0:5b:
67:ef:1e:29:65:95:a2:06:df:5f:c2:92:6d:3b:3d:de:3e:34:
f7:9f:cb:29:14:c6:01:34:ca:ff:82:c8:2f:b8:ad:bb:ca:e3:
b3:52:34:28:81:58:6f:3d:17:f4:be:1d:2b:1a:c8:3c:5b:0c:
44:d1:06:ed:04:1d:29:1e:5a:6f:e5:e2:51:3e:36:65:34:b7:
d6:bc:60:16:a4:9a:3b:79:06:69:93:31:a8:89:0f:b1:d3:d0:
aa:c4:ad:3a:10:02:0a:48:13:dd:f1:77:85:ec:16:a9:55:24:
eb:a0:4e:fe:4b:61:14:19:11:3d:21:c5:c6:57:ad:93:0a:23:
6e:49:4b:f2:74:7b:f7:6f:7a:29:52:20:9d:de:54:42:87:ca:
d0:2a:20:8b:7a:2d:f5:3e:0b:f7:18:05:85:ed:8b:a1:5c:bf:
e6:2d:a6:9e:9f:ba:b5:34:a8:01:4b:a6:c5:7e:55:c9:d8:ca:
c6:b0:ec:c2:ab:6e:37:d3:b1:a5:49:65:42:8c:1b:a4:de:de:
fd:ee:34:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:52 2024 by rpki-client on console-fra.rpki-client.org