Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/ADFE4CD4282A11EDAE487D21C4F9AE02.roa
File: ADFE4CD4282A11EDAE487D21C4F9AE02.roa (raw, json)
Hash identifier: Dqc96UxFJqBIFonh564BI9HfQ8aTVjy91SqCqsMv5KA=
Subject key identifier: A6:3A:AE:22:4C:78:93:F7:9A:92:0B:65:59:3F:22:AB:B9:6F:F9:36
Certificate issuer: /CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Certificate serial: 2768
Authority key identifier: F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/ADFE4CD4282A11EDAE487D21C4F9AE02.roa
Signing time: Wed 28 Jun 2023 16:02:31 +0000
ROA not before: Wed 28 Jun 2023 16:02:31 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 14315
IP address blocks: 122.254.72.0/24 maxlen: 24
122.254.74.0/24 maxlen: 24
122.254.75.0/24 maxlen: 24
122.254.108.0/23 maxlen: 24
122.254.112.0/23 maxlen: 24
122.254.114.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10088 (0x2768)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Validity
Not Before: Jun 28 16:02:31 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=649c5997-db8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:22:55:78:ac:7b:d7:0f:cb:13:d7:a3:3a:80:
16:1a:06:ea:c1:19:93:62:f6:e2:37:16:6f:c9:49:
92:da:66:a5:be:04:3f:e3:c7:30:1c:15:5a:41:3a:
21:a3:44:e9:b7:77:54:52:8a:21:21:e2:4e:dc:18:
97:1e:2f:05:30:53:ed:5b:27:00:6e:6b:1a:1d:bf:
e9:45:e4:86:df:8e:5e:f5:05:88:df:ee:ff:3c:b3:
d1:3d:52:38:71:a1:66:cb:d6:09:22:ef:f8:8b:b5:
84:93:8c:a2:15:6e:d1:eb:b3:ab:ef:94:06:3a:d1:
c9:8e:7e:a7:51:7b:4c:f8:46:af:72:e1:4e:a5:bc:
8b:5d:cb:00:98:09:49:db:50:fb:c9:f2:d6:3c:36:
04:7c:3e:07:c5:a4:57:10:c0:c5:1e:72:ac:64:6a:
ef:68:a4:df:e0:52:0b:06:c3:8a:03:4b:87:7d:28:
e5:8c:3a:1b:62:d5:58:19:dd:ec:ba:4d:db:7e:fc:
8e:e5:de:7c:b7:26:45:12:81:fe:7b:2a:29:5c:97:
c9:70:da:42:1d:96:ed:f2:5c:0c:39:e5:44:32:34:
db:cb:7b:81:11:38:89:c8:af:f1:e4:e0:c8:f2:5d:
03:09:f2:1d:24:a1:65:6b:ba:0e:27:3d:de:0a:8b:
61:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:3A:AE:22:4C:78:93:F7:9A:92:0B:65:59:3F:22:AB:B9:6F:F9:36
X509v3 Authority Key Identifier:
keyid:F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/8A5-TIBTz_oGjrc-lYiS3YvmGow.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/ADFE4CD4282A11EDAE487D21C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.72.0/24
122.254.74.0/23
122.254.108.0/23
122.254.112.0/22
Signature Algorithm: sha256WithRSAEncryption
74:bc:21:03:e5:85:2e:dc:e8:32:e2:0b:06:98:ff:be:98:9e:
76:e8:cb:9b:dd:8b:76:2e:4d:d8:d7:f2:9d:df:b9:32:0f:69:
e1:33:f3:c1:37:ec:59:2b:bb:8d:7d:50:da:a5:45:df:c9:fa:
ab:04:55:9b:5b:08:01:e6:60:d4:d3:eb:c0:b3:81:c4:f5:02:
13:b5:87:8b:24:52:30:8c:fe:2a:55:eb:99:d3:17:6f:61:ba:
68:42:99:c3:d1:35:aa:ef:4f:8b:de:8c:5d:8f:8e:76:45:3d:
89:bb:f0:1c:84:3c:30:fe:5f:ee:4f:cc:83:d8:45:92:83:4c:
d9:d5:ad:41:42:08:ec:3b:8a:91:df:10:d3:a8:5e:37:4f:b0:
47:a3:f5:9b:53:0a:96:1c:f4:1e:56:3c:6c:59:8e:f0:7f:43:
54:1e:33:cf:0d:94:58:c1:77:d5:03:a9:04:f9:6a:f3:8e:8b:
14:1b:9d:f3:d4:61:4c:94:a5:af:58:fc:e1:e4:dd:b8:7f:2e:
b2:e2:fb:4a:1c:2e:1c:e9:23:e8:bf:8d:f7:b5:e7:64:91:d2:
e5:a8:59:a6:33:21:0e:59:ef:08:73:ce:ab:da:27:49:b3:2a:
2d:58:8d:03:7d:11:bf:cf:ce:0f:35:10:1f:81:2b:a8:ff:47:
36:21:94:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 24 01:01:16 2024 by rpki-client on console-fra.rpki-client.org