Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/B9B8C514408011EC8E4A7983C4F9AE02.roa
File: B9B8C514408011EC8E4A7983C4F9AE02.roa (raw, json)
Hash identifier: QfNVb9D9HuT/0gKZ1/IzmmxsyIKT8/3FMs49IpDu8cg=
Subject key identifier: FD:9F:CA:B2:06:83:39:A8:B5:A6:A2:D1:07:0B:7A:BB:D6:C0:A5:68
Certificate issuer: /CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Certificate serial: 23E6
Authority key identifier: F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/B9B8C514408011EC8E4A7983C4F9AE02.roa
Signing time: Wed 10 Nov 2021 10:41:51 +0000
ROA not before: Wed 10 Nov 2021 10:41:51 +0000
ROA not after: Wed 31 Aug 2022 00:00:00 +0000
asID: 55933
IP address blocks: 122.254.92.0/22 maxlen: 22
122.254.96.0/22 maxlen: 22
122.254.100.0/22 maxlen: 22
122.254.104.0/22 maxlen: 22
122.254.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9190 (0x23e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Validity
Not Before: Nov 10 10:41:51 2021 GMT
Not After : Aug 31 00:00:00 2022 GMT
Subject: CN=618ba1ef-bb68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:22:fd:9c:83:d9:95:8d:d3:dc:45:f9:86:a1:
20:43:58:12:7c:e6:8e:0b:48:f9:46:41:e9:45:73:
2a:35:d3:77:30:a6:24:01:2b:03:ee:57:14:08:84:
b9:c6:45:ca:93:73:fe:27:33:51:be:0e:33:91:f9:
53:c7:ac:a7:ad:ab:ef:66:b4:40:6b:37:5e:b1:01:
80:96:83:46:20:d3:f7:11:fc:2d:2d:3b:f9:76:d9:
fe:5a:d6:ca:1a:99:90:5f:68:01:30:86:cb:ef:26:
dc:5f:02:40:02:da:9c:79:3d:dd:4e:73:b7:c6:6e:
6f:64:04:d7:7d:6f:de:ec:97:00:b4:c7:7c:81:58:
ff:75:3c:3a:32:a9:83:71:23:15:e4:b9:f9:c9:5c:
7f:70:67:5c:43:94:21:d5:ef:7f:ee:63:60:8c:92:
64:70:6c:0c:4e:43:ba:b1:bc:e9:d3:d2:65:d7:1b:
21:1a:5f:3c:d4:35:f7:bc:56:db:85:17:eb:ce:d4:
d5:22:cb:70:8f:bf:f8:1e:bc:9e:f2:d2:7b:57:c9:
f6:d1:89:b2:3d:92:67:04:fb:66:a3:dc:a7:1f:ce:
80:f2:2c:24:3a:8e:da:b7:b7:41:6a:a1:4d:70:98:
68:11:fe:ae:46:86:45:e3:66:29:7c:bd:d7:f9:10:
e9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:9F:CA:B2:06:83:39:A8:B5:A6:A2:D1:07:0B:7A:BB:D6:C0:A5:68
X509v3 Authority Key Identifier:
keyid:F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/8A5-TIBTz_oGjrc-lYiS3YvmGow.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/B9B8C514408011EC8E4A7983C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.92.0-122.254.107.255
Signature Algorithm: sha256WithRSAEncryption
20:60:d9:8b:5f:7f:40:54:18:62:89:58:1e:70:0f:d5:38:7b:
a2:ed:19:ed:23:65:ad:af:65:68:92:79:d0:2b:69:e7:11:2f:
37:3c:2b:c8:7a:5f:85:a3:11:ad:4f:90:65:c7:25:2c:ea:6e:
70:59:82:8b:85:b3:52:63:a9:ec:cc:75:75:9d:40:44:3a:1b:
92:db:b3:82:12:b5:07:65:38:6e:66:ce:59:06:8e:1c:1e:91:
09:fd:de:18:c5:29:6f:4f:f5:28:0d:75:b5:56:f3:df:fd:18:
8e:24:1b:2b:6f:80:36:ba:80:28:a4:29:56:00:da:69:c6:cc:
a6:b9:82:de:fd:c7:c1:f7:19:40:65:75:39:6b:7a:23:27:6c:
5f:9a:a2:6f:c8:97:78:b5:5a:34:f5:68:ba:0b:4f:66:2d:e8:
7e:2e:9c:d8:87:87:30:fb:cb:e6:00:a7:a2:09:0c:a3:5d:4f:
85:6f:88:4a:00:72:6f:01:fd:29:a2:2f:21:19:58:93:8c:9e:
60:6d:20:44:2a:d6:12:39:23:02:a8:e4:65:28:22:81:a1:e7:
ae:b1:1f:a9:f6:76:be:90:77:11:99:07:d3:72:e5:69:48:9c:
2e:08:14:47:48:40:0c:59:e8:d7:45:78:89:0a:d8:8d:7c:53:
8f:aa:96:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:40 2024 by rpki-client on console-ams.rpki-client.org