Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/F2AF92160D9511ED8F09C27DC4F9AE02.roa
File: F2AF92160D9511ED8F09C27DC4F9AE02.roa (raw, json)
Hash identifier: FjJexzuMDNYni3jKqzl9ZCNzbo8VUVup+gXKu9qAv5M=
Subject key identifier: E2:0F:51:15:4E:E4:C5:2C:0A:0A:62:49:E0:7B:3A:39:08:00:F8:71
Certificate issuer: /CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Certificate serial: 2624
Authority key identifier: F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/F2AF92160D9511ED8F09C27DC4F9AE02.roa
Signing time: Wed 27 Jul 2022 10:21:59 +0000
ROA not before: Wed 27 Jul 2022 10:21:59 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 212238
IP address blocks: 122.254.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9764 (0x2624)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Validity
Not Before: Jul 27 10:21:59 2022 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=62e111c7-95d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6c:f6:eb:45:ca:ad:11:1b:0d:3c:64:82:e3:
de:e9:9e:29:51:b6:e7:30:bc:78:1a:34:40:bd:ea:
91:f2:e0:2d:67:e9:4c:04:e4:c3:56:46:46:f0:65:
4d:f6:42:de:6d:da:89:28:ac:b8:b0:87:40:a1:a9:
71:5a:bd:b1:b8:76:16:9c:55:18:ca:6c:4c:0c:81:
d2:88:ab:2a:dc:50:a8:d8:a0:b8:f7:b6:f5:ec:18:
c0:42:7b:dc:f8:99:f8:32:b2:b6:ff:6b:4e:13:b7:
c2:75:05:00:07:55:5e:9e:35:db:aa:b3:d8:b4:7e:
d7:42:28:86:c4:0f:59:8b:b2:92:8c:41:03:11:03:
88:fc:b0:30:7f:45:2f:d5:8b:6a:ff:51:4d:b9:32:
ff:f4:2c:eb:2a:1a:6b:0a:b8:bd:fa:03:7d:ef:ce:
2d:8f:18:b1:2a:11:b1:a4:ef:ce:f7:25:7c:fd:6a:
9f:1e:79:a4:ae:97:01:35:bb:e1:4a:36:1f:cf:6e:
d4:18:2a:8f:5e:ae:8f:dc:05:82:21:80:36:f6:ba:
8e:5a:20:4c:61:47:cc:5c:d7:82:c6:2e:28:91:49:
82:13:82:3e:63:75:96:0b:3a:90:47:9b:61:7b:49:
71:a9:07:35:9f:fa:ef:58:e9:9c:25:95:55:7b:a3:
ad:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:0F:51:15:4E:E4:C5:2C:0A:0A:62:49:E0:7B:3A:39:08:00:F8:71
X509v3 Authority Key Identifier:
keyid:F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/8A5-TIBTz_oGjrc-lYiS3YvmGow.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/F2AF92160D9511ED8F09C27DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.116.0/22
Signature Algorithm: sha256WithRSAEncryption
d7:3c:03:e2:5f:30:af:ee:57:f4:86:6a:b0:50:e1:77:2d:e6:
ee:8a:2b:ab:af:5a:42:49:ff:5a:cc:a2:18:77:3f:6c:92:8c:
2a:10:11:25:69:f5:2e:8a:a5:0d:dd:c6:25:eb:53:67:e4:04:
a9:c7:ca:93:30:c1:fe:29:6f:87:9a:dc:0c:14:b2:e9:25:f0:
02:d0:ae:fb:b9:3f:62:d7:b3:22:84:18:8a:f0:4b:54:15:9a:
1b:24:df:2f:e1:87:77:b6:4a:b7:d4:a3:de:2b:37:0c:4d:1d:
f6:f9:f2:fb:7f:86:ac:15:85:81:fe:9b:d9:c3:ca:52:c3:d5:
70:86:ce:a6:35:3e:8d:92:ba:61:a7:e3:a1:b2:17:40:ee:a1:
38:6a:94:21:5e:b0:11:f1:d5:8d:ee:2f:61:12:e1:5f:eb:79:
ed:79:bf:67:05:59:4d:f1:9d:6e:2c:95:92:f6:8c:8f:09:86:
e2:05:59:0b:c5:b9:f6:48:c0:95:49:7a:7f:2b:54:0b:96:65:
80:6b:5b:21:2d:0a:31:52:80:c6:a8:e1:e3:d0:d3:9c:c6:b4:
f6:c8:5e:3a:cf:1b:59:ba:45:8a:3e:53:e2:11:50:7f:2d:6e:
24:3b:20:87:7e:81:05:55:05:f3:ac:0f:4b:0b:27:f4:c4:92:
2c:04:85:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:52 2024 by rpki-client on console-fra.rpki-client.org