Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/8BCB105015EA11EC86834E2FC4F9AE02.roa
File: 8BCB105015EA11EC86834E2FC4F9AE02.roa (raw, json)
Hash identifier: OwotHwrsvHfL9c2xwdii3HVlS9hQiSq8fqoBsWtp67U=
Subject key identifier: AC:4D:30:B6:73:BA:3A:2A:85:32:26:DC:C3:2C:88:81:58:20:81:B4
Certificate issuer: /CN=A91F8119/serialNumber=513DD308CD7514227AF51D805E5540A6A9F5D339
Certificate serial: 0F50
Authority key identifier: 51:3D:D3:08:CD:75:14:22:7A:F5:1D:80:5E:55:40:A6:A9:F5:D3:39
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UT3TCM11FCJ69R2AXlVApqn10zk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/8BCB105015EA11EC86834E2FC4F9AE02.roa
Signing time: Thu 22 Aug 2024 15:52:38 +0000
ROA not before: Thu 22 Aug 2024 15:52:38 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 56099
IP address blocks: 146.88.80.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3920 (0xf50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8119/serialNumber=513DD308CD7514227AF51D805E5540A6A9F5D339
Validity
Not Before: Aug 22 15:52:38 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66c75ec5-0655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:54:f1:a7:7f:e3:34:ac:02:7c:bb:4a:e5:f8:
11:84:55:82:a7:f7:a0:c0:d7:a6:a4:62:b3:3b:b5:
97:59:59:37:5b:61:f5:26:f9:9f:4f:25:a9:97:1a:
31:8e:b6:2b:92:3f:3c:8b:27:0c:87:9f:3b:e6:8a:
5f:2d:e7:0e:85:03:ac:45:47:eb:57:30:84:df:3a:
bc:f2:f9:ae:58:bd:f6:8b:a0:51:a5:3f:19:27:71:
3b:30:04:44:b1:e2:29:52:f7:0a:2c:7c:e8:4c:0e:
25:53:36:93:4d:db:b0:59:33:11:b3:9d:ca:f6:75:
fb:d0:c4:05:df:1a:1c:21:65:4e:8a:a6:6c:3c:b4:
27:ff:37:6c:bd:3c:98:11:a0:8a:91:e6:80:ba:55:
db:0d:87:82:57:08:46:68:cd:b7:e4:3a:d0:3b:cd:
71:e1:9b:ef:d0:22:38:3c:aa:cc:f3:ad:1a:f9:8a:
54:b3:c3:83:9c:b6:9c:44:80:e9:62:9b:24:71:45:
64:ab:24:b9:30:a5:f0:7e:b4:78:e8:5c:2b:be:8e:
9c:61:ba:23:3e:74:20:7f:4e:2f:e7:d9:e1:81:ae:
5c:d9:bd:5e:f9:55:fa:fa:6a:f3:b8:aa:f9:b4:ea:
7c:21:8d:47:df:51:28:84:f8:2a:b0:1c:54:96:a7:
c7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:4D:30:B6:73:BA:3A:2A:85:32:26:DC:C3:2C:88:81:58:20:81:B4
X509v3 Authority Key Identifier:
keyid:51:3D:D3:08:CD:75:14:22:7A:F5:1D:80:5E:55:40:A6:A9:F5:D3:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UT3TCM11FCJ69R2AXlVApqn10zk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/8BCB105015EA11EC86834E2FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
146.88.80.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:d4:70:9c:a5:f0:ef:a9:67:96:c4:01:ac:d0:ad:01:da:50:
73:7f:27:b9:5a:ba:70:0b:fa:b4:20:2f:b2:d4:9e:37:06:1c:
43:54:e2:ba:cd:b9:1a:e2:e1:54:71:8b:4e:f0:e1:c3:4c:bb:
88:55:80:80:40:7c:32:72:16:59:9f:40:64:38:0e:05:4a:3e:
38:3b:75:de:02:c3:6f:15:c6:b9:f4:97:48:8e:c9:0b:89:15:
84:cf:99:11:f3:8b:b5:1f:33:6f:34:07:ba:dc:18:f8:69:31:
ed:6e:c0:cb:dc:04:3e:1d:58:e1:80:6d:df:39:98:da:a2:de:
57:8e:ac:ad:1e:77:61:4a:f2:4e:eb:fa:8a:40:45:49:dc:20:
de:9d:34:ba:0c:e2:4d:e8:0f:76:f0:e2:8e:98:4d:0b:39:f5:
2a:05:62:37:59:ad:8c:7c:ee:20:aa:fd:8f:70:7c:e5:68:34:
7f:86:af:98:08:2d:9d:c1:2a:db:c0:5a:85:7a:fc:ad:8b:31:
79:3d:50:9b:ed:11:be:a9:92:11:21:6e:81:93:53:4e:51:e3:
b8:57:ce:76:17:01:b0:c3:93:32:5b:9b:e6:a0:13:ef:2a:ca:
bd:fb:d3:81:4a:d5:0e:86:ac:b5:2c:2d:99:ee:dd:34:a3:76:
3d:88:7d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 04:35:36 2025 by rpki-client