Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911662A/B0937498002511ECBBDA2D12C4F9AE02/C7F12536010F11ED96DE1719C4F9AE02.roa
File: C7F12536010F11ED96DE1719C4F9AE02.roa (raw, json)
Hash identifier: 46TxPpoecWPUcNxvJ7eLIu3eqTaScRtaJk5RTbfy29E=
Subject key identifier: AA:E7:8E:88:5E:FF:23:A2:6F:F8:18:35:B0:4E:F2:DB:1A:B1:4A:E1
Certificate issuer: /CN=A911662A/serialNumber=D3E475DE9BA7B7372BD1936A906E86697C7EA33B
Certificate serial: 02AD
Authority key identifier: D3:E4:75:DE:9B:A7:B7:37:2B:D1:93:6A:90:6E:86:69:7C:7E:A3:3B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0-R13puntzcr0ZNqkG6GaXx-ozs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911662A/B0937498002511ECBBDA2D12C4F9AE02/C7F12536010F11ED96DE1719C4F9AE02.roa
Signing time: Mon 11 Jul 2022 11:51:21 +0000
ROA not before: Mon 11 Jul 2022 11:51:21 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 136600
IP address blocks: 103.118.40.0/24 maxlen: 24
103.118.41.0/24 maxlen: 24
103.118.42.0/24 maxlen: 24
2403:27c0::/32 maxlen: 32
2403:27c0:1000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 685 (0x2ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911662A/serialNumber=D3E475DE9BA7B7372BD1936A906E86697C7EA33B
Validity
Not Before: Jul 11 11:51:21 2022 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=62cc0eb9-98f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:df:8e:35:95:51:06:62:44:65:67:f8:9e:f8:
11:b0:eb:52:7d:8f:f9:5d:33:b1:f2:0e:8f:3e:8c:
a3:76:08:35:25:6e:eb:10:6b:bf:b6:8a:e6:e1:87:
a9:b4:2e:df:7d:1d:0a:5b:16:7e:e7:1e:10:a2:99:
b5:b1:fc:ca:96:8c:a5:5a:d0:61:b2:28:bf:51:22:
c2:de:da:6f:6c:b5:3b:ad:7d:bd:2f:af:ed:d6:2e:
c0:00:18:d1:44:e2:9f:a0:fa:4d:e5:de:f5:7b:ee:
33:83:a1:66:2c:51:c7:af:ee:67:29:68:dd:5f:7f:
21:57:db:76:e5:d6:18:7c:6f:2c:82:fb:4b:34:b0:
02:1e:ba:56:01:75:21:3b:08:68:f7:8a:d1:95:87:
a1:92:17:15:e3:d2:c5:e2:37:6f:58:49:2a:e7:30:
91:7b:dc:19:ac:74:2a:47:11:90:fe:cc:bc:a6:34:
71:90:1d:7f:d0:bd:2e:ad:7f:a0:62:ff:c5:ca:de:
29:69:9c:4a:f2:5e:ca:c7:aa:30:2c:13:c8:09:ee:
ad:c1:17:2a:97:97:a9:7e:27:d5:e4:93:18:4f:97:
7c:a8:b5:3e:01:d5:0b:ce:64:92:02:32:52:01:ee:
57:f5:44:8d:46:f0:32:5e:d1:05:dc:c2:24:08:bc:
5f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E7:8E:88:5E:FF:23:A2:6F:F8:18:35:B0:4E:F2:DB:1A:B1:4A:E1
X509v3 Authority Key Identifier:
keyid:D3:E4:75:DE:9B:A7:B7:37:2B:D1:93:6A:90:6E:86:69:7C:7E:A3:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911662A/B0937498002511ECBBDA2D12C4F9AE02/0-R13puntzcr0ZNqkG6GaXx-ozs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0-R13puntzcr0ZNqkG6GaXx-ozs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911662A/B0937498002511ECBBDA2D12C4F9AE02/C7F12536010F11ED96DE1719C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.118.40.0-103.118.42.255
IPv6:
2403:27c0::/32
Signature Algorithm: sha256WithRSAEncryption
42:3b:2b:81:77:16:b5:85:7b:d5:04:ea:2b:83:d1:72:a2:a0:
41:66:fe:47:c4:de:5b:6c:4b:14:19:04:41:0d:10:c0:fc:e7:
db:59:e2:e2:7f:46:3d:dd:6e:d3:7b:cd:d8:48:1c:d6:dc:41:
a9:cf:c5:a0:25:69:80:69:8e:03:73:6d:a4:52:1f:3e:a5:5f:
7c:ae:55:44:d3:8a:57:96:87:75:90:2a:75:5b:4c:ba:83:d2:
61:ec:ea:77:11:83:3f:47:c1:d8:96:a2:e6:20:5c:a7:60:4e:
31:fc:5a:fb:bf:44:96:0b:25:88:cb:3a:b8:79:86:6c:6b:ac:
b8:3a:96:8c:f9:1f:ed:3e:70:f8:0c:ab:5c:c5:07:33:e6:ea:
a0:c9:58:25:b2:df:6c:6b:7f:c0:d3:ca:a7:e0:79:55:72:0d:
5e:1e:aa:cc:b5:04:9f:ef:03:2a:0c:34:95:9f:b9:ca:eb:a5:
a3:dd:1d:e7:5c:63:eb:ec:88:b5:2c:06:5b:7c:90:69:2f:43:
1b:72:08:86:91:81:47:91:dc:c6:46:19:e0:80:0b:a3:ec:b0:
80:7e:67:71:c8:7c:13:4d:11:d1:b2:d7:f1:56:58:b2:91:2a:
46:d4:a4:cc:85:6c:68:a4:00:05:0a:23:6f:fd:ba:43:d8:47:
93:f5:96:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:55 2024 by rpki-client on console-fra.rpki-client.org