Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119301/339C463AD97F11EBAB4F9B4FC4F9AE02/641BACEED98211EBAA210852C4F9AE02.roa
File: 641BACEED98211EBAA210852C4F9AE02.roa (raw, json)
Hash identifier: +8UNOUkeG10BRKU+wWErFq0tjbqjjtehkOog2rwjphE=
Subject key identifier: 7B:A1:99:07:AA:B9:16:DD:D6:30:43:33:22:72:9A:DA:63:BE:C9:6F
Certificate issuer: /CN=A9119301/serialNumber=457CE35A005F3AA1D8A3FE1B0A58484F4A116491
Certificate serial: 010B
Authority key identifier: 45:7C:E3:5A:00:5F:3A:A1:D8:A3:FE:1B:0A:58:48:4F:4A:11:64:91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RXzjWgBfOqHYo_4bClhIT0oRZJE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119301/339C463AD97F11EBAB4F9B4FC4F9AE02/641BACEED98211EBAA210852C4F9AE02.roa
Signing time: Thu 11 Nov 2021 15:31:27 +0000
ROA not before: Thu 11 Nov 2021 15:31:27 +0000
ROA not after: Fri 30 Dec 2022 00:00:00 +0000
asID: 131111
IP address blocks: 103.76.12.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 267 (0x10b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119301/serialNumber=457CE35A005F3AA1D8A3FE1B0A58484F4A116491
Validity
Not Before: Nov 11 15:31:27 2021 GMT
Not After : Dec 30 00:00:00 2022 GMT
Subject: CN=618d374f-61ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f9:41:ee:50:3b:1e:f6:e0:86:22:e3:1f:b6:
98:a4:82:2c:27:e2:c0:e5:22:ea:69:c2:7d:46:db:
21:80:f8:7a:3b:8c:f1:bd:85:3a:40:c1:b9:8e:23:
4c:78:8f:45:26:b1:7f:af:c7:57:7e:12:16:ad:f5:
e5:3a:ff:09:9a:02:b9:09:59:5c:9e:46:82:7c:1a:
ea:34:c4:af:a2:f9:c3:b2:ef:71:b1:89:17:a3:ae:
6e:78:6a:60:df:f5:4d:be:2c:42:ea:9b:15:e9:b4:
e1:44:43:27:4d:71:f5:09:8b:31:03:77:7d:5d:f2:
3e:b3:9c:e3:ea:09:43:01:25:4e:91:4d:7d:44:bc:
05:fa:03:42:1f:46:4b:22:69:b2:3c:b5:a3:55:6e:
2b:6d:97:bd:3e:d0:64:60:6b:61:90:47:24:c5:ad:
a3:9f:bc:04:8f:89:d3:b7:be:22:9b:84:0b:c2:8b:
43:d7:48:e3:a7:d9:ac:59:4d:38:de:bc:11:04:ee:
7e:65:62:da:1c:b9:56:54:29:c9:c7:df:07:ea:1b:
f4:59:78:55:2f:42:e8:15:db:23:29:7d:9b:4a:c9:
d0:c1:4a:05:93:6b:d6:56:69:0d:92:77:9c:e7:25:
fa:66:89:f2:07:7f:03:68:b6:7c:00:a6:ff:a0:0c:
49:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A1:99:07:AA:B9:16:DD:D6:30:43:33:22:72:9A:DA:63:BE:C9:6F
X509v3 Authority Key Identifier:
keyid:45:7C:E3:5A:00:5F:3A:A1:D8:A3:FE:1B:0A:58:48:4F:4A:11:64:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119301/339C463AD97F11EBAB4F9B4FC4F9AE02/RXzjWgBfOqHYo_4bClhIT0oRZJE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RXzjWgBfOqHYo_4bClhIT0oRZJE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119301/339C463AD97F11EBAB4F9B4FC4F9AE02/641BACEED98211EBAA210852C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.76.12.0/22
Signature Algorithm: sha256WithRSAEncryption
05:bf:fb:ca:7a:79:40:f5:81:39:57:2f:30:75:70:d5:5a:8b:
57:c8:27:51:79:ff:4d:39:ed:43:2c:07:37:a7:1b:8d:1a:b5:
bf:5b:e8:5f:65:ef:cd:01:31:d3:fe:bc:dd:aa:ea:1e:ee:6e:
13:ff:a0:cc:47:31:17:17:6b:d5:74:5a:c0:76:fd:49:ca:89:
bf:94:90:b2:d0:54:4b:14:4c:67:b5:cf:3e:67:9e:34:05:cf:
2f:cd:d5:ff:c1:a6:7b:c8:d7:2d:a6:59:35:7c:34:ed:ad:91:
9e:cb:e8:80:92:5d:1a:66:fd:98:04:f5:b5:80:6e:e7:19:d5:
0d:1b:de:28:3e:fd:17:f0:97:56:7b:5a:2e:6d:8d:b9:4c:6e:
94:09:9d:ca:85:99:7b:fd:10:37:21:e6:45:f0:45:5b:c9:e6:
f9:f0:21:d0:c9:e5:09:de:f5:a4:e8:ba:35:fe:92:d4:4b:c5:
8f:32:b7:ce:de:28:3b:74:c2:68:3a:59:e9:d2:16:0a:ea:18:
f3:48:38:fc:ae:a7:ea:11:70:dc:9d:0c:54:ee:9c:4b:b5:bf:
f2:11:f3:e9:1c:1d:1e:8c:53:a0:86:3b:0c:19:36:1d:7e:ca:
1d:23:9f:a6:84:d6:65:ff:82:a5:6f:70:89:7d:b0:87:75:80:
7f:c9:a8:a3
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTkzMDExMTAvBgNVBAUTKDQ1N0NFMzVBMDA1RjNBQTFEOEEzRkUxQjBBNTg0ODRG
NEExMTY0OTEwHhcNMjExMTExMTUzMTI3WhcNMjIxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02MThkMzc0Zi02MWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyflB7lA7HvbghiLjH7aYpIIsJ+LA5SLqacJ9RtshgPh6O4zxvYU6QMG5jiNM
eI9FJrF/r8dXfhIWrfXlOv8JmgK5CVlcnkaCfBrqNMSvovnDsu9xsYkXo65ueGpg
3/VNvixC6psV6bThREMnTXH1CYsxA3d9XfI+s5zj6glDASVOkU19RLwF+gNCH0ZL
ImmyPLWjVW4rbZe9PtBkYGthkEckxa2jn7wEj4nTt74im4QLwotD10jjp9msWU04
3rwRBO5+ZWLaHLlWVCnJx98H6hv0WXhVL0LoFdsjKX2bSsnQwUoFk2vWVmkNknec
5yX6ZonyB38DaLZ8AKb/oAxJWQIDAQABo4IClTCCApEwHQYDVR0OBBYEFHuhmQeq
uRbd1jBDMyJymtpjvslvMB8GA1UdIwQYMBaAFEV841oAXzqh2KP+GwpYSE9KEWSR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTMwMS8zMzlDNDYzQUQ5
N0YxMUVCQUI0RjlCNEZDNEY5QUUwMi9SWHpqV2dCZk9xSFlvXzRiQ2xoSVQwb1Ja
SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JYempXZ0JmT3FIWW9fNGJDbGhJVDBvUlpKRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTkzMDEvMzM5QzQ2M0FEOTdGMTFFQkFCNEY5QjRGQzRGOUFFMDIvNjQxQkFDRUVE
OTgyMTFFQkFBMjEwODUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJnTAwwDQYJKoZIhvcNAQELBQADggEBAAW/+8p6eUD1gTlX
LzB1cNVai1fIJ1F5/0057UMsBzenG40atb9b6F9l780BMdP+vN2q6h7ubhP/oMxH
MRcXa9V0WsB2/UnKib+UkLLQVEsUTGe1zz5nnjQFzy/N1f/BpnvI1y2mWTV8NO2t
kZ7L6ICSXRpm/ZgE9bWAbucZ1Q0b3ig+/Rfwl1Z7Wi5tjblMbpQJncqFmXv9EDch
5kXwRVvJ5vnwIdDJ5Qne9aToujX+ktRLxY8yt87eKDt0wmg6WenSFgrqGPNIOPyu
p+oRcNydDFTunEu1v/IR8+kcHR6MU6CGOwwZNh1+yh0jn6aE1mX/gqVvcIl9sId1
gH/JqKM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:46 2024 by rpki-client on console-ams.rpki-client.org