Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D030/2E250032033711E9ACB9DB1FC4F9AE02/1377798E033911E9A4439726C4F9AE02.roa
File: 1377798E033911E9A4439726C4F9AE02.roa (raw, json)
Hash identifier: ea5t/jSFa4jy0lXeA809Cuy8lFZw5JVwv1h9h+ee7Qo=
Subject key identifier: 9A:00:C0:E2:B4:AE:B4:D4:BD:3E:37:ED:41:D9:E0:C8:3C:E0:97:50
Certificate issuer: /CN=A912D030/serialNumber=9C7F43D9D8089642BA312AF7A22AE551E76005D0
Certificate serial: 0DCE
Authority key identifier: 9C:7F:43:D9:D8:08:96:42:BA:31:2A:F7:A2:2A:E5:51:E7:60:05:D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nH9D2dgIlkK6MSr3oirlUedgBdA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D030/2E250032033711E9ACB9DB1FC4F9AE02/1377798E033911E9A4439726C4F9AE02.roa
Signing time: Tue 01 Mar 2022 07:05:13 +0000
ROA not before: Tue 01 Mar 2022 07:05:13 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 138493
IP address blocks: 103.126.232.0/22 maxlen: 22
103.126.232.0/24 maxlen: 24
103.126.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3534 (0xdce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D030/serialNumber=9C7F43D9D8089642BA312AF7A22AE551E76005D0
Validity
Not Before: Mar 1 07:05:13 2022 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=621dc5a9-ec81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:9a:96:6e:0b:80:88:8e:78:46:30:b4:e3:2a:
ed:bb:0e:28:89:6d:7a:b7:05:d3:a5:b9:2e:39:6f:
dd:98:ed:b5:2c:83:54:8a:ee:95:5d:32:b2:ff:4e:
fa:4a:07:2b:3c:28:18:fe:02:c0:27:95:af:7d:9b:
80:94:eb:72:db:ea:68:0b:29:4c:03:6b:9f:b3:1e:
84:51:23:6f:3a:e6:b9:97:04:9b:39:b4:f9:32:ad:
9a:4a:98:c4:93:1a:5a:94:27:af:1f:36:bc:09:25:
55:a7:da:9e:12:86:7f:93:a4:86:99:97:6c:3b:2f:
c8:af:49:97:c5:1c:5c:8d:d9:6e:8d:87:a0:e2:a3:
31:03:5c:c3:2c:33:a0:bc:6c:5f:e5:57:09:69:ee:
9a:0f:ad:50:f8:d1:f0:02:8f:07:58:7a:c5:f3:45:
e1:38:09:e6:3d:0f:41:7e:99:07:1f:3d:f6:84:88:
d1:f4:2a:97:02:71:2d:e2:79:43:38:28:8f:0a:2f:
ff:7d:e2:1a:53:b2:0e:ec:03:bc:f9:0f:b3:37:aa:
b9:ef:5f:5b:f2:a9:51:1e:68:8d:19:07:f7:fd:70:
75:80:ea:ef:71:0c:74:92:b1:ff:4d:fc:08:e9:c2:
b9:bf:83:28:9d:88:b4:74:8e:32:2f:c9:35:2f:e0:
1c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:00:C0:E2:B4:AE:B4:D4:BD:3E:37:ED:41:D9:E0:C8:3C:E0:97:50
X509v3 Authority Key Identifier:
keyid:9C:7F:43:D9:D8:08:96:42:BA:31:2A:F7:A2:2A:E5:51:E7:60:05:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D030/2E250032033711E9ACB9DB1FC4F9AE02/nH9D2dgIlkK6MSr3oirlUedgBdA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nH9D2dgIlkK6MSr3oirlUedgBdA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D030/2E250032033711E9ACB9DB1FC4F9AE02/1377798E033911E9A4439726C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.126.232.0/22
Signature Algorithm: sha256WithRSAEncryption
74:4f:e5:63:29:49:2d:d9:28:f4:05:8c:dc:dc:9f:c7:73:85:
b4:b5:52:7a:c0:f3:b6:95:ee:6b:59:d2:cb:1d:52:c6:02:86:
e0:4d:ff:fa:f2:24:eb:81:3e:f4:46:86:27:54:5e:da:c7:3e:
cb:61:b3:0b:89:49:c8:5d:1c:e8:30:57:be:e9:93:f6:53:e4:
c2:bd:f2:34:41:62:56:b3:a7:e6:8d:cc:9a:b7:28:d3:a8:90:
82:07:b7:aa:ab:7a:e0:01:f2:eb:90:93:65:95:59:c3:9c:a7:
c0:df:c9:92:24:3b:82:c0:4b:b0:c9:57:ea:99:00:e9:99:a4:
37:cc:d3:1b:db:07:73:05:54:59:a3:78:3e:1b:be:fd:1a:4e:
18:98:28:bb:56:2d:8a:dc:5b:ab:fd:70:a9:db:bb:30:07:f5:
59:c3:3e:c8:bd:f4:96:e1:e7:9f:3b:d3:af:32:df:62:38:b0:
84:72:d8:33:53:a5:b5:06:1f:1f:fe:24:18:50:66:fd:20:a3:
0f:9a:ce:02:c8:66:fe:4a:e6:48:58:8c:e7:55:43:35:32:07:
a4:b9:ec:c7:a2:d1:5c:2d:fd:71:e9:99:67:4f:e2:d4:2f:71:
d0:ac:51:e3:82:1b:bc:a6:69:40:ef:28:72:5e:1d:ab:9b:88:
5a:c3:c0:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:37 2023 by rpki-client on console-fra.rpki-client.org