Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D030/2E250032033711E9ACB9DB1FC4F9AE02/13F456E8033911E9A4439726C4F9AE02.roa
File: 13F456E8033911E9A4439726C4F9AE02.roa (raw, json)
Hash identifier: KIfEz0tKYdLdrhfkoYhQHzKKLJqUm91t/xH65yhwOQ4=
Subject key identifier: 4B:3B:C2:E7:4C:B4:93:69:AC:D5:5D:6C:C9:65:7E:F6:33:BE:81:01
Certificate issuer: /CN=A912D030/serialNumber=9C7F43D9D8089642BA312AF7A22AE551E76005D0
Certificate serial: 0DCF
Authority key identifier: 9C:7F:43:D9:D8:08:96:42:BA:31:2A:F7:A2:2A:E5:51:E7:60:05:D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nH9D2dgIlkK6MSr3oirlUedgBdA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D030/2E250032033711E9ACB9DB1FC4F9AE02/13F456E8033911E9A4439726C4F9AE02.roa
Signing time: Tue 01 Mar 2022 07:05:14 +0000
ROA not before: Tue 01 Mar 2022 07:05:14 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 14618
IP address blocks: 103.126.232.0/24 maxlen: 24
103.126.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3535 (0xdcf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D030/serialNumber=9C7F43D9D8089642BA312AF7A22AE551E76005D0
Validity
Not Before: Mar 1 07:05:14 2022 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=621dc5aa-10d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:59:cc:02:f6:3d:6d:cb:6b:ae:a8:ea:4a:b7:
70:a0:7e:6f:21:c1:c0:ac:71:8d:d9:a5:ec:69:26:
6b:2e:c4:b6:e5:c5:7b:ab:9c:ea:95:11:04:e1:f1:
e1:27:3e:27:5e:0e:bd:37:dd:d7:35:73:8d:2d:29:
90:40:c4:d6:d0:8c:d7:bd:a0:7d:47:1b:a8:58:b2:
ed:4c:f4:e9:eb:84:df:e0:aa:d0:cc:4d:74:4a:f0:
48:38:e9:88:a8:d7:e9:bb:54:d4:c4:09:c8:2d:f7:
61:ac:a2:ad:ca:70:3e:8a:5d:33:d1:15:70:d6:40:
c7:f3:f0:9d:1a:36:88:d1:00:81:40:0a:2d:e5:a0:
74:73:05:f9:0a:1c:e9:8a:74:3a:0e:73:10:72:76:
3a:50:e8:ff:cf:f1:60:6f:31:ed:95:39:f8:c8:f7:
e4:bd:a0:ab:1c:77:24:20:22:cd:47:55:a2:ce:4f:
5d:77:6a:46:4e:8d:f5:7e:13:6d:00:3d:90:e2:20:
c2:5b:8d:64:93:8f:31:8e:fe:f9:55:4e:20:83:aa:
65:f7:d3:d8:ae:79:f4:37:3b:53:7d:92:40:a6:db:
ac:1d:43:f3:e2:3c:32:2c:dc:0a:3e:eb:87:96:61:
27:13:ff:20:e6:5a:78:78:2e:e1:fe:47:98:f6:eb:
de:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:3B:C2:E7:4C:B4:93:69:AC:D5:5D:6C:C9:65:7E:F6:33:BE:81:01
X509v3 Authority Key Identifier:
keyid:9C:7F:43:D9:D8:08:96:42:BA:31:2A:F7:A2:2A:E5:51:E7:60:05:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D030/2E250032033711E9ACB9DB1FC4F9AE02/nH9D2dgIlkK6MSr3oirlUedgBdA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nH9D2dgIlkK6MSr3oirlUedgBdA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D030/2E250032033711E9ACB9DB1FC4F9AE02/13F456E8033911E9A4439726C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.126.232.0/24
103.126.234.0/24
Signature Algorithm: sha256WithRSAEncryption
22:2d:1e:38:4b:82:47:95:22:e5:0e:fb:3c:96:36:15:db:b9:
73:5f:78:7e:d1:bb:22:c0:23:42:1a:90:7b:a2:ca:1f:a2:66:
dc:20:ff:54:b2:10:19:94:26:b0:c5:9b:12:98:0d:ac:5e:ed:
73:b7:d4:a7:33:18:c4:e5:79:bd:a0:ca:53:8a:67:cf:a7:fb:
1a:eb:00:72:38:c0:c5:f6:79:eb:d5:47:ff:79:00:a9:2c:d9:
06:c8:5f:39:4b:c2:0c:60:7e:dd:6f:55:a5:1f:f0:99:29:9e:
4f:16:dc:73:bf:98:bf:d6:07:36:ba:46:c7:db:6c:03:f3:24:
f1:fe:e3:03:25:26:e8:7e:93:a1:ef:9d:a7:dc:3f:a8:6a:f9:
7d:8c:f7:f1:18:57:42:95:1d:6b:18:bc:24:9a:ec:b9:1c:5d:
fd:12:79:cb:00:5c:f6:a7:6f:6f:94:8b:91:4b:ea:52:07:bd:
e8:a6:25:a7:01:c9:45:64:ce:14:82:0a:ba:25:4b:d5:51:5a:
16:59:d0:fa:8b:cd:5f:07:e3:b6:06:6c:d1:fb:9a:e2:52:a7:
e5:60:66:3d:54:c3:93:52:a8:8c:1f:e6:5a:a8:6c:df:ba:ec:
1f:7f:c9:74:59:07:eb:c3:9e:41:92:56:65:d1:7e:57:9a:e6:
7a:e7:91:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:35 2023 by rpki-client on console-ams.rpki-client.org