Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912EC9C/8CEB3596846C11ECB2A7D75AC4F9AE02/48FE8A6C560411EDA723F533C4F9AE02.roa
File: 48FE8A6C560411EDA723F533C4F9AE02.roa (raw, json)
Hash identifier: GwS6eZF+Ebp7IPzGaElueY1f4wkEAgeQDh9TEzE0fdI=
Subject key identifier: 9A:55:F8:B2:0D:47:A2:CA:66:F5:ED:03:EB:64:3A:0E:5E:24:B0:F2
Certificate issuer: /CN=A912EC9C/serialNumber=026AD86ACB362DAE6C6221242E768DA643513A9D
Certificate serial: 01F7
Authority key identifier: 02:6A:D8:6A:CB:36:2D:AE:6C:62:21:24:2E:76:8D:A6:43:51:3A:9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AmrYass2La5sYiEkLnaNpkNROp0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912EC9C/8CEB3596846C11ECB2A7D75AC4F9AE02/48FE8A6C560411EDA723F533C4F9AE02.roa
Signing time: Thu 27 Oct 2022 14:33:12 +0000
ROA not before: Thu 27 Oct 2022 14:33:12 +0000
ROA not after: Fri 31 Mar 2023 00:00:00 +0000
asID: 210542
IP address blocks: 103.178.54.0/24 maxlen: 24
103.178.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 503 (0x1f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912EC9C/serialNumber=026AD86ACB362DAE6C6221242E768DA643513A9D
Validity
Not Before: Oct 27 14:33:12 2022 GMT
Not After : Mar 31 00:00:00 2023 GMT
Subject: CN=635a96a8-e69e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:23:95:0b:82:92:e3:39:46:f6:06:d1:c0:df:
9a:81:fa:15:69:3e:21:47:6b:a9:10:39:fe:01:a8:
15:fd:97:6d:07:a4:b2:87:aa:f4:49:eb:86:32:42:
24:02:6c:60:13:60:e5:13:03:c0:eb:56:a0:be:1a:
06:9c:9a:b7:0e:b8:37:06:18:9a:8e:30:fb:08:7a:
7b:73:be:57:aa:a3:62:77:97:d2:6d:63:73:e7:f3:
27:6f:1b:62:16:56:b3:a3:5e:20:39:c9:c4:31:1c:
c0:e6:3d:d9:5f:49:a1:66:cd:08:28:e6:b5:c1:c3:
62:c7:2e:05:ee:58:4e:a7:e9:2a:36:ad:6c:a5:d0:
3c:20:a0:e5:b1:83:41:72:c1:e4:76:0c:a2:8a:0e:
86:3c:34:c3:45:7a:e9:40:6f:8c:0a:ce:c0:95:90:
ad:6f:f6:e7:46:c5:b1:d6:05:5a:be:ff:57:95:fe:
a0:ad:c5:50:4f:80:83:8d:36:02:97:98:bf:5d:21:
51:aa:99:16:45:e8:76:1d:72:16:f1:af:01:4d:7d:
56:e6:a1:3d:f3:7f:e8:d5:44:b1:04:16:2b:94:84:
a8:c5:e6:12:b4:6d:6a:95:b3:d6:21:46:e1:dd:de:
52:96:f1:f3:e0:61:20:04:e7:3e:0b:5a:0a:ef:2d:
1c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:55:F8:B2:0D:47:A2:CA:66:F5:ED:03:EB:64:3A:0E:5E:24:B0:F2
X509v3 Authority Key Identifier:
keyid:02:6A:D8:6A:CB:36:2D:AE:6C:62:21:24:2E:76:8D:A6:43:51:3A:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912EC9C/8CEB3596846C11ECB2A7D75AC4F9AE02/AmrYass2La5sYiEkLnaNpkNROp0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AmrYass2La5sYiEkLnaNpkNROp0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EC9C/8CEB3596846C11ECB2A7D75AC4F9AE02/48FE8A6C560411EDA723F533C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.178.54.0/23
Signature Algorithm: sha256WithRSAEncryption
26:af:da:00:63:6b:65:1d:4e:44:e8:cc:16:8a:a5:fd:8c:50:
70:32:8e:03:ab:75:91:e1:2c:58:79:36:27:e3:cc:ef:8b:92:
d1:c8:17:f3:09:dd:ff:13:5d:8e:94:ff:31:4c:9e:2e:74:0f:
ad:43:96:2d:e2:80:bc:be:cf:a2:80:de:e7:c0:86:4b:de:c3:
6f:73:5e:02:67:8e:97:1a:f9:85:42:70:ad:8d:e2:61:71:8c:
cc:47:53:29:52:15:c6:30:b6:3e:b3:41:aa:57:11:b4:9f:84:
69:2a:94:6c:08:32:86:f5:94:3a:6b:84:bc:51:d4:fb:72:50:
c6:47:6d:40:a3:73:40:fa:d2:48:af:f3:09:2b:7e:70:15:1c:
2f:0c:ec:ed:82:bd:5f:49:ac:00:c1:4e:43:ff:dc:fb:88:a0:
3f:ef:b5:fe:33:99:31:c7:fc:5b:06:18:7a:c9:0a:81:71:5c:
b5:9e:86:e7:0e:31:0b:07:63:24:2c:c6:16:9d:7a:02:8e:fc:
4c:52:9c:e5:9c:e4:be:0a:4d:05:87:37:d8:a0:11:86:bf:f0:
0d:e0:2b:84:7a:96:78:1d:70:8e:c2:25:48:41:1b:56:31:ac:
f6:ef:3b:e5:37:5a:25:51:1b:ee:d1:ca:82:de:81:28:69:3a:
2a:15:27:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:53 2024 by rpki-client on console-ams.rpki-client.org