Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912EC9C/8CEB3596846C11ECB2A7D75AC4F9AE02/A8F0A5FC846F11EC90475D5EC4F9AE02.roa
File: A8F0A5FC846F11EC90475D5EC4F9AE02.roa (raw, json)
Hash identifier: 5xjOzqE27sZj26jII/eJ9I+2U3HuCmytmgrMSdbIgmU=
Subject key identifier: 78:32:95:39:6F:1B:A3:63:38:13:EE:C0:79:59:58:ED:81:B7:26:9C
Certificate issuer: /CN=A912EC9C/serialNumber=026AD86ACB362DAE6C6221242E768DA643513A9D
Certificate serial: 02
Authority key identifier: 02:6A:D8:6A:CB:36:2D:AE:6C:62:21:24:2E:76:8D:A6:43:51:3A:9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AmrYass2La5sYiEkLnaNpkNROp0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912EC9C/8CEB3596846C11ECB2A7D75AC4F9AE02/A8F0A5FC846F11EC90475D5EC4F9AE02.roa
Signing time: Wed 02 Feb 2022 21:32:45 +0000
ROA not before: Wed 02 Feb 2022 21:32:45 +0000
ROA not after: Fri 31 Mar 2023 00:00:00 +0000
asID: 149299
IP address blocks: 103.178.54.0/24 maxlen: 24
103.178.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912EC9C/serialNumber=026AD86ACB362DAE6C6221242E768DA643513A9D
Validity
Not Before: Feb 2 21:32:45 2022 GMT
Not After : Mar 31 00:00:00 2023 GMT
Subject: CN=61faf87d-faf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a4:82:91:50:0e:15:64:ab:bb:ad:1e:75:b4:
02:b9:53:47:c6:d4:36:e4:fc:0b:60:28:c5:a8:fb:
3f:ef:1b:5a:95:16:b4:26:33:40:8d:87:8f:ed:81:
60:c3:55:b3:96:fa:81:d2:c7:1f:48:2e:9c:98:6f:
69:5f:fd:3e:4d:33:be:0e:44:52:31:7e:cb:fb:e7:
60:f6:27:32:0a:3b:11:b2:7a:86:78:21:68:b5:c0:
35:81:cf:91:0c:ff:f1:8a:40:3c:6f:7f:54:fe:bf:
8a:ea:0f:4b:6a:dc:1e:d8:5e:96:fa:01:24:f5:de:
e4:be:bf:56:e6:2a:08:5f:c4:75:3d:f7:89:01:3a:
c5:31:99:0b:f8:da:63:5e:28:14:94:28:9c:a0:ed:
e1:6e:84:9b:83:e1:b4:78:31:ae:ed:75:94:24:e1:
18:63:3d:e7:2b:9b:85:73:35:af:81:72:73:b0:2c:
87:1f:8e:c9:19:8c:60:1c:38:c6:54:18:73:e1:04:
fe:6f:f0:f2:36:d2:04:61:81:c8:8c:9b:da:02:16:
fc:f2:8e:94:44:77:55:25:33:33:f7:c6:85:3f:62:
f9:1d:8b:ea:09:ee:ef:30:ab:fd:a4:00:2a:ff:7c:
48:44:81:52:62:b5:9b:8c:da:21:7c:98:c3:bd:3d:
45:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:32:95:39:6F:1B:A3:63:38:13:EE:C0:79:59:58:ED:81:B7:26:9C
X509v3 Authority Key Identifier:
keyid:02:6A:D8:6A:CB:36:2D:AE:6C:62:21:24:2E:76:8D:A6:43:51:3A:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912EC9C/8CEB3596846C11ECB2A7D75AC4F9AE02/AmrYass2La5sYiEkLnaNpkNROp0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AmrYass2La5sYiEkLnaNpkNROp0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EC9C/8CEB3596846C11ECB2A7D75AC4F9AE02/A8F0A5FC846F11EC90475D5EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.178.54.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:3f:ed:8a:7e:e7:7e:07:41:e0:b0:4c:7c:e4:60:c9:81:81:
43:c3:69:48:d1:e8:ea:4f:5f:03:4d:b9:70:63:1b:ff:7d:aa:
2d:2a:91:65:8f:17:0b:ed:b9:6e:24:8c:5e:76:11:4f:7f:8f:
aa:4c:c1:15:e8:a9:bf:77:76:f7:61:20:15:cc:98:c9:2d:c3:
18:77:26:71:43:81:ca:db:ea:32:1f:e3:ce:69:32:a8:2f:6c:
7a:83:4b:04:5e:05:a0:3c:29:28:db:63:96:01:6c:1d:28:1c:
30:bf:7d:ff:04:0b:29:2a:e1:85:92:cb:c4:08:43:be:18:6a:
28:bf:5d:ba:b6:56:9b:ab:c8:37:50:74:b4:c5:55:49:46:fb:
b0:08:47:2e:f7:a2:87:1c:80:06:b3:07:0c:9f:b3:da:c3:b4:
a5:d5:d8:e4:36:cc:36:f1:f9:45:cd:58:ca:1f:fe:3f:22:d7:
51:ba:5e:f5:25:dd:ab:5f:47:90:71:76:9e:67:af:94:75:bf:
65:77:f4:9a:31:91:35:43:9a:2e:3a:1a:c2:5e:bd:ad:46:16:
8f:a8:35:60:13:4d:4e:62:c2:27:34:83:0f:01:b3:6d:f3:5e:
80:3d:9f:d6:83:2d:38:8a:60:43:c2:16:b4:34:33:7b:65:d1:
ba:63:50:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:38 2023 by rpki-client on console-fra.rpki-client.org