Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9133B2F/45E7BC7CC1A511EA8C01B63DC4F9AE02/3DBF0B50295A11EB9AA2CA74C4F9AE02.roa
File: 3DBF0B50295A11EB9AA2CA74C4F9AE02.roa (raw, json)
Hash identifier: 3pyCBbw4szbhAbXR/DHrN9xRSilqCwhPZGNHcLAwl00=
Subject key identifier: 46:7D:35:7A:E4:5F:28:B2:1B:7A:3D:D9:9E:03:85:39:5E:74:DD:6E
Certificate issuer: /CN=A9133B2F/serialNumber=0DC89E5E9C488F41AC8111637454C654B7ADA8F2
Certificate serial: 06B9
Authority key identifier: 0D:C8:9E:5E:9C:48:8F:41:AC:81:11:63:74:54:C6:54:B7:AD:A8:F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DcieXpxIj0GsgRFjdFTGVLetqPI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9133B2F/45E7BC7CC1A511EA8C01B63DC4F9AE02/3DBF0B50295A11EB9AA2CA74C4F9AE02.roa
Signing time: Wed 02 Nov 2022 22:49:20 +0000
ROA not before: Wed 02 Nov 2022 22:49:20 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 61317
IP address blocks: 103.75.228.0/24 maxlen: 24
103.75.229.0/24 maxlen: 24
103.75.230.0/24 maxlen: 24
103.75.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1721 (0x6b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9133B2F/serialNumber=0DC89E5E9C488F41AC8111637454C654B7ADA8F2
Validity
Not Before: Nov 2 22:49:20 2022 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=6362f3f0-4c17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8c:09:21:0d:3c:fe:0d:4e:25:4e:6d:20:12:
1e:e4:c7:ec:7d:7b:9a:0c:de:b3:da:37:32:19:44:
7a:51:65:de:8a:f2:e7:cd:e3:bd:22:23:0f:0c:a1:
85:51:93:44:5d:70:0a:8c:14:7e:b1:4e:d5:7a:4a:
a2:3f:5e:35:28:ad:8f:8e:6f:53:5c:53:c7:7d:b5:
b0:93:2d:d6:08:fd:ad:58:44:1c:a1:89:1c:7a:86:
df:02:95:34:3d:1f:bb:7d:1e:43:5d:9f:fc:d3:96:
77:df:26:19:43:7f:b1:91:45:60:7e:62:6f:33:82:
16:af:ac:56:f5:14:65:b0:49:bb:05:ca:8e:e8:30:
01:20:e2:c4:9c:8e:fa:b9:67:dc:c5:3e:d5:6f:76:
8a:a3:b9:13:06:3e:6b:15:f6:96:87:6e:56:9d:de:
50:4f:78:30:72:1b:e9:f4:62:b5:4b:f0:ea:0b:26:
98:82:15:37:b1:56:46:08:50:b1:53:85:25:d1:87:
64:da:18:1a:a9:11:bb:c3:b3:c9:bf:97:1d:de:28:
65:3d:fe:e3:bc:6e:f2:15:4d:41:79:4e:e6:04:d6:
22:20:f6:5a:0a:48:50:13:c3:a2:be:d3:43:58:fb:
fb:b0:50:3f:22:fe:61:b7:e6:84:fa:77:f4:17:d3:
f5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:7D:35:7A:E4:5F:28:B2:1B:7A:3D:D9:9E:03:85:39:5E:74:DD:6E
X509v3 Authority Key Identifier:
keyid:0D:C8:9E:5E:9C:48:8F:41:AC:81:11:63:74:54:C6:54:B7:AD:A8:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9133B2F/45E7BC7CC1A511EA8C01B63DC4F9AE02/DcieXpxIj0GsgRFjdFTGVLetqPI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DcieXpxIj0GsgRFjdFTGVLetqPI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133B2F/45E7BC7CC1A511EA8C01B63DC4F9AE02/3DBF0B50295A11EB9AA2CA74C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.75.228.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:e3:01:ec:95:e4:fe:63:55:37:ac:8f:ad:31:74:2f:f0:3c:
99:2b:65:ae:55:8b:ff:13:f2:fe:05:e9:b0:55:06:c1:c0:e4:
56:f3:9e:68:0f:d0:86:48:71:19:48:df:41:69:c1:17:c6:75:
3f:d1:47:a8:02:0e:44:5c:cd:f8:1d:6a:09:f2:e1:80:c0:ec:
dc:8a:f8:5e:2e:ab:5c:b2:4e:66:12:3e:15:72:2f:a0:d9:1a:
0f:19:2c:eb:4a:09:3b:6c:55:4a:aa:26:92:22:15:0f:e7:e1:
0a:fd:f5:ab:be:8c:c5:ef:0f:30:7a:07:a7:56:ae:ac:a1:2d:
5f:22:f2:8f:92:27:56:98:02:6d:57:65:fc:07:95:29:0d:22:
a0:bf:b7:d7:3d:00:b0:6f:8c:54:e7:d4:1b:ec:af:aa:6e:07:
dd:f7:79:8a:a4:ed:2a:ee:42:43:8a:76:f7:8d:76:8b:d2:14:
c6:16:19:a3:09:26:d6:4c:37:1e:c2:24:49:f0:81:78:6d:92:
03:29:46:7b:f6:02:f5:b6:22:29:83:88:80:2e:d9:ea:64:a0:
54:2b:c6:5f:3f:08:44:cc:a6:ba:94:a1:35:38:ec:e9:4c:b6:
e6:10:1b:fd:86:18:c5:53:d7:44:3e:9c:a5:c2:88:e5:74:b6:
44:36:42:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:38 2023 by rpki-client on console-fra.rpki-client.org