Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9133B2F/45E7BC7CC1A511EA8C01B63DC4F9AE02/42066ACE344411EB90537D53C4F9AE02.roa
File: 42066ACE344411EB90537D53C4F9AE02.roa (raw, json)
Hash identifier: JfclmkRAG+raVULxopyCSQ+lNL3ODdV6xwmBBm01u40=
Subject key identifier: 0A:6F:3C:07:16:B9:62:45:60:BE:E6:FB:7C:7F:53:B3:20:AA:9F:22
Certificate issuer: /CN=A9133B2F/serialNumber=0DC89E5E9C488F41AC8111637454C654B7ADA8F2
Certificate serial: 06B6
Authority key identifier: 0D:C8:9E:5E:9C:48:8F:41:AC:81:11:63:74:54:C6:54:B7:AD:A8:F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DcieXpxIj0GsgRFjdFTGVLetqPI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9133B2F/45E7BC7CC1A511EA8C01B63DC4F9AE02/42066ACE344411EB90537D53C4F9AE02.roa
Signing time: Wed 02 Nov 2022 22:49:17 +0000
ROA not before: Wed 02 Nov 2022 22:49:17 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 206150
IP address blocks: 103.75.229.0/24 maxlen: 24
103.75.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1718 (0x6b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9133B2F/serialNumber=0DC89E5E9C488F41AC8111637454C654B7ADA8F2
Validity
Not Before: Nov 2 22:49:17 2022 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=6362f3ed-b553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5b:94:e3:83:84:21:e5:46:d4:74:1b:07:f4:
f2:59:28:90:11:07:cb:14:47:0e:60:c2:61:5d:fd:
c1:46:61:1e:be:ba:5c:8c:8e:65:c0:a8:76:97:d9:
d0:12:0a:be:1d:6f:9f:32:40:83:75:61:31:08:ac:
b5:8b:32:fa:32:aa:2c:ce:b9:76:ca:dd:cf:ba:dc:
ba:5e:19:ca:9e:08:9f:63:8f:6b:ce:3d:0a:6e:7e:
a4:63:da:6c:5d:6e:18:7d:48:54:81:d4:10:8e:00:
ce:36:42:8e:a7:03:de:a1:79:a6:1c:f2:68:b7:6e:
73:b6:24:cc:c3:e6:8f:bf:f2:08:ef:1b:fc:07:12:
5b:76:38:43:8b:45:cf:42:2f:55:c4:60:c2:ba:98:
21:e8:78:12:61:d1:c4:c4:64:90:7a:d7:86:2a:a0:
17:19:06:3f:e4:58:aa:28:5c:a5:52:dc:01:21:7e:
cc:65:f1:78:c4:12:a1:44:f4:4d:d9:3a:2a:a0:c9:
fb:7d:a8:2f:01:57:0e:8d:a9:c1:3d:eb:1b:4e:58:
bd:c8:31:8d:92:4e:36:49:4f:63:7c:98:36:2b:90:
d6:b0:d5:2f:e9:1a:66:f0:0d:17:f9:34:24:e6:f7:
54:2e:cb:45:45:78:45:33:ba:24:60:35:55:62:36:
f6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:6F:3C:07:16:B9:62:45:60:BE:E6:FB:7C:7F:53:B3:20:AA:9F:22
X509v3 Authority Key Identifier:
keyid:0D:C8:9E:5E:9C:48:8F:41:AC:81:11:63:74:54:C6:54:B7:AD:A8:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9133B2F/45E7BC7CC1A511EA8C01B63DC4F9AE02/DcieXpxIj0GsgRFjdFTGVLetqPI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DcieXpxIj0GsgRFjdFTGVLetqPI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133B2F/45E7BC7CC1A511EA8C01B63DC4F9AE02/42066ACE344411EB90537D53C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.75.229.0-103.75.230.255
Signature Algorithm: sha256WithRSAEncryption
61:9b:36:1e:e4:76:30:3a:6b:08:fd:66:88:cc:82:01:f1:61:
5c:e3:c5:06:35:47:f9:04:02:40:e3:92:4f:49:25:b1:3c:e8:
61:19:f4:89:d7:17:97:d3:c2:23:fa:68:eb:2f:84:a9:45:b2:
29:7a:2f:17:e6:1c:5a:49:cf:9a:66:2d:a3:3f:19:42:23:98:
9b:36:92:ef:d7:51:8a:cf:37:53:18:3c:70:da:0e:18:56:ed:
d1:97:51:f3:ed:81:b0:b1:f0:44:a2:40:15:02:93:f1:84:7b:
c1:22:b4:97:a1:bd:b9:54:12:d9:a6:92:19:c7:4e:a8:13:47:
1c:8d:1a:cb:24:2f:97:e5:aa:24:cb:da:7c:e4:f6:95:47:36:
0a:a0:8b:a8:ac:0a:6a:8f:8f:3f:46:8e:f6:9d:03:8f:e6:b8:
22:4c:60:f4:2b:70:f9:dd:6f:1b:8d:58:d5:fa:4b:68:58:05:
98:4c:eb:42:0d:72:1e:ac:8f:ab:4b:b5:15:0a:e0:1b:6f:56:
06:05:e4:df:c2:b7:24:77:53:e3:52:aa:32:8e:e8:3b:c2:3f:
a8:32:6a:ae:00:76:1f:34:d6:02:4f:be:70:60:cb:db:c4:6a:
e9:49:4c:6f:d9:98:0b:7c:10:e2:22:62:df:d3:aa:ae:af:ee:
b9:e6:c2:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:36 2023 by rpki-client on console-ams.rpki-client.org