Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9133B2F/45E7BC7CC1A511EA8C01B63DC4F9AE02/4A7739E6C1A711EA88ED4041C4F9AE02.roa
File: 4A7739E6C1A711EA88ED4041C4F9AE02.roa (raw, json)
Hash identifier: dQM2D1tuY2ARc4qRCIZ69lsFmVJ7Z1KtScBAep5cdkg=
Subject key identifier: ED:26:23:88:BF:B2:E5:2C:1C:51:CA:C2:C4:2B:63:B3:E4:92:1D:50
Certificate issuer: /CN=A9133B2F/serialNumber=0DC89E5E9C488F41AC8111637454C654B7ADA8F2
Certificate serial: 06B5
Authority key identifier: 0D:C8:9E:5E:9C:48:8F:41:AC:81:11:63:74:54:C6:54:B7:AD:A8:F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DcieXpxIj0GsgRFjdFTGVLetqPI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9133B2F/45E7BC7CC1A511EA8C01B63DC4F9AE02/4A7739E6C1A711EA88ED4041C4F9AE02.roa
Signing time: Wed 02 Nov 2022 22:49:16 +0000
ROA not before: Wed 02 Nov 2022 22:49:16 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 133499
IP address blocks: 103.75.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1717 (0x6b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9133B2F/serialNumber=0DC89E5E9C488F41AC8111637454C654B7ADA8F2
Validity
Not Before: Nov 2 22:49:16 2022 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=6362f3ec-cd32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cd:bf:f2:ce:5f:8c:9f:1a:82:93:b2:1f:9b:
b7:4c:d9:80:de:f7:85:20:08:25:76:c8:66:61:e7:
6d:5c:d7:7b:ac:9b:6f:8b:56:e8:75:60:f4:51:e1:
69:fa:49:5d:f5:7c:f5:14:6e:ce:bb:77:87:72:c1:
3f:91:f2:49:38:8f:c2:11:c4:9a:00:fc:d0:72:89:
3f:9a:a2:2b:56:0f:31:de:58:bb:82:14:cc:42:70:
db:93:ec:52:bd:e8:5d:fd:f8:d3:01:c6:4a:de:53:
f5:b7:53:29:ea:4e:9e:dd:ca:9d:fb:3d:ed:3b:d2:
28:39:f8:60:59:2b:51:f0:93:de:b5:08:54:72:59:
fd:b9:60:25:e4:6b:c0:d3:c5:b5:de:c8:13:4f:eb:
4a:89:92:c2:03:06:c4:cc:62:91:8d:b5:16:27:f7:
af:76:84:c2:ef:e8:78:5f:2e:c5:22:f2:d2:a2:cb:
f5:a5:0d:b7:0e:cf:1e:8f:03:87:cd:ea:08:93:29:
15:f7:b4:6b:02:ba:9b:79:10:6f:90:5a:26:f5:9d:
4a:7d:a3:d1:ce:be:25:b0:44:11:ce:b1:c0:f0:8f:
ea:ca:f0:54:66:b6:ed:71:3e:81:cd:82:38:5b:15:
0b:2d:fc:2c:40:7d:af:e3:69:42:cd:6a:d4:41:b6:
2f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:26:23:88:BF:B2:E5:2C:1C:51:CA:C2:C4:2B:63:B3:E4:92:1D:50
X509v3 Authority Key Identifier:
keyid:0D:C8:9E:5E:9C:48:8F:41:AC:81:11:63:74:54:C6:54:B7:AD:A8:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9133B2F/45E7BC7CC1A511EA8C01B63DC4F9AE02/DcieXpxIj0GsgRFjdFTGVLetqPI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DcieXpxIj0GsgRFjdFTGVLetqPI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133B2F/45E7BC7CC1A511EA8C01B63DC4F9AE02/4A7739E6C1A711EA88ED4041C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.75.228.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:04:6f:3d:16:1a:2f:aa:b5:fe:5e:9d:f4:ba:bd:f5:6f:24:
18:c4:f4:20:76:04:24:5a:00:54:36:6c:3a:ed:4f:35:68:a3:
15:24:0b:71:d0:2d:1a:06:cd:94:2f:7f:dc:70:35:b3:f1:64:
c7:d0:74:a0:00:74:02:15:99:c3:1f:0e:c9:f6:2b:10:53:1d:
2f:07:eb:53:5e:9c:88:89:ff:67:62:6f:9d:a8:d3:6f:34:e7:
0b:b3:c7:71:e6:93:54:a2:0b:60:62:ad:56:8e:df:6e:35:01:
af:17:81:9f:e4:d2:8a:d9:f4:dd:02:68:af:db:b0:69:14:4d:
24:ea:de:26:13:3b:f7:6e:65:c4:c1:a3:0d:f1:4c:b2:d9:ca:
c3:c3:09:4d:0f:7c:eb:06:db:69:20:a6:7b:00:d1:d5:90:43:
6c:1c:88:96:7b:7a:5b:6a:68:c0:c1:1e:4e:da:ce:56:5b:79:
08:f1:24:40:0c:02:eb:dd:53:46:35:a8:58:28:39:7c:50:86:
b4:74:0b:36:2f:a3:bb:17:5e:69:0c:c3:db:47:04:d7:de:de:
90:da:9c:a2:d4:10:42:44:93:b5:fb:eb:3c:f6:61:e4:46:71:
7d:7f:71:fa:b8:9a:f4:e5:45:82:2b:fc:a5:c5:45:41:5d:db:
5e:30:3c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:38 2023 by rpki-client on console-fra.rpki-client.org