Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9133B2F/45E7BC7CC1A511EA8C01B63DC4F9AE02/CAC79EEEA28711EB9BDD0863C4F9AE02.roa
File: CAC79EEEA28711EB9BDD0863C4F9AE02.roa (raw, json)
Hash identifier: +S6rbQqUC8HpYJOSWLr/Olfpyg4RsxIoU4l+46mnC9s=
Subject key identifier: 61:59:55:C1:78:9E:2F:2B:B6:C0:45:78:82:43:9B:8D:DF:57:AD:D3
Certificate issuer: /CN=A9133B2F/serialNumber=0DC89E5E9C488F41AC8111637454C654B7ADA8F2
Certificate serial: 06BA
Authority key identifier: 0D:C8:9E:5E:9C:48:8F:41:AC:81:11:63:74:54:C6:54:B7:AD:A8:F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DcieXpxIj0GsgRFjdFTGVLetqPI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9133B2F/45E7BC7CC1A511EA8C01B63DC4F9AE02/CAC79EEEA28711EB9BDD0863C4F9AE02.roa
Signing time: Wed 02 Nov 2022 22:49:22 +0000
ROA not before: Wed 02 Nov 2022 22:49:22 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 7922
IP address blocks: 103.75.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1722 (0x6ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9133B2F/serialNumber=0DC89E5E9C488F41AC8111637454C654B7ADA8F2
Validity
Not Before: Nov 2 22:49:22 2022 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=6362f3f1-03ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:14:32:fa:59:5b:bf:5c:51:86:a7:d2:36:15:
b5:ae:8b:55:9d:e3:19:17:63:79:ee:b6:59:e0:c1:
ca:e8:73:65:5e:2f:cd:66:80:b4:32:93:59:f0:06:
7e:38:cc:ba:1c:e1:7b:39:6b:77:ec:51:68:4a:2f:
78:7a:d1:a5:5f:33:1f:20:f4:6e:6e:e1:52:2c:39:
32:1b:e9:cf:42:9b:ab:88:09:2c:de:c3:d6:30:84:
0b:ca:6c:9e:f3:bd:de:7a:c3:94:43:88:14:e2:03:
9a:03:50:21:25:0a:a5:e5:b3:dc:d8:9b:cc:49:ec:
17:dc:41:66:94:02:38:1c:45:ca:9f:5c:bc:b5:de:
c3:fb:a3:f9:09:5f:ec:0f:61:3b:e9:9c:fb:69:fd:
a8:79:43:74:6d:65:31:f4:b4:62:2f:a2:f5:11:dd:
31:0f:5f:96:ca:d7:f7:db:1c:72:13:43:72:e7:ac:
80:44:16:47:b5:7c:f1:21:94:0c:db:f2:59:70:cb:
48:d6:a6:e2:72:f9:fc:af:02:5e:ad:63:e0:43:5a:
d4:2d:e6:bb:7f:53:18:58:d1:f0:58:ab:dd:e0:0b:
d0:c0:a7:bb:d3:8b:09:80:b6:e4:9c:99:51:9f:cf:
cd:f6:e2:54:0d:82:f1:78:a1:15:8f:02:7b:cc:41:
e1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:59:55:C1:78:9E:2F:2B:B6:C0:45:78:82:43:9B:8D:DF:57:AD:D3
X509v3 Authority Key Identifier:
keyid:0D:C8:9E:5E:9C:48:8F:41:AC:81:11:63:74:54:C6:54:B7:AD:A8:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9133B2F/45E7BC7CC1A511EA8C01B63DC4F9AE02/DcieXpxIj0GsgRFjdFTGVLetqPI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DcieXpxIj0GsgRFjdFTGVLetqPI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133B2F/45E7BC7CC1A511EA8C01B63DC4F9AE02/CAC79EEEA28711EB9BDD0863C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.75.231.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:41:a6:28:79:46:ec:aa:7e:51:ad:00:36:7a:58:f1:1c:13:
39:4b:e7:e8:81:a6:a9:41:55:cf:a0:19:8d:8b:39:09:c3:d4:
ac:dd:b0:d7:3b:aa:8f:b4:93:63:1d:24:c8:f0:06:cb:19:12:
40:c0:58:a7:ab:51:be:cf:c6:dd:37:ca:49:90:10:6c:d6:f1:
69:62:58:82:d5:15:03:d1:1a:d0:aa:8e:ff:56:17:77:6e:83:
55:a4:d9:d4:5d:bd:21:dc:a6:60:53:d8:f0:1e:98:ab:7f:5c:
0f:5b:f4:08:9a:af:34:5d:7c:1d:01:bc:50:7d:b4:df:f4:a5:
45:5f:ae:04:4b:62:bc:b8:2b:96:cd:e1:6f:55:38:30:83:4b:
87:c6:ad:34:33:6b:5e:2d:85:34:50:95:6e:e5:c1:3d:00:2f:
05:b6:0e:8a:0d:c7:af:09:0e:d5:36:67:9e:d7:cd:b3:f3:08:
64:28:a9:32:f9:8d:c5:c8:e2:bd:0f:f2:03:9b:eb:06:df:dc:
0a:b4:66:25:13:0f:56:48:2e:bb:f4:76:56:d8:75:6d:69:d1:
f6:f7:fc:52:22:44:ab:04:d7:db:86:9b:6c:67:fc:d5:fe:21:
3b:f8:26:4c:19:68:8c:fc:2c:31:0d:bc:f5:42:a2:f0:6e:29:
f5:ff:ae:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:36 2023 by rpki-client on console-ams.rpki-client.org