Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913D48E/1053C706B92C11ECA0214052C4F9AE02/8BC20074B94511ECA5CF977DC4F9AE02.roa
File: 8BC20074B94511ECA5CF977DC4F9AE02.roa (raw, json)
Hash identifier: Cemm5iOCcwaUdXsJBIXBssgCPoyeVND0P5iAkCPQRps=
Subject key identifier: D3:BD:ED:5A:61:44:0F:6C:C2:BC:31:9B:BF:F2:6B:27:E6:94:D2:0B
Certificate issuer: /CN=A913D48E/serialNumber=46952ADC2383A8FAD1E0661D6E9D388EF8E68663
Certificate serial: 3B
Authority key identifier: 46:95:2A:DC:23:83:A8:FA:D1:E0:66:1D:6E:9D:38:8E:F8:E6:86:63
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpUq3CODqPrR4GYdbp04jvjmhmM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D48E/1053C706B92C11ECA0214052C4F9AE02/8BC20074B94511ECA5CF977DC4F9AE02.roa
Signing time: Wed 04 May 2022 05:35:14 +0000
ROA not before: Wed 04 May 2022 05:35:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 17551
IP address blocks: 103.15.148.0/22 maxlen: 24
110.232.240.0/21 maxlen: 24
117.53.128.0/20 maxlen: 24
202.47.120.0/22 maxlen: 24
203.22.132.0/24 maxlen: 24
203.27.231.0/24 maxlen: 24
203.30.68.0/24 maxlen: 24
203.147.96.0/21 maxlen: 24
2407:5400::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59 (0x3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D48E/serialNumber=46952ADC2383A8FAD1E0661D6E9D388EF8E68663
Validity
Not Before: May 4 05:35:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62721092-37ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:55:97:b3:13:99:41:90:64:b1:04:9f:fc:91:
99:15:18:3f:c7:c3:a3:01:a3:25:b9:85:a4:1d:39:
7e:eb:8c:23:db:7b:91:8c:48:63:f3:d3:f7:80:2b:
10:f7:9c:e6:28:4d:c8:02:6f:27:f6:95:cd:b7:01:
92:9f:66:9d:1c:15:0a:e4:28:b2:a1:33:69:7d:4b:
fe:54:fe:10:05:e8:b4:8c:03:12:8c:ca:48:41:09:
f6:63:06:75:c3:e3:bc:16:1a:d1:46:65:1f:d0:c3:
8f:2a:cd:5f:bc:f1:fd:72:97:73:36:46:48:fc:e5:
b4:6d:db:53:a1:e5:f1:ed:fc:da:ce:9f:9e:d5:20:
52:ab:98:cd:7b:14:c5:5f:04:d9:a7:c5:8b:3d:2e:
f1:4d:e0:4c:66:7e:a1:66:5a:27:5f:29:2f:d2:49:
96:45:6b:8f:81:8d:84:a0:8d:e8:cc:a4:49:34:52:
ac:0a:b4:f4:37:b7:db:5a:e7:f7:c8:19:0c:21:3a:
62:1f:fb:5c:90:67:61:6c:6e:61:b5:55:4e:86:94:
2a:b4:e5:3d:94:50:b7:7f:7d:63:19:71:f4:76:8d:
12:ca:61:df:e5:fd:1d:ca:4a:52:eb:a0:14:06:2a:
9e:5f:06:5d:b9:9f:58:36:b5:f9:6f:0c:4b:fd:c3:
64:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:BD:ED:5A:61:44:0F:6C:C2:BC:31:9B:BF:F2:6B:27:E6:94:D2:0B
X509v3 Authority Key Identifier:
keyid:46:95:2A:DC:23:83:A8:FA:D1:E0:66:1D:6E:9D:38:8E:F8:E6:86:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D48E/1053C706B92C11ECA0214052C4F9AE02/RpUq3CODqPrR4GYdbp04jvjmhmM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpUq3CODqPrR4GYdbp04jvjmhmM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D48E/1053C706B92C11ECA0214052C4F9AE02/8BC20074B94511ECA5CF977DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.15.148.0/22
110.232.240.0/21
117.53.128.0/20
202.47.120.0/22
203.22.132.0/24
203.27.231.0/24
203.30.68.0/24
203.147.96.0/21
IPv6:
2407:5400::/32
Signature Algorithm: sha256WithRSAEncryption
94:bf:cb:21:6f:a9:67:31:e7:c5:ba:f3:b4:9e:57:11:b5:f8:
3d:ce:0b:3c:a5:12:1c:d2:26:3a:bd:8e:4b:48:46:9f:76:a5:
53:a3:59:af:1e:ee:a6:2b:cd:f1:53:db:60:d0:4b:ca:f8:a3:
b0:26:0c:88:32:64:45:0b:65:19:07:57:e1:49:7d:dd:20:b3:
05:75:b3:f6:2d:d9:b3:8c:c7:57:b0:43:89:86:30:68:84:c8:
72:f8:12:03:00:26:b5:bd:ec:17:c5:c1:7a:62:32:73:6d:c6:
e7:29:bf:87:d3:d4:d2:c9:61:2f:84:a1:44:d3:1d:4a:7e:b4:
4a:25:c3:cb:f0:f1:82:f6:dd:2c:9c:88:9a:44:17:0a:65:00:
b8:f9:33:28:c8:0f:b9:ac:67:d0:8e:4a:19:24:49:10:2d:50:
a7:0e:d4:5f:ac:4e:81:5a:9f:2f:35:7a:a1:45:38:1b:7f:41:
98:e9:b9:a8:b7:23:79:93:99:51:3b:28:9e:61:56:2f:5b:b9:
55:19:a3:ec:6c:58:74:02:47:43:9f:2e:50:3c:5f:18:17:c7:
77:24:a3:b6:15:6f:98:19:9e:d2:6a:92:44:a1:29:73:f6:fa:
41:bc:6a:0c:01:59:31:71:3c:83:54:f6:85:ec:db:7e:7b:67:
7d:2b:f9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:39 2023 by rpki-client on console-fra.rpki-client.org