Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91401B1/7BCD48581DAB11E2A4EEA1A908B02CD2/EC18A0209F7511E7B020F309C4F9AE02.roa
File: EC18A0209F7511E7B020F309C4F9AE02.roa (raw, json)
Hash identifier: tcvIFFFutbSha8sZ1ddNE4ZuWLdOBwoW8H0DTynkqJI=
Subject key identifier: B0:B6:5A:4F:F1:92:4E:FA:70:FE:48:D6:B0:44:EA:5D:F3:55:11:A1
Certificate issuer: /CN=A91401B1/serialNumber=8226265692DDEF921CD981275FADB437F0B076BA
Certificate serial: 2F51
Authority key identifier: 82:26:26:56:92:DD:EF:92:1C:D9:81:27:5F:AD:B4:37:F0:B0:76:BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/giYmVpLd75Ic2YEnX620N_Cwdro.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91401B1/7BCD48581DAB11E2A4EEA1A908B02CD2/EC18A0209F7511E7B020F309C4F9AE02.roa
Signing time: Sat 07 Aug 2021 03:50:58 +0000
ROA not before: Sat 07 Aug 2021 03:50:58 +0000
ROA not after: Mon 31 Oct 2022 00:00:00 +0000
asID: 45910
IP address blocks: 103.15.20.0/24 maxlen: 24
103.15.21.0/24 maxlen: 24
103.15.22.0/24 maxlen: 24
103.15.23.0/24 maxlen: 24
2404:c500::/48 maxlen: 48
2404:c500:1::/48 maxlen: 48
2404:c500:2::/48 maxlen: 48
2404:c500:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12113 (0x2f51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91401B1/serialNumber=8226265692DDEF921CD981275FADB437F0B076BA
Validity
Not Before: Aug 7 03:50:58 2021 GMT
Not After : Oct 31 00:00:00 2022 GMT
Subject: CN=610e0322-3be6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:06:b6:d8:62:0f:d3:1c:e2:d7:90:de:53:39:
6d:d6:88:6d:90:07:56:2c:a4:24:00:7c:7b:73:3a:
11:2e:71:6e:c0:d6:cd:01:c4:69:4c:dc:24:99:91:
fc:55:84:d1:f5:e6:2f:00:70:4b:bb:47:20:d5:b1:
fb:c3:3e:18:f7:54:6f:d5:ad:92:39:ff:d7:f1:68:
4b:21:30:81:cb:bb:35:49:f2:62:49:0b:7c:d0:b7:
ff:0a:8f:bb:f7:0d:99:4f:d0:a5:4c:9d:7f:d4:61:
cb:56:99:81:53:1f:32:b0:12:89:51:74:c3:13:a9:
f9:95:d2:89:4a:a0:26:ae:47:6a:85:22:8f:62:93:
35:b5:59:6f:be:ca:e4:1d:d3:a6:a6:46:ff:ff:ad:
98:a5:56:6f:48:2e:04:b4:65:5b:54:b9:e8:b7:6c:
44:a4:e2:f5:31:8c:4c:e8:2c:e1:3c:80:ce:35:45:
13:a3:a9:0e:7c:d5:be:11:16:42:d2:13:51:9e:17:
d7:ca:3b:c0:f2:44:a1:13:b9:0f:ce:c9:b2:6e:73:
5a:7a:7f:17:a8:1f:b9:2d:f4:c9:21:3e:a5:3e:e4:
2d:1b:f0:95:fc:0d:ee:d6:ff:6a:cc:1b:66:bb:06:
b5:46:26:aa:ff:92:d1:90:36:db:e3:78:92:5c:86:
7c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B6:5A:4F:F1:92:4E:FA:70:FE:48:D6:B0:44:EA:5D:F3:55:11:A1
X509v3 Authority Key Identifier:
keyid:82:26:26:56:92:DD:EF:92:1C:D9:81:27:5F:AD:B4:37:F0:B0:76:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91401B1/7BCD48581DAB11E2A4EEA1A908B02CD2/giYmVpLd75Ic2YEnX620N_Cwdro.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/giYmVpLd75Ic2YEnX620N_Cwdro.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91401B1/7BCD48581DAB11E2A4EEA1A908B02CD2/EC18A0209F7511E7B020F309C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.15.20.0/22
IPv6:
2404:c500::/46
Signature Algorithm: sha256WithRSAEncryption
12:48:e6:08:38:b4:88:7f:68:c0:b1:b2:bb:ca:ad:d1:66:99:
fa:f6:24:9f:a7:78:97:e4:36:20:3f:e7:39:49:51:bd:fc:2e:
1b:69:ce:1a:3c:fb:51:ec:63:0c:91:68:03:83:26:7c:c7:ca:
bb:53:e5:60:62:b1:36:86:05:4e:75:e8:21:c1:e9:fe:34:e0:
e1:ac:1e:12:92:88:1b:0d:da:dc:22:0c:d6:f1:f8:b3:10:86:
82:e4:55:68:75:34:9d:09:0c:a6:ff:71:6f:9f:17:03:07:53:
3f:3b:59:04:2b:c5:30:b1:1b:a5:ff:5b:6b:b5:61:df:ed:4d:
d6:a0:79:85:20:5f:22:21:5b:a0:c3:14:7b:03:1a:bf:cf:0f:
90:85:ea:56:94:e9:c6:02:cc:4e:33:f8:bb:56:ce:45:6a:34:
fa:25:3d:f6:d6:aa:62:31:71:32:86:67:11:23:58:2e:45:b7:
d0:ca:1e:07:a0:67:0d:24:9a:fd:d5:85:1e:76:63:6c:ba:0f:
96:80:01:6a:3f:cf:21:60:99:75:bb:71:8b:93:d5:9e:d0:66:
92:a1:d5:67:6b:2b:ad:00:e6:03:c5:91:4c:bc:3a:04:97:91:
a6:21:c3:fd:db:ef:4d:6f:f1:36:ce:72:d2:ae:c4:b2:5f:15:
b6:76:27:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:55 2024 by rpki-client on console-ams.rpki-client.org