Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143135/624F16522E1011ECAD3C6B6DC4F9AE02/B7740F1E2E1211ECBF70D66FC4F9AE02.roa
File: B7740F1E2E1211ECBF70D66FC4F9AE02.roa (raw, json)
Hash identifier: MSfmp+a3s7ww6PQ5FyrNKvv3xK4fpnaYlsNO3dRIsDo=
Subject key identifier: 91:2F:B8:B5:24:38:1E:89:26:BC:EA:1C:AC:FC:9E:E0:01:1D:47:13
Certificate issuer: /CN=A9143135/serialNumber=FB80ECEF7474C3F24FCA8E518E679B2FCF351666
Certificate serial: 02
Authority key identifier: FB:80:EC:EF:74:74:C3:F2:4F:CA:8E:51:8E:67:9B:2F:CF:35:16:66
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4Ds73R0w_JPyo5RjmebL881FmY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143135/624F16522E1011ECAD3C6B6DC4F9AE02/B7740F1E2E1211ECBF70D66FC4F9AE02.roa
Signing time: Fri 15 Oct 2021 23:50:46 +0000
ROA not before: Fri 15 Oct 2021 23:50:46 +0000
ROA not after: Fri 30 Dec 2022 00:00:00 +0000
asID: 147295
IP address blocks: 103.174.134.0/23 maxlen: 23
103.174.134.0/24 maxlen: 24
103.174.135.0/24 maxlen: 24
2001:df7:c780::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143135/serialNumber=FB80ECEF7474C3F24FCA8E518E679B2FCF351666
Validity
Not Before: Oct 15 23:50:46 2021 GMT
Not After : Dec 30 00:00:00 2022 GMT
Subject: CN=616a13d6-723c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:8a:0b:47:bb:b9:fa:e2:32:cd:90:a5:e0:2e:
fe:21:15:da:51:ba:39:a9:1e:1b:38:14:a7:eb:1e:
6f:70:35:d9:53:c2:aa:c5:fc:0a:5d:bd:be:92:db:
1b:7e:95:9b:3e:ae:f7:87:1b:74:b3:c2:52:7a:fd:
5f:78:7c:c9:de:2e:85:f9:66:76:01:48:16:0b:3f:
4c:9b:ca:1f:5d:33:90:f7:bd:83:4e:a0:7b:f2:45:
da:89:42:6a:03:bc:58:3b:97:83:13:3f:5d:54:3f:
c9:88:51:d2:ab:ba:17:79:0a:9c:77:72:3a:25:ef:
8a:75:08:c3:aa:eb:be:50:86:ca:3d:30:b8:c4:8b:
7b:1d:cb:9b:db:77:ee:7c:a5:d7:98:fe:fd:9f:cc:
42:e7:ce:ae:b9:ab:7f:da:65:fb:be:28:64:74:bd:
16:6e:ce:ea:80:fe:85:03:03:39:a5:33:d4:3f:44:
3f:64:d4:00:30:d7:10:46:e1:13:ff:5a:6a:8f:a6:
29:d6:ff:33:86:df:c4:8b:21:b6:1f:32:dd:1f:1a:
18:9e:2a:4d:44:76:f3:fa:f5:16:ee:65:28:c3:ce:
23:0f:25:8a:f8:32:44:d8:dd:91:23:d1:af:f2:be:
1b:2f:64:ae:c4:8d:98:ca:12:f0:24:76:e6:4d:a0:
8f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:2F:B8:B5:24:38:1E:89:26:BC:EA:1C:AC:FC:9E:E0:01:1D:47:13
X509v3 Authority Key Identifier:
keyid:FB:80:EC:EF:74:74:C3:F2:4F:CA:8E:51:8E:67:9B:2F:CF:35:16:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143135/624F16522E1011ECAD3C6B6DC4F9AE02/-4Ds73R0w_JPyo5RjmebL881FmY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4Ds73R0w_JPyo5RjmebL881FmY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143135/624F16522E1011ECAD3C6B6DC4F9AE02/B7740F1E2E1211ECBF70D66FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.174.134.0/23
IPv6:
2001:df7:c780::/48
Signature Algorithm: sha256WithRSAEncryption
82:65:a5:a9:a3:ca:09:a0:67:96:d8:3f:dd:17:a1:91:2a:e1:
e4:1e:ec:87:00:2d:2e:0e:b8:70:d4:72:fd:1f:82:90:50:49:
04:99:b9:75:02:38:96:78:cf:f7:a9:8e:bc:e5:7b:fe:cf:30:
55:fc:fe:31:d9:dc:53:aa:0d:07:ce:0d:f8:7b:46:92:37:09:
88:4f:b1:d9:eb:e9:fc:1b:14:a3:93:78:97:e4:4b:a5:bb:62:
b4:08:78:77:e0:9a:41:ef:d6:3f:0c:4f:bc:37:78:2f:ef:31:
3e:09:42:01:c7:30:1a:d8:e1:ae:83:f7:f6:17:f8:10:d1:48:
b5:6e:a8:1c:41:d5:58:8a:69:0b:a1:17:b7:b6:ab:f8:fe:f1:
af:8f:52:12:cc:bc:85:90:2b:c4:83:aa:34:f8:a3:57:cb:6a:
b9:d4:63:f2:f6:2e:f9:a2:2a:23:13:0a:a6:94:83:80:61:77:
54:bb:24:98:34:87:bd:8a:32:14:9a:e1:66:f7:31:49:8f:75:
09:9c:e0:63:ad:ae:45:5b:1f:3e:93:57:eb:ea:96:68:21:4f:
39:c6:19:69:ee:0f:9f:1c:ba:96:67:a7:fd:42:17:c3:74:16:
d0:35:8a:a4:60:43:db:cb:18:b8:12:e7:68:fe:d2:5e:db:f5:
e7:21:ef:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:04 2024 by rpki-client on console-fra.rpki-client.org