Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154B30/EE394F4A1CFD11EBB38D8279C4F9AE02/88A1A8EC1CFF11EB9E46DD7DC4F9AE02.roa
File: 88A1A8EC1CFF11EB9E46DD7DC4F9AE02.roa (raw, json)
Hash identifier: ItQpZAjfArmNubGkehp9aPYnXWZChwJ82mCfUtLClzw=
Subject key identifier: D6:31:02:C7:E5:93:98:49:32:96:2A:3D:8C:DC:20:36:F8:75:D7:12
Certificate issuer: /CN=A9154B30/serialNumber=1D6F1CCC8A585FD1D01DC2FFBDB1B62D8A3B5976
Certificate serial: 86
Authority key identifier: 1D:6F:1C:CC:8A:58:5F:D1:D0:1D:C2:FF:BD:B1:B6:2D:8A:3B:59:76
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HW8czIpYX9HQHcL_vbG2LYo7WXY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154B30/EE394F4A1CFD11EBB38D8279C4F9AE02/88A1A8EC1CFF11EB9E46DD7DC4F9AE02.roa
Signing time: Wed 06 Jan 2021 00:46:54 +0000
ROA not before: Wed 06 Jan 2021 00:46:54 +0000
ROA not after: Thu 31 Mar 2022 00:00:00 +0000
asID: 132404
IP address blocks: 103.127.116.0/23 maxlen: 23
103.127.116.0/24 maxlen: 24
103.127.117.0/24 maxlen: 24
103.127.118.0/23 maxlen: 23
103.127.118.0/24 maxlen: 24
103.127.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134 (0x86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154B30/serialNumber=1D6F1CCC8A585FD1D01DC2FFBDB1B62D8A3B5976
Validity
Not Before: Jan 6 00:46:54 2021 GMT
Not After : Mar 31 00:00:00 2022 GMT
Subject: CN=5ff5087e-2cc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e2:ff:07:a3:f0:65:ac:a4:88:01:5f:a8:77:
95:7a:c3:11:e8:a8:44:76:b8:35:29:ed:ec:fc:01:
a8:66:f1:f1:e2:95:95:71:0b:63:15:3c:cd:33:00:
4e:6a:64:8f:cd:e2:62:f1:62:a0:54:cf:fb:88:34:
5e:3d:b2:24:e0:9f:4b:df:94:d7:20:20:d2:e0:ad:
26:a3:7b:54:59:30:72:76:6c:af:29:ba:6c:3d:bb:
db:f8:1e:0a:20:11:d9:4a:37:68:f9:bf:e2:71:df:
65:94:e6:3f:25:03:ca:11:c3:1b:42:8a:20:29:52:
fb:8c:22:ac:43:66:d9:93:9f:b8:ce:94:06:31:66:
40:7d:ff:86:8b:b5:3d:83:f3:26:57:72:4e:9c:4a:
c9:db:dd:43:ee:c5:f3:e8:80:b2:28:d3:da:04:84:
8c:2a:45:8f:c0:e2:56:c6:ee:0f:18:13:71:8d:fc:
97:91:8f:e2:48:75:74:fb:fd:23:32:bd:ae:eb:97:
9e:10:66:2e:d1:58:e0:16:d1:62:15:82:97:b9:43:
61:14:11:9b:09:9b:4c:b1:d6:db:6a:fd:d4:bf:0c:
f9:b4:3c:31:02:d3:d4:ba:95:96:7b:4d:43:ab:12:
e9:97:9b:fb:1c:6f:dc:06:68:45:1f:3f:88:b5:16:
63:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:31:02:C7:E5:93:98:49:32:96:2A:3D:8C:DC:20:36:F8:75:D7:12
X509v3 Authority Key Identifier:
keyid:1D:6F:1C:CC:8A:58:5F:D1:D0:1D:C2:FF:BD:B1:B6:2D:8A:3B:59:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154B30/EE394F4A1CFD11EBB38D8279C4F9AE02/HW8czIpYX9HQHcL_vbG2LYo7WXY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HW8czIpYX9HQHcL_vbG2LYo7WXY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154B30/EE394F4A1CFD11EBB38D8279C4F9AE02/88A1A8EC1CFF11EB9E46DD7DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.127.116.0/22
Signature Algorithm: sha256WithRSAEncryption
87:22:37:76:97:19:eb:cc:34:f2:2a:2b:26:d2:44:5e:89:a6:
e0:6a:b7:21:32:d2:d1:35:8c:a2:41:ab:a8:f4:b2:f6:8d:37:
bd:34:61:3e:8a:9f:2e:c0:b6:3d:4d:37:be:23:96:6d:b7:96:
f4:2c:b2:ae:ba:34:3a:6b:18:28:ec:6f:86:1b:42:ef:ac:d9:
9c:63:e2:08:ca:cc:ac:23:4e:31:55:fd:99:2b:97:0e:4b:a4:
f8:10:00:52:2c:91:ac:cf:4f:e2:58:b0:56:ef:34:62:db:e8:
fd:bb:89:af:1b:be:33:28:29:13:49:af:3c:03:3e:07:0c:b0:
5f:ef:26:27:f3:9b:2c:df:a8:4b:7d:f9:be:64:d0:38:20:ed:
db:80:29:b0:b8:e4:ff:cd:b9:72:68:d0:49:fb:57:6b:49:6c:
db:e7:af:40:42:89:ef:58:99:62:1d:e9:ce:e8:b2:65:ad:13:
79:9e:2f:10:bb:91:52:28:19:f6:bc:ad:c6:0a:3c:cb:d9:7e:
7a:aa:62:1a:65:e2:89:22:a1:9d:fb:01:c2:45:61:cb:21:02:
97:e2:e4:79:09:70:b0:1d:45:22:79:40:35:04:6e:13:1d:f7:
da:7a:bc:f4:a5:7e:0a:b1:34:3f:20:db:00:36:6e:bd:c5:e7:
7f:83:3e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-ams.rpki-client.org