Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155A58/63FE33EABB2D11EA82F84669C4F9AE02/D8D09F04905C11EC864E8383C4F9AE02.roa
File: D8D09F04905C11EC864E8383C4F9AE02.roa (raw, json)
Hash identifier: uDTMTNENQ/G6hllTezvkdlSRUn4l/8fBYm6xfl3qO74=
Subject key identifier: 47:BC:4E:23:73:A5:BD:2E:9F:72:B5:40:8D:B9:F3:EB:0E:D6:D9:01
Certificate issuer: /CN=A9155A58/serialNumber=A7FFEA18E09A39A0AA6F375A0A83B5708EC22D8A
Certificate serial: 053C
Authority key identifier: A7:FF:EA:18:E0:9A:39:A0:AA:6F:37:5A:0A:83:B5:70:8E:C2:2D:8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p__qGOCaOaCqbzdaCoO1cI7CLYo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155A58/63FE33EABB2D11EA82F84669C4F9AE02/D8D09F04905C11EC864E8383C4F9AE02.roa
Signing time: Tue 22 Mar 2022 05:10:54 +0000
ROA not before: Tue 22 Mar 2022 05:10:54 +0000
ROA not after: Mon 01 May 2023 00:00:00 +0000
asID: 38195
IP address blocks: 103.237.16.0/22 maxlen: 22
163.53.144.0/22 maxlen: 22
220.233.4.0/22 maxlen: 22
220.233.8.0/22 maxlen: 22
220.233.36.0/22 maxlen: 22
220.233.44.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1340 (0x53c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155A58/serialNumber=A7FFEA18E09A39A0AA6F375A0A83B5708EC22D8A
Validity
Not Before: Mar 22 05:10:54 2022 GMT
Not After : May 1 00:00:00 2023 GMT
Subject: CN=62395a5d-f895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6d:8a:ea:7b:5d:99:b5:f7:e1:24:85:10:e5:
b1:6a:10:af:cb:f0:a9:12:0f:b6:e9:2b:22:30:a4:
b6:55:c3:48:e9:a9:41:37:d8:1f:b9:cb:9d:ff:c9:
4a:1b:d7:5c:d7:f9:18:a0:2d:fd:a5:b4:db:37:9d:
60:0e:02:58:5c:47:20:3e:12:f5:d6:5a:e6:4f:1c:
5a:e4:44:99:71:7f:fb:64:1e:b6:45:33:3b:9b:99:
67:18:89:d6:2e:e2:41:3c:4c:2b:23:2c:43:f9:1e:
24:9a:20:76:20:89:fc:19:9d:8f:f9:91:79:c3:5f:
d1:b5:1a:18:91:80:9c:5e:b3:02:32:c7:69:f5:f5:
e2:42:6d:37:25:7b:25:c5:23:26:0e:ee:5a:69:f1:
70:2e:aa:55:5a:42:64:0b:34:2b:7d:60:8c:38:59:
75:5b:48:5b:78:3d:6c:18:89:b8:05:7f:b7:7c:01:
83:d4:59:65:9e:5d:df:ca:3b:30:b5:b4:d1:5a:21:
b2:e2:61:cc:fa:da:83:7e:bd:d0:5a:f8:b6:c2:fe:
b0:45:52:c1:ff:09:ad:3f:2b:80:b9:a4:02:c8:95:
57:b4:24:a4:be:f9:81:70:fd:0c:71:f7:9f:68:ee:
22:5f:c7:d9:c4:6a:b3:9d:ca:b0:21:8d:9c:8a:7b:
b3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:BC:4E:23:73:A5:BD:2E:9F:72:B5:40:8D:B9:F3:EB:0E:D6:D9:01
X509v3 Authority Key Identifier:
keyid:A7:FF:EA:18:E0:9A:39:A0:AA:6F:37:5A:0A:83:B5:70:8E:C2:2D:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155A58/63FE33EABB2D11EA82F84669C4F9AE02/p__qGOCaOaCqbzdaCoO1cI7CLYo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p__qGOCaOaCqbzdaCoO1cI7CLYo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155A58/63FE33EABB2D11EA82F84669C4F9AE02/D8D09F04905C11EC864E8383C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.237.16.0/22
163.53.144.0/22
220.233.4.0-220.233.11.255
220.233.36.0/22
220.233.44.0/22
Signature Algorithm: sha256WithRSAEncryption
72:4e:d1:20:76:3e:71:6c:d0:73:41:c5:6e:df:01:59:9d:93:
13:d9:8e:19:91:3a:ce:f4:4a:64:c0:75:02:59:cf:a3:e8:b9:
35:88:8f:b4:d8:ca:f4:64:01:21:e5:71:b6:b1:70:ef:5b:e5:
52:0a:f0:2e:3d:d4:ac:62:d7:85:e4:45:89:e2:2f:af:74:3c:
42:c8:7c:af:c3:36:7f:33:c4:52:a4:06:af:cc:6f:09:a3:f3:
09:0b:29:53:1f:3b:3a:a0:e3:38:39:a0:c1:72:13:61:ec:98:
98:bb:d4:f8:36:08:11:26:24:84:8f:e7:3a:64:47:f7:8c:56:
23:86:3c:cb:8c:cb:0a:66:3a:79:e2:d9:15:ee:ae:59:54:d4:
4b:94:e2:7a:56:25:f5:7c:95:42:a6:74:73:d0:73:73:30:7f:
49:0e:1e:37:d6:01:07:8d:cc:33:cb:61:ae:3c:1e:bf:85:6e:
fa:55:85:ca:4d:3b:cd:bc:fa:1c:16:ce:b8:4c:60:e0:32:b6:
47:02:7c:60:b5:08:db:f8:b6:1b:0d:e3:8b:d0:95:40:40:09:
48:8d:1a:6d:53:b8:e7:73:b4:6a:6a:76:bb:8e:15:06:3a:4e:
84:6a:b5:ef:6f:3d:4f:3f:58:39:ed:16:ef:04:cc:28:37:b9:
b5:15:95:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:42 2023 by rpki-client on console-fra.rpki-client.org