Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160744/8916DDAED1F511EC822F0E70C4F9AE02/38E03A76D1F811ECA315F671C4F9AE02.roa
File: 38E03A76D1F811ECA315F671C4F9AE02.roa (raw, json)
Hash identifier: tY/p33WPfKK2W7vZ3KJG6/gC9bS9xOWzBNVb1QmSTSM=
Subject key identifier: BA:D0:52:25:17:C3:42:A9:A7:58:15:04:8F:42:36:22:DA:DF:62:E2
Certificate issuer: /CN=A9160744/serialNumber=8905B2119A20B38CA1266821D3ACC94B4B284F12
Certificate serial: 03
Authority key identifier: 89:05:B2:11:9A:20:B3:8C:A1:26:68:21:D3:AC:C9:4B:4B:28:4F:12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQWyEZogs4yhJmgh06zJS0soTxI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160744/8916DDAED1F511EC822F0E70C4F9AE02/38E03A76D1F811ECA315F671C4F9AE02.roa
Signing time: Thu 12 May 2022 13:34:18 +0000
ROA not before: Thu 12 May 2022 13:34:18 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 16509
IP address blocks: 103.187.14.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160744/serialNumber=8905B2119A20B38CA1266821D3ACC94B4B284F12
Validity
Not Before: May 12 13:34:18 2022 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=627d0cda-4c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:86:e5:57:c4:ca:ae:02:f2:15:8e:1a:56:e6:
0a:5d:ec:87:a9:20:1a:bb:a0:16:9a:f3:c1:55:7a:
ae:88:43:cd:e7:e5:a9:86:57:77:b0:5b:df:3e:3d:
fb:b0:2a:31:2f:e4:95:18:5d:55:9a:6f:4e:d8:c4:
dc:45:88:66:51:d1:af:d7:da:4b:5a:43:e3:54:ca:
39:31:33:98:6f:98:13:25:92:19:d2:2b:f0:54:3c:
17:35:8e:b8:5c:b5:e9:22:9d:60:0c:3a:41:10:4e:
30:d9:4b:54:f6:a1:d7:8c:58:99:5b:f6:fb:74:0f:
61:f2:e9:0c:6d:7a:13:46:d4:43:9c:74:53:cc:ee:
b3:a1:cb:81:26:89:04:67:54:cc:f8:a8:ae:c0:1d:
6b:cc:ff:cb:ff:04:d3:78:e4:df:cf:39:15:e9:11:
3a:a6:40:a5:b5:56:3a:3a:7a:8e:2a:a5:6f:a7:48:
e0:3c:36:49:9e:db:3f:de:53:b0:4f:54:65:02:8e:
5b:dd:04:c1:fd:33:0d:80:e1:96:51:50:7f:b9:48:
4a:52:67:03:42:0d:1d:c2:40:16:ff:0b:6e:85:72:
44:20:bf:df:db:ba:3e:29:43:96:6a:fe:4e:34:f0:
c7:5c:f0:c2:d4:6c:2a:24:8c:e7:11:16:a4:4c:c5:
23:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D0:52:25:17:C3:42:A9:A7:58:15:04:8F:42:36:22:DA:DF:62:E2
X509v3 Authority Key Identifier:
keyid:89:05:B2:11:9A:20:B3:8C:A1:26:68:21:D3:AC:C9:4B:4B:28:4F:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160744/8916DDAED1F511EC822F0E70C4F9AE02/iQWyEZogs4yhJmgh06zJS0soTxI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQWyEZogs4yhJmgh06zJS0soTxI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160744/8916DDAED1F511EC822F0E70C4F9AE02/38E03A76D1F811ECA315F671C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.187.14.0/23
Signature Algorithm: sha256WithRSAEncryption
23:aa:0f:11:d4:27:06:ca:0a:2e:c2:e8:69:5b:6c:69:eb:13:
67:57:64:d1:72:2e:50:9c:d5:90:b6:e7:de:21:3e:8b:a0:b3:
bf:63:2a:4c:4e:69:62:4c:8e:49:b0:51:bb:54:f4:b6:1a:9d:
bb:16:4d:0f:34:7d:c8:00:9e:28:32:c0:50:55:cc:03:c3:56:
47:26:d5:49:97:d5:52:e4:55:81:9a:6c:5b:5f:87:a3:35:2d:
b1:b1:96:28:38:65:52:05:17:30:ce:44:c8:21:e3:41:b1:d5:
ae:11:83:b2:04:58:72:ae:1c:45:85:76:2e:64:13:1f:7b:ba:
d2:42:a4:a7:e7:0b:3a:69:b2:60:0b:6a:f9:b2:ec:50:65:09:
92:f1:fe:f5:f3:e4:e4:9c:5b:24:2f:a8:70:8b:63:8a:c5:a9:
80:14:0a:ad:a8:5b:ec:3f:67:76:6c:a9:45:d5:b3:60:ab:1d:
20:3b:b3:06:01:78:cb:4d:4d:a4:f7:9a:2c:2f:6c:0e:c6:7f:
ae:0d:56:9b:c4:5b:20:1e:6b:09:88:03:fa:39:20:6d:31:12:
b1:94:a4:17:e7:c6:2a:ee:89:be:b0:81:5d:71:8c:b9:bd:15:
5c:ec:87:9b:a2:ed:63:b2:68:e0:a1:44:e2:21:19:79:e5:df:
23:0a:a4:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:08 2024 by rpki-client on console-ams.rpki-client.org