Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9162BC1/2B893194621C11EC8A230317C4F9AE02/083170EC621E11ECBFD74317C4F9AE02.roa
File: 083170EC621E11ECBFD74317C4F9AE02.roa (raw, json)
Hash identifier: 0Z9rGeKO90DJ94IYCyR86i3se7LaRmJpiw26+klV/rs=
Subject key identifier: 6D:F5:CA:5D:98:A0:E1:E8:12:EA:9B:82:12:10:72:0B:04:93:54:9C
Certificate issuer: /CN=A9162BC1/serialNumber=5C560493835204747A367E66831400012E6DC367
Certificate serial: 02
Authority key identifier: 5C:56:04:93:83:52:04:74:7A:36:7E:66:83:14:00:01:2E:6D:C3:67
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XFYEk4NSBHR6Nn5mgxQAAS5tw2c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9162BC1/2B893194621C11EC8A230317C4F9AE02/083170EC621E11ECBFD74317C4F9AE02.roa
Signing time: Tue 21 Dec 2021 05:22:47 +0000
ROA not before: Tue 21 Dec 2021 05:22:47 +0000
ROA not after: Fri 30 Dec 2022 00:00:00 +0000
asID: 55933
IP address blocks: 45.125.12.0/22 maxlen: 24
103.39.108.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162BC1/serialNumber=5C560493835204747A367E66831400012E6DC367
Validity
Not Before: Dec 21 05:22:47 2021 GMT
Not After : Dec 30 00:00:00 2022 GMT
Subject: CN=61c164a7-d4fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a6:61:75:5d:9b:51:a2:b5:6b:61:95:66:32:
36:57:d6:f1:5d:6d:2e:1e:d7:17:86:28:24:82:10:
26:50:eb:1c:ff:d2:e2:0a:a9:9f:25:89:1f:b6:44:
69:1f:7a:88:d0:3b:a6:3e:f9:e3:cb:dc:6b:4b:0f:
3f:ab:48:f2:86:c2:85:46:ec:3a:29:1b:ec:86:a0:
f8:3d:89:77:15:15:31:97:15:cc:92:61:93:54:c1:
81:cb:e9:20:9c:4b:7f:bd:28:44:d9:8e:71:8a:d9:
bc:ac:4d:4e:aa:55:df:4f:e6:de:a5:79:40:c0:ab:
d8:5f:f1:1b:65:78:0e:0a:0d:5f:62:a2:b0:10:a6:
ac:f0:f8:a8:8e:2a:5b:6c:e8:a8:dc:68:ad:92:e4:
f6:70:fe:7f:cf:3f:df:2f:90:1f:4d:3a:bc:b3:ee:
bd:52:3c:46:0f:d8:4a:3b:45:a1:d4:1d:39:89:0f:
3b:9e:63:40:4e:72:af:e2:dc:3e:85:6d:a3:f1:57:
79:f1:df:7e:6e:5b:84:d9:8f:bb:b6:32:2b:93:f9:
80:7a:f5:b4:24:e8:07:d1:69:d9:a2:67:bf:4d:61:
69:c4:19:0d:62:d1:e1:0a:06:f4:d6:a5:e9:6e:f9:
f5:4b:b5:ff:f1:1e:f0:e7:50:30:a4:aa:ce:28:51:
cc:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:F5:CA:5D:98:A0:E1:E8:12:EA:9B:82:12:10:72:0B:04:93:54:9C
X509v3 Authority Key Identifier:
keyid:5C:56:04:93:83:52:04:74:7A:36:7E:66:83:14:00:01:2E:6D:C3:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9162BC1/2B893194621C11EC8A230317C4F9AE02/XFYEk4NSBHR6Nn5mgxQAAS5tw2c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XFYEk4NSBHR6Nn5mgxQAAS5tw2c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162BC1/2B893194621C11EC8A230317C4F9AE02/083170EC621E11ECBFD74317C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.125.12.0/22
103.39.108.0/22
Signature Algorithm: sha256WithRSAEncryption
39:73:11:cb:70:df:e7:9f:2d:65:b4:e9:09:aa:9f:b6:c1:90:
23:4c:e3:e2:df:d1:66:80:0f:6c:04:b4:24:b9:1d:16:98:34:
5d:13:ad:b6:f0:86:19:c2:91:19:b0:2f:03:b9:a3:7f:1b:12:
62:ff:d1:91:bd:42:39:20:8c:c4:8f:f2:93:c8:01:dd:79:23:
8f:7c:f8:a1:6f:63:dd:46:96:6e:0d:1f:b1:01:87:af:07:01:
bb:a1:fa:b3:eb:12:29:5f:93:b6:85:f5:d8:10:5f:79:70:19:
ac:4c:8d:38:d1:44:10:af:33:78:5a:72:30:61:c2:fb:be:27:
8c:4a:b6:30:12:0e:c8:ca:50:d0:78:8e:27:59:1d:0e:b4:c9:
57:f9:34:c6:80:1b:86:b3:87:93:d5:20:1a:0f:3f:a9:db:6a:
19:90:fa:94:d0:29:e1:03:78:69:71:7e:14:e8:d6:e4:03:47:
f7:3b:16:7a:49:63:88:fc:40:2a:fd:c4:9a:a3:d1:10:75:12:
cb:1c:a4:ee:ba:6e:15:ee:3f:69:2d:30:81:b1:56:0a:8e:47:
6a:c7:8e:2c:71:ba:4e:48:f9:6a:93:dc:85:6f:5e:c5:40:d7:
da:d9:79:11:e5:70:a5:e0:37:ad:57:0b:fc:f4:e6:5a:8e:e4:
f3:9a:ac:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:45 2023 by rpki-client on console-fra.rpki-client.org