Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167130/B4183DB21FD311EAABA6DB83C4F9AE02/588D1C30833E11EC9274432AC4F9AE02.roa
File: 588D1C30833E11EC9274432AC4F9AE02.roa (raw, json)
Hash identifier: bpVwIsH99/97c9h3XGknVFpU7yAtME4Ff1mBdDZD3Qc=
Subject key identifier: 5F:EA:34:E5:69:2C:ED:76:50:2E:93:8C:D7:0E:C7:BD:4E:B8:A6:05
Certificate issuer: /CN=A9167130/serialNumber=A7D6F1B02CF263FDD12912996EAD3C07A1A8CDD1
Certificate serial: 07E7
Authority key identifier: A7:D6:F1:B0:2C:F2:63:FD:D1:29:12:99:6E:AD:3C:07:A1:A8:CD:D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p9bxsCzyY_3RKRKZbq08B6GozdE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167130/B4183DB21FD311EAABA6DB83C4F9AE02/588D1C30833E11EC9274432AC4F9AE02.roa
Signing time: Wed 02 Feb 2022 21:07:10 +0000
ROA not before: Wed 02 Feb 2022 21:07:10 +0000
ROA not after: Thu 02 Jun 2022 00:00:00 +0000
asID: 139820
IP address blocks: 103.145.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2023 (0x7e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167130/serialNumber=A7D6F1B02CF263FDD12912996EAD3C07A1A8CDD1
Validity
Not Before: Feb 2 21:07:10 2022 GMT
Not After : Jun 2 00:00:00 2022 GMT
Subject: CN=61faf27d-1a1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:8a:85:02:39:2c:ea:19:ab:43:9a:87:e9:07:
62:99:09:9c:69:62:0f:7f:66:7c:15:d3:31:ca:72:
ae:6e:c7:00:3f:a1:cb:ca:85:18:94:dc:8a:a9:85:
c7:3f:82:cf:03:ea:c4:12:44:ac:53:44:a5:11:8f:
ae:0a:cb:ba:e2:47:71:f3:e5:e3:72:b0:12:85:ce:
af:c7:65:3c:d2:4f:96:c1:70:5f:b8:08:e3:c1:6b:
e5:5c:3d:24:dc:a6:61:eb:e2:ac:48:22:4b:2b:21:
f3:34:cd:4a:76:7b:af:1c:8a:19:13:dc:e1:6c:d4:
7a:ac:d6:a2:57:f0:9b:29:e2:f2:45:f3:33:e9:31:
a4:c5:10:da:c6:38:86:0e:26:74:3f:38:01:00:fa:
35:7d:c4:cf:51:0c:b2:9a:5c:ab:c2:a3:86:44:05:
fe:9c:2e:9e:df:98:5d:bd:d0:8a:80:24:a5:33:ff:
a0:de:eb:ad:b2:93:ec:76:7f:cb:78:4a:0f:c6:53:
a7:2e:af:49:85:84:41:b1:71:b2:0c:65:1d:55:a3:
62:c8:da:97:21:42:1e:8e:15:21:a5:47:8e:ce:ae:
56:e5:6d:55:a4:d9:e3:1f:a0:f1:d6:6e:54:d9:9d:
73:43:bd:ba:d8:db:ed:8f:9b:51:68:a7:ca:32:4a:
7e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:EA:34:E5:69:2C:ED:76:50:2E:93:8C:D7:0E:C7:BD:4E:B8:A6:05
X509v3 Authority Key Identifier:
keyid:A7:D6:F1:B0:2C:F2:63:FD:D1:29:12:99:6E:AD:3C:07:A1:A8:CD:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167130/B4183DB21FD311EAABA6DB83C4F9AE02/p9bxsCzyY_3RKRKZbq08B6GozdE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p9bxsCzyY_3RKRKZbq08B6GozdE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167130/B4183DB21FD311EAABA6DB83C4F9AE02/588D1C30833E11EC9274432AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.145.166.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:51:a7:f0:54:e9:95:a4:ce:bd:7e:ce:0e:eb:95:58:7b:b8:
45:b4:4f:fe:a3:93:10:80:b9:99:0a:e7:e9:ba:d1:3a:aa:e9:
1a:6d:7f:28:19:8b:7e:59:33:81:0b:0c:f4:0f:f8:6d:5a:90:
ad:69:65:87:25:98:f5:a6:b5:5b:3c:1b:ec:b2:89:e3:65:14:
5b:df:15:b4:bc:83:eb:e3:30:12:37:e1:30:d8:9b:b7:94:37:
a5:c8:91:9f:a2:61:34:63:55:21:df:6b:a3:90:89:7b:84:bc:
3b:d1:d8:15:ef:21:be:f0:bc:76:c5:43:f6:0e:c4:da:67:d0:
9d:2f:b3:f6:bc:e7:83:79:e6:85:d9:4c:b0:61:c5:e2:d2:95:
44:00:76:0f:3e:a0:77:d1:58:79:f8:04:16:b3:97:65:ab:20:
d5:70:50:f0:eb:84:ee:4b:22:bc:2b:7e:b9:3c:b2:b3:d7:50:
9a:52:d1:47:dd:e0:02:4a:05:93:47:cb:af:10:91:f4:8c:92:
38:46:ea:4c:04:d7:e0:39:24:1a:bf:30:0c:88:8f:ee:78:96:
ed:60:f5:a9:90:8e:3c:21:58:f5:09:ed:84:35:b2:79:52:50:
7a:16:c7:24:db:15:7f:01:14:60:ea:71:20:14:de:37:56:d7:
ee:a6:1b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:42 2023 by rpki-client on console-ams.rpki-client.org