Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167130/B4183DB21FD311EAABA6DB83C4F9AE02/E20CD1281FD411EAAD21CF85C4F9AE02.roa
File: E20CD1281FD411EAAD21CF85C4F9AE02.roa (raw, json)
Hash identifier: YTag376T7fc1WMwLq4VdkU1exZR0TDdhqc4IluEzSFg=
Subject key identifier: 90:36:6E:07:AD:D4:8D:F5:7C:FC:53:91:B9:04:8A:59:CD:B3:2F:98
Certificate issuer: /CN=A9167130/serialNumber=A7D6F1B02CF263FDD12912996EAD3C07A1A8CDD1
Certificate serial: 0499
Authority key identifier: A7:D6:F1:B0:2C:F2:63:FD:D1:29:12:99:6E:AD:3C:07:A1:A8:CD:D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p9bxsCzyY_3RKRKZbq08B6GozdE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167130/B4183DB21FD311EAABA6DB83C4F9AE02/E20CD1281FD411EAAD21CF85C4F9AE02.roa
Signing time: Wed 09 Dec 2020 09:04:30 +0000
ROA not before: Wed 09 Dec 2020 09:04:30 +0000
ROA not after: Wed 02 Mar 2022 00:00:00 +0000
asID: 139820
IP address blocks: 103.145.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1177 (0x499)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167130/serialNumber=A7D6F1B02CF263FDD12912996EAD3C07A1A8CDD1
Validity
Not Before: Dec 9 09:04:30 2020 GMT
Not After : Mar 2 00:00:00 2022 GMT
Subject: CN=5fd0931e-cb42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2f:9c:1a:ae:43:33:b1:dc:33:dc:93:44:f5:
86:88:45:ad:03:31:25:b2:7d:79:fa:30:c3:8b:48:
7a:5f:43:8d:3c:a1:02:ae:b2:df:7e:03:eb:bf:31:
bb:06:f7:38:c5:b2:42:8e:b5:93:67:00:29:7c:07:
d0:65:16:4f:7a:87:2e:3b:e8:3d:56:10:7d:30:95:
3a:89:86:d7:73:6b:d5:38:02:bc:01:7b:18:99:db:
e2:47:cb:8e:9f:b1:19:ad:fd:66:8d:c2:37:47:01:
67:cf:4c:23:15:94:75:8e:4a:57:d4:b1:5f:79:0f:
9f:16:6f:40:95:91:84:bb:af:b7:17:92:76:ee:fa:
80:d9:d4:9e:69:f2:af:87:f3:17:aa:74:d7:fa:73:
c6:02:c6:82:b1:2b:fb:21:c1:ae:a7:ac:77:f8:ce:
a3:5c:08:b3:05:01:f6:7a:44:ec:ff:b6:8a:e3:06:
83:d7:3a:b1:00:f6:65:8c:51:45:b8:9d:09:0b:91:
f0:dd:36:79:ae:89:f6:55:a6:fa:c1:75:fe:18:d3:
f0:cb:1e:8e:fc:2f:80:c1:94:fe:c8:2e:60:70:fe:
82:c5:d3:af:c1:d6:ca:81:55:b5:cf:d0:8d:33:f4:
ba:eb:40:de:4f:07:fe:5c:52:ce:ff:d0:85:b8:8e:
30:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:36:6E:07:AD:D4:8D:F5:7C:FC:53:91:B9:04:8A:59:CD:B3:2F:98
X509v3 Authority Key Identifier:
keyid:A7:D6:F1:B0:2C:F2:63:FD:D1:29:12:99:6E:AD:3C:07:A1:A8:CD:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167130/B4183DB21FD311EAABA6DB83C4F9AE02/p9bxsCzyY_3RKRKZbq08B6GozdE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p9bxsCzyY_3RKRKZbq08B6GozdE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167130/B4183DB21FD311EAABA6DB83C4F9AE02/E20CD1281FD411EAAD21CF85C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.145.166.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:7c:dc:c3:9d:b1:b1:ca:5c:70:ff:aa:2c:09:aa:62:b5:0c:
e8:e1:27:6f:e6:51:e4:d4:88:d8:b5:39:24:e9:31:25:5c:dd:
97:c1:76:f6:d1:14:ea:11:21:67:ed:27:8c:bf:a8:ca:44:3e:
07:f4:2f:2f:0a:48:35:fe:9e:81:10:f1:ad:88:d7:13:72:9f:
a4:4f:5c:de:ef:44:6a:05:48:e2:04:e4:6e:61:17:ca:0d:58:
e0:06:22:e2:59:51:8d:d6:ea:1f:2b:4f:de:db:3b:77:d4:97:
d9:43:e4:3e:9e:29:a8:76:12:8f:81:09:00:db:da:5e:9a:4a:
49:25:98:0e:f0:01:15:f8:e4:af:3e:59:3b:c2:57:55:5f:ef:
29:14:e2:7b:cf:b2:78:0f:90:f1:03:2a:ff:74:30:28:04:df:
db:19:9d:3b:76:3d:78:a9:f6:b9:c1:d7:51:7e:bb:cb:fd:a6:
2a:32:99:6d:54:76:4c:01:58:53:56:65:51:50:95:d5:db:3d:
1a:30:9f:ee:9e:b4:41:e6:5e:5d:c6:d8:b8:08:a7:04:03:f2:
f1:07:d8:f5:3d:2b:88:02:35:78:08:cc:a9:d9:c5:f9:ed:3f:
58:5a:86:23:63:0e:a2:c0:2f:74:67:4f:ac:55:90:3d:74:1f:
ac:84:b4:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:42 2023 by rpki-client on console-ams.rpki-client.org