Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/5A55F0FC63A211EC96E8231DC4F9AE02.roa
File: 5A55F0FC63A211EC96E8231DC4F9AE02.roa (raw, json)
Hash identifier: D9GU/zA58kHT5P3zigE1oJdZZCUvjbL78qkSxrgKNSE=
Subject key identifier: 59:BD:5D:71:2D:2A:8B:58:08:EA:03:91:69:6A:77:E1:7E:E7:EE:00
Certificate issuer: /CN=A9170829/serialNumber=B8F846B4353B6429AC4043F32BB7894CF83855FD
Certificate serial: 41
Authority key identifier: B8:F8:46:B4:35:3B:64:29:AC:40:43:F3:2B:B7:89:4C:F8:38:55:FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/5A55F0FC63A211EC96E8231DC4F9AE02.roa
Signing time: Fri 21 Jan 2022 14:43:32 +0000
ROA not before: Fri 21 Jan 2022 14:43:32 +0000
ROA not after: Wed 31 Aug 2022 00:00:00 +0000
asID: 136526
IP address blocks: 103.151.172.0/24 maxlen: 24
103.151.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65 (0x41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170829/serialNumber=B8F846B4353B6429AC4043F32BB7894CF83855FD
Validity
Not Before: Jan 21 14:43:32 2022 GMT
Not After : Aug 31 00:00:00 2022 GMT
Subject: CN=61eac694-a242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:16:e8:a5:47:93:40:4d:26:75:e8:f9:4f:e2:
e0:99:ed:47:34:86:eb:1a:7e:aa:84:8c:f9:ec:d0:
db:fd:25:f5:28:09:83:f9:45:58:17:0e:a4:04:3a:
d6:65:fb:c2:27:48:2e:b8:f6:88:66:69:5d:5d:c7:
1e:bc:45:27:7c:81:dc:44:b9:22:80:2f:43:50:2b:
97:c2:6e:d6:3b:85:72:21:fa:3a:b0:24:35:a1:46:
3c:f3:17:cd:00:e8:6b:14:3f:05:c9:70:3b:a7:fd:
70:b2:10:6a:35:ad:e2:3a:d5:85:7e:06:0a:f8:0d:
d2:f2:8a:ed:72:62:ad:31:b3:b4:17:51:41:c2:5f:
51:50:57:4a:e0:67:8f:66:6a:7b:6f:4d:ef:65:7a:
89:be:30:e5:0f:6c:8f:0a:e3:5b:40:30:4f:38:a5:
d6:f5:3b:9c:51:50:33:6f:8b:cc:0b:5a:7c:7a:16:
e1:75:eb:7b:55:ef:6b:a0:ea:60:33:f0:ff:75:34:
22:27:b3:16:1c:3b:00:bd:b0:a9:8c:76:ee:b0:a6:
cf:eb:ba:52:be:13:15:f5:c2:44:45:1e:d9:cb:c0:
ca:83:0e:a9:aa:0f:61:79:33:e6:76:a9:98:dc:8d:
e7:34:8e:cf:8d:30:cd:c5:44:c0:21:15:e2:d7:8b:
a5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:BD:5D:71:2D:2A:8B:58:08:EA:03:91:69:6A:77:E1:7E:E7:EE:00
X509v3 Authority Key Identifier:
keyid:B8:F8:46:B4:35:3B:64:29:AC:40:43:F3:2B:B7:89:4C:F8:38:55:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/5A55F0FC63A211EC96E8231DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.172.0/23
Signature Algorithm: sha256WithRSAEncryption
46:ed:34:7e:8c:15:f4:0d:39:c4:10:5c:09:f1:ae:04:72:81:
4a:64:d6:b8:dc:b5:47:f1:bf:31:d0:3a:0a:a0:66:b1:7c:53:
e5:f7:13:29:a3:f6:40:ac:24:47:0a:8d:48:d5:12:3e:fa:5a:
3b:bd:32:75:e3:f1:ad:70:1f:9f:45:8b:49:f7:58:9c:76:ba:
73:c3:c2:8d:d0:d2:5f:c1:dd:b6:95:58:0d:17:c9:3c:b0:26:
31:32:1d:fb:93:4a:a6:93:86:f5:43:4c:45:e9:f4:a5:ce:73:
36:7d:a2:37:47:95:aa:84:e1:33:26:66:8e:65:d3:35:ae:5e:
7d:47:44:1b:d6:f9:39:74:30:6d:2c:ac:e2:ee:6b:28:1d:e3:
4f:c9:b1:bf:a7:fc:00:80:7f:03:4f:f8:80:bc:64:8f:20:fd:
2c:f4:fb:be:c7:c9:8c:ee:e4:fc:51:5f:49:78:1d:a1:b8:fe:
18:af:dc:27:21:69:d0:6b:89:dc:2c:11:8a:ba:76:9b:8d:34:
15:19:8a:20:41:f1:00:12:47:79:07:bf:c6:bb:b8:fd:5a:8c:
57:87:fe:db:3b:79:17:05:ac:7a:e5:a3:66:a7:c8:b8:60:08:
a9:fd:f0:3c:73:68:e2:a9:e3:f6:d3:20:f2:19:9d:00:b8:88:
0c:c6:07:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:43 2023 by rpki-client on console-ams.rpki-client.org