Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/AAD815C8EAE311EC91966955C4F9AE02.roa
File: AAD815C8EAE311EC91966955C4F9AE02.roa (raw, json)
Hash identifier: A5shzTH2jMr5rkcAxTyfcAvg8BuSCURcLhwlFqNIJ4s=
Subject key identifier: 8D:83:F8:8C:2F:03:56:DA:29:2C:84:0E:44:C2:43:83:76:F3:59:A2
Certificate issuer: /CN=A9170829/serialNumber=B8F846B4353B6429AC4043F32BB7894CF83855FD
Certificate serial: 018B
Authority key identifier: B8:F8:46:B4:35:3B:64:29:AC:40:43:F3:2B:B7:89:4C:F8:38:55:FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/AAD815C8EAE311EC91966955C4F9AE02.roa
Signing time: Mon 27 Jun 2022 16:20:59 +0000
ROA not before: Mon 27 Jun 2022 16:20:59 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 212921
IP address blocks: 103.151.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 395 (0x18b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170829/serialNumber=B8F846B4353B6429AC4043F32BB7894CF83855FD
Validity
Not Before: Jun 27 16:20:59 2022 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=62b9d8eb-9fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1c:79:6f:dd:b8:4a:2b:95:e7:e9:db:0c:44:
8e:d2:24:f5:b4:51:61:80:a2:58:78:33:64:59:16:
44:45:fc:11:50:30:e4:28:da:69:ff:89:16:fc:b4:
8c:e8:7e:0e:fe:b9:cd:aa:a8:a1:8e:45:4c:9e:fe:
6f:84:74:be:6a:a5:97:3d:50:56:31:a3:d6:1f:34:
62:73:f8:77:ad:1f:cc:b5:1b:88:eb:1b:04:b5:02:
46:14:45:e9:82:0d:3c:0e:d8:0c:32:10:0e:be:df:
9e:81:d5:c7:95:30:2a:df:19:0a:65:68:9d:63:c2:
3c:f5:01:45:2c:51:0c:e2:45:9a:2c:c7:0f:8d:35:
23:3b:37:5a:b3:73:9c:d5:d7:eb:27:3b:80:ad:1a:
4e:b8:98:d6:a0:e3:c2:a6:08:0d:2c:84:1b:d9:d8:
16:b2:56:1f:3b:94:d4:05:1a:c9:ca:39:fa:e3:6f:
86:3f:34:56:18:cc:40:4e:b1:ae:76:be:cb:1f:db:
e6:52:25:f0:b2:33:12:f9:fa:e7:0b:c6:7d:6b:0a:
8e:b6:64:e5:7b:bd:76:f8:71:69:02:4f:62:41:34:
be:31:09:71:fe:ab:51:2c:a6:8f:73:70:84:8d:53:
3f:b3:51:63:7b:18:6e:96:38:b6:34:c2:e4:e0:4e:
50:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:83:F8:8C:2F:03:56:DA:29:2C:84:0E:44:C2:43:83:76:F3:59:A2
X509v3 Authority Key Identifier:
keyid:B8:F8:46:B4:35:3B:64:29:AC:40:43:F3:2B:B7:89:4C:F8:38:55:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/AAD815C8EAE311EC91966955C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.172.0/24
Signature Algorithm: sha256WithRSAEncryption
83:31:e6:20:49:bc:05:02:a7:32:b0:4b:fc:b1:e4:1c:2f:3e:
21:dd:af:b2:73:42:47:7b:62:bd:52:bf:5c:d1:4a:aa:53:4e:
65:c7:d6:ee:90:e1:00:a6:a9:b2:9e:5f:a2:b7:22:25:b9:07:
c4:da:43:f7:fd:fd:de:7d:ed:8d:8c:60:7c:59:cd:6e:40:9e:
13:44:14:8f:f2:ff:26:fd:da:f3:92:c0:6c:d1:ff:7e:df:03:
40:38:31:33:16:6a:ff:9d:c4:df:5c:ad:31:87:80:22:e0:d9:
4e:c5:aa:14:98:96:ef:c1:f5:7f:47:fd:94:6e:dc:b4:3b:af:
1f:c3:88:f2:c1:3d:6c:88:71:f7:a4:6a:4e:44:08:5b:5e:d3:
09:35:ab:4e:1a:e1:df:a0:09:71:a9:ff:41:2f:a9:2a:bd:d6:
55:4a:3e:c9:b2:77:53:28:38:5a:49:32:43:8e:bc:29:88:92:
4e:d5:a1:31:cc:ae:10:d3:73:e4:4e:b1:90:fa:e9:37:f8:de:
fb:04:e8:d0:98:1f:fd:8e:d2:40:55:f6:2e:62:6c:af:bb:fa:
d8:1f:d7:98:e8:51:26:5d:de:01:91:32:7c:03:23:ba:45:79:
a7:e9:a3:c8:15:90:fb:22:ff:99:fa:13:8e:be:ea:d8:57:56:
ca:30:6b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:46 2023 by rpki-client on console-fra.rpki-client.org