Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9188B9C/D85B388A20E211EB8DF55746C4F9AE02/D45B742E82F811ECAD44511BC4F9AE02.roa
File: D45B742E82F811ECAD44511BC4F9AE02.roa (raw, json)
Hash identifier: 2c4LvcTsWC+Rp/jC+b0XJ8yS7CH9JtrBzKCG5inhzgk=
Subject key identifier: 80:C7:04:FE:C3:F4:72:F2:A4:61:A9:31:14:DA:EA:D3:1E:EA:63:57
Certificate issuer: /CN=A9188B9C/serialNumber=668FD6D75F5D99E2B2EEC11F4DD2A24E9C7C5254
Certificate serial: 0390
Authority key identifier: 66:8F:D6:D7:5F:5D:99:E2:B2:EE:C1:1F:4D:D2:A2:4E:9C:7C:52:54
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zo_W119dmeKy7sEfTdKiTpx8UlQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9188B9C/D85B388A20E211EB8DF55746C4F9AE02/D45B742E82F811ECAD44511BC4F9AE02.roa
Signing time: Thu 03 Feb 2022 00:30:02 +0000
ROA not before: Thu 03 Feb 2022 00:30:02 +0000
ROA not after: Thu 02 Jun 2022 00:00:00 +0000
asID: 141391
IP address blocks: 103.158.13.0/24 maxlen: 24
2406:abc0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 912 (0x390)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9188B9C/serialNumber=668FD6D75F5D99E2B2EEC11F4DD2A24E9C7C5254
Validity
Not Before: Feb 3 00:30:02 2022 GMT
Not After : Jun 2 00:00:00 2022 GMT
Subject: CN=61fb2209-017e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:59:cf:95:24:63:6d:7d:bd:04:ec:91:11:75:
a4:23:2c:ab:7d:43:e8:c9:6f:36:6c:c6:cb:40:2c:
ed:72:47:d9:53:18:44:a4:2d:eb:7d:2d:b2:43:ed:
aa:53:a0:ee:b4:2e:65:8b:bc:ee:d9:4f:c3:cc:71:
16:48:ab:ea:21:29:8d:10:db:0b:ef:78:40:6c:42:
f4:17:44:e2:1a:66:a9:a2:c3:c8:92:ee:2f:6c:8a:
56:94:96:57:29:51:09:19:07:99:5a:eb:25:eb:39:
e3:30:0a:f2:9e:e1:9d:18:a9:28:11:e4:c4:ea:e9:
2a:4e:c2:e3:76:d0:b9:05:3f:37:ce:e3:da:3d:c5:
ba:a3:37:cc:2e:73:19:0c:d9:c5:20:99:b9:39:19:
dd:fe:48:99:b7:1d:42:dd:44:d3:ec:77:4b:8b:9f:
8e:4f:ce:3e:2d:86:cc:a9:25:34:61:21:29:25:e8:
e8:ab:b5:d4:55:96:2f:bb:1b:c8:55:cc:03:d0:c3:
3f:35:f6:cd:1b:d8:4a:55:70:24:40:08:27:5d:a3:
c6:25:93:aa:30:56:cb:46:6a:76:97:8e:ed:6b:cf:
b8:8f:20:35:83:31:b4:93:48:01:a0:f8:c0:ca:ba:
13:06:02:cd:c4:e1:bb:24:d5:eb:a4:16:ec:b1:88:
47:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C7:04:FE:C3:F4:72:F2:A4:61:A9:31:14:DA:EA:D3:1E:EA:63:57
X509v3 Authority Key Identifier:
keyid:66:8F:D6:D7:5F:5D:99:E2:B2:EE:C1:1F:4D:D2:A2:4E:9C:7C:52:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9188B9C/D85B388A20E211EB8DF55746C4F9AE02/Zo_W119dmeKy7sEfTdKiTpx8UlQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zo_W119dmeKy7sEfTdKiTpx8UlQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188B9C/D85B388A20E211EB8DF55746C4F9AE02/D45B742E82F811ECAD44511BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.158.13.0/24
IPv6:
2406:abc0::/32
Signature Algorithm: sha256WithRSAEncryption
5d:9f:fc:74:10:7a:5f:3a:f0:7a:f0:20:f7:31:a4:94:57:af:
89:1a:8b:7b:59:d6:9d:f0:78:e5:af:8c:34:df:6e:69:40:6a:
6a:cd:cb:53:6d:84:91:24:5c:ac:0a:e4:eb:18:22:47:f9:51:
a0:f0:e6:e3:f7:0d:1e:87:9d:49:30:f0:5c:ad:95:c7:41:1a:
38:1a:4c:52:be:14:cd:68:67:17:ac:2c:86:e1:4e:b1:e2:2a:
87:10:97:85:cd:c4:53:f2:66:9c:56:27:bc:b5:fe:22:bd:55:
d4:2e:a7:57:58:aa:16:29:c5:9d:0b:ca:c9:0b:7a:dd:3e:d6:
b3:c6:34:59:2f:fa:48:51:58:35:2d:01:3f:32:82:9f:20:38:
5b:63:d0:b1:ec:39:b6:e8:90:e3:a9:70:d5:64:82:b2:d0:d1:
f0:ee:8f:f8:1d:be:45:44:22:1b:6a:57:16:3b:91:82:da:02:
49:06:7d:b7:a9:f0:5d:98:25:55:c8:f1:da:9f:6e:d1:0e:f2:
ba:ad:a1:4b:d0:92:b1:23:c9:1f:7d:a8:41:08:43:0a:06:a7:
3b:2f:75:b9:fd:ef:84:d5:b8:39:2a:1c:cb:27:cb:c4:03:64:
a7:8d:87:e1:e5:e2:33:11:4c:c2:1c:97:c1:8e:95:1e:1e:1a:
28:c7:9b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:25 2024 by rpki-client on console-ams.rpki-client.org