Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9188CFF/C42B971C35B111ECBFB23877C4F9AE02/C0488CA235B311ECA4F54978C4F9AE02.roa
File: C0488CA235B311ECA4F54978C4F9AE02.roa (raw, json)
Hash identifier: ClWHlyreI0wYbbBj925WE+bkf4+k1PF7N9NhyZxMFZ4=
Subject key identifier: 42:FB:E4:73:98:3A:3F:83:24:20:A7:11:34:AE:9F:B1:74:6F:F3:D4
Certificate issuer: /CN=A9188CFF/serialNumber=F6F677788F69FB44CD07804C33A9660F3E7F5BE1
Certificate serial: F0
Authority key identifier: F6:F6:77:78:8F:69:FB:44:CD:07:80:4C:33:A9:66:0F:3E:7F:5B:E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9vZ3eI9p-0TNB4BMM6lmDz5_W-E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9188CFF/C42B971C35B111ECBFB23877C4F9AE02/C0488CA235B311ECA4F54978C4F9AE02.roa
Signing time: Mon 21 Feb 2022 03:52:20 +0000
ROA not before: Mon 21 Feb 2022 03:52:20 +0000
ROA not after: Fri 31 Mar 2023 00:00:00 +0000
asID: 139702
IP address blocks: 103.162.86.0/23 maxlen: 23
103.162.86.0/24 maxlen: 24
103.162.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 240 (0xf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9188CFF/serialNumber=F6F677788F69FB44CD07804C33A9660F3E7F5BE1
Validity
Not Before: Feb 21 03:52:20 2022 GMT
Not After : Mar 31 00:00:00 2023 GMT
Subject: CN=62130c73-9ab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:45:44:3f:e5:01:90:54:65:91:49:4d:9c:51:
78:c5:e7:48:42:72:29:be:d8:7f:3b:16:ce:9a:c4:
60:51:7e:ef:f0:bb:62:0a:ad:f7:c6:41:75:65:37:
b3:9d:22:a6:e9:0f:0e:e6:c8:e1:9b:0f:f2:51:1d:
5a:d9:79:95:8d:0e:67:52:68:f7:f9:4a:fe:ae:ef:
c1:8a:e7:87:d4:2a:d3:82:84:e2:6f:7e:64:64:8f:
a3:08:48:d2:a7:09:40:f8:35:48:23:4d:0e:71:4d:
56:1e:c2:87:e7:f8:7d:52:6a:c2:f3:25:15:1b:85:
22:fa:0a:5b:e6:17:14:af:c7:bc:64:40:90:02:2a:
81:57:1a:04:5e:a4:31:17:49:fb:cb:38:68:d3:95:
dd:2f:a0:bd:d8:c2:03:19:e4:52:d9:b5:2f:29:0f:
90:39:b0:a2:2a:67:d6:72:40:10:37:e0:1e:e5:06:
99:0f:d0:60:27:45:a2:0d:a0:79:3b:52:f3:de:0d:
4b:ad:9f:c3:ce:51:28:b0:0a:e7:ea:58:a9:45:f1:
c6:4e:47:99:7a:3f:00:49:bd:d9:7e:e3:b4:ad:a1:
7d:12:ae:93:38:89:da:fc:c8:86:7e:d4:26:7d:52:
73:d4:a1:a1:43:7c:52:57:86:df:e4:47:e4:f1:67:
fa:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:FB:E4:73:98:3A:3F:83:24:20:A7:11:34:AE:9F:B1:74:6F:F3:D4
X509v3 Authority Key Identifier:
keyid:F6:F6:77:78:8F:69:FB:44:CD:07:80:4C:33:A9:66:0F:3E:7F:5B:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9188CFF/C42B971C35B111ECBFB23877C4F9AE02/9vZ3eI9p-0TNB4BMM6lmDz5_W-E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9vZ3eI9p-0TNB4BMM6lmDz5_W-E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188CFF/C42B971C35B111ECBFB23877C4F9AE02/C0488CA235B311ECA4F54978C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.162.86.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:bf:fb:4f:34:83:11:bf:75:5e:4f:f6:ab:f1:ec:1f:8c:ed:
e6:e7:36:1d:73:97:71:ee:ab:d4:f4:9d:85:42:8c:7b:b1:c5:
f2:6c:f6:26:2b:50:75:a1:20:e5:25:5d:a6:4a:13:84:db:99:
88:c0:79:88:d6:7c:e7:0a:73:ad:90:9a:90:40:83:01:8e:d4:
f8:04:09:bb:a7:cf:b5:8a:f8:88:74:f9:8d:e5:ae:4f:df:2a:
8f:de:04:47:14:1d:97:70:df:35:e2:3c:24:22:67:ae:11:db:
a8:4a:0f:bc:ab:7c:bd:75:d5:20:ef:fe:5f:40:5d:bd:60:de:
63:a8:8a:58:59:17:3d:3a:04:ca:10:94:73:7f:85:bf:47:84:
aa:6c:f9:c4:11:ac:c2:9b:10:60:ac:a8:9b:c4:e8:34:73:3b:
4b:55:0f:a3:3a:7b:57:d0:09:01:e5:8d:a7:d6:b2:84:4d:6e:
ca:51:f2:76:ba:65:b6:12:e5:d8:50:17:03:95:09:08:0c:49:
e5:23:bb:b8:75:37:05:f5:1e:ef:a8:f1:65:26:ee:3f:ba:58:
5e:a8:1f:93:4a:b1:e6:ae:4c:d1:8d:6f:ab:63:42:07:30:50:
c3:3c:67:65:f1:b5:ec:cd:b5:60:fd:ac:9e:ec:55:3c:95:1b:
40:6a:87:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:49 2023 by rpki-client on console-fra.rpki-client.org