Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A5CA/5D634986E96211EAA4658420C4F9AE02/256FBD14E96411EA89890526C4F9AE02.roa
File: 256FBD14E96411EA89890526C4F9AE02.roa (raw, json)
Hash identifier: 32kLXFflJijQKcz09HqTHGj4oHFBMmgEdrg/U8Jhil0=
Subject key identifier: 16:CC:FD:BB:FC:84:94:E7:F8:90:AF:71:59:A3:77:81:F1:53:94:22
Certificate issuer: /CN=A918A5CA/serialNumber=392570554339A9B5B04C45C4E4B8614DC6F43CE2
Certificate serial: 051A
Authority key identifier: 39:25:70:55:43:39:A9:B5:B0:4C:45:C4:E4:B8:61:4D:C6:F4:3C:E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSVwVUM5qbWwTEXE5LhhTcb0POI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A5CA/5D634986E96211EAA4658420C4F9AE02/256FBD14E96411EA89890526C4F9AE02.roa
Signing time: Thu 02 Jun 2022 11:27:27 +0000
ROA not before: Thu 02 Jun 2022 11:27:27 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 136574
IP address blocks: 103.93.76.0/22 maxlen: 22
103.93.76.0/24 maxlen: 24
103.93.77.0/24 maxlen: 24
103.93.78.0/24 maxlen: 24
103.93.79.0/24 maxlen: 24
123.253.108.0/22 maxlen: 22
123.253.108.0/24 maxlen: 24
123.253.109.0/24 maxlen: 24
123.253.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1306 (0x51a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A5CA/serialNumber=392570554339A9B5B04C45C4E4B8614DC6F43CE2
Validity
Not Before: Jun 2 11:27:27 2022 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=62989e9f-369f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:71:61:d0:d4:3b:05:7b:2d:bc:e2:61:1c:8e:
d6:a4:56:5f:60:c8:45:91:ac:46:ba:04:09:d9:3a:
17:94:90:71:ce:0c:5f:e9:10:c5:ed:92:d6:fe:a2:
de:0b:6b:45:4e:1f:a7:4c:6b:f4:ac:a4:0e:7f:a0:
73:b6:de:27:8b:11:ac:11:d6:71:96:8c:9e:9f:8e:
1b:bd:26:c3:d4:b5:5a:47:c5:5f:9d:14:f5:8b:57:
c5:73:7f:d9:7b:20:e1:78:85:d5:06:06:9d:58:61:
89:fa:a1:04:55:d6:76:a0:5f:99:da:03:ae:96:9b:
4b:36:19:0c:e9:97:05:43:ba:2e:9b:2f:66:e9:70:
89:e6:f9:41:50:fd:48:06:a3:8e:20:18:db:28:68:
5a:95:22:ba:ee:f6:33:7f:5e:ca:90:12:16:4e:9e:
6a:7a:93:ab:62:d5:00:d5:56:50:f2:47:f2:a3:b0:
5e:7d:4a:75:94:8a:0d:77:2d:ee:de:a6:19:3b:b2:
c4:7a:51:25:a4:69:00:eb:7d:7e:34:50:14:69:d6:
c8:fa:c0:16:3f:e3:00:7a:e4:aa:ab:67:83:bf:3c:
98:c7:24:92:ce:61:87:5b:e3:6f:1a:92:6a:2c:2f:
7e:3f:d5:03:45:1c:8f:14:97:25:8c:91:80:37:fa:
04:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:CC:FD:BB:FC:84:94:E7:F8:90:AF:71:59:A3:77:81:F1:53:94:22
X509v3 Authority Key Identifier:
keyid:39:25:70:55:43:39:A9:B5:B0:4C:45:C4:E4:B8:61:4D:C6:F4:3C:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A5CA/5D634986E96211EAA4658420C4F9AE02/OSVwVUM5qbWwTEXE5LhhTcb0POI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSVwVUM5qbWwTEXE5LhhTcb0POI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A5CA/5D634986E96211EAA4658420C4F9AE02/256FBD14E96411EA89890526C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.93.76.0/22
123.253.108.0/22
Signature Algorithm: sha256WithRSAEncryption
18:a6:63:b6:bf:89:7d:ba:e8:da:a0:8f:b0:51:3e:5c:7e:14:
21:4e:cb:9f:64:51:24:21:cf:ff:76:45:a7:63:d3:ef:7b:c5:
52:41:64:4b:95:0d:dc:ca:8d:6c:d1:bd:4e:2f:81:f2:ec:76:
dc:d2:40:fb:6e:c2:f0:1b:37:14:8f:6c:76:b1:be:cc:a4:cf:
d4:9d:d5:eb:57:0a:44:54:75:1c:ec:19:ce:c4:7a:8d:79:58:
0f:84:ce:10:ea:b1:27:1a:c1:d0:e2:16:2a:45:e7:a5:9a:9c:
99:f1:17:5b:d4:cd:ec:93:e5:76:7a:9c:be:db:04:ea:46:2d:
4a:fb:51:b9:60:eb:bd:ee:8f:fb:23:e1:a6:3c:58:a2:cd:75:
9f:be:eb:68:8d:de:09:36:8a:37:ad:40:34:4c:a9:f6:c1:c0:
1d:f3:b7:ba:a2:ba:81:97:c7:6f:2e:03:b7:eb:a9:a0:ca:c2:
7f:a1:e6:e9:f3:65:f8:f6:f6:d3:0b:4c:f7:e3:d0:5a:f3:c1:
28:e7:02:ab:99:98:0a:0e:ec:32:18:36:37:35:86:8c:14:db:
21:18:50:7a:c3:af:36:5c:6a:5b:a6:08:08:c2:85:cd:f4:47:
18:56:cd:af:66:40:46:3a:66:01:ee:fd:fb:a4:b8:0e:98:e4:
6c:fb:65:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:49 2023 by rpki-client on console-fra.rpki-client.org