Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A755/BC665D4ED57D11EB8D378D25C4F9AE02/EE1B46FED58411EB807FEA37C4F9AE02.roa
File: EE1B46FED58411EB807FEA37C4F9AE02.roa (raw, json)
Hash identifier: CHGIZDKXTLBczhpXDtBBsmioVelHdRfZXe+w8AJfD3M=
Subject key identifier: 92:B0:F3:60:C5:27:F1:40:6B:5B:D6:29:2F:D4:07:FE:82:3D:7E:B0
Certificate issuer: /CN=A918A755/serialNumber=CFDF8F625DC5E43A99CC5378D77CE925910E9C10
Certificate serial: 03D3
Authority key identifier: CF:DF:8F:62:5D:C5:E4:3A:99:CC:53:78:D7:7C:E9:25:91:0E:9C:10
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z9-PYl3F5DqZzFN413zpJZEOnBA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A755/BC665D4ED57D11EB8D378D25C4F9AE02/EE1B46FED58411EB807FEA37C4F9AE02.roa
Signing time: Sun 01 Jan 2023 02:41:53 +0000
ROA not before: Sun 01 Jan 2023 02:41:53 +0000
ROA not after: Mon 01 May 2023 00:00:00 +0000
asID: 136610
IP address blocks: 103.145.230.0/24 maxlen: 24
103.145.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 979 (0x3d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A755/serialNumber=CFDF8F625DC5E43A99CC5378D77CE925910E9C10
Validity
Not Before: Jan 1 02:41:53 2023 GMT
Not After : May 1 00:00:00 2023 GMT
Subject: CN=63b0f2f1-df3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0b:af:9a:44:96:9d:0c:28:1b:62:8e:e6:51:
8c:bc:0f:ab:11:3a:74:bc:c8:53:95:51:f9:df:b0:
36:6f:96:00:c0:4c:78:8a:3b:89:59:33:a0:28:a5:
aa:a0:04:18:09:a7:6f:99:70:d1:e5:0b:63:b5:8a:
cc:68:7c:cc:97:a7:65:60:e0:24:b9:46:d2:47:94:
9a:13:1e:a3:7d:b6:c0:1f:80:2c:1d:5b:d8:82:68:
98:52:4b:71:6a:90:86:b3:af:80:0b:e6:81:54:32:
8c:82:66:37:63:f1:b6:71:8f:30:30:31:78:b3:30:
9c:aa:74:7e:4f:41:da:24:79:26:c9:02:d8:f3:fc:
11:8b:1b:04:01:16:35:e4:89:51:00:9d:1a:0f:2f:
a3:3f:73:39:91:88:ae:13:40:5a:bd:80:03:c2:91:
83:5f:89:5e:6f:d1:9f:3f:d3:d9:b1:5e:c7:d0:a5:
36:f3:72:62:7e:24:3d:85:14:93:99:d0:24:a7:70:
dd:07:8f:16:b5:2b:e1:1a:c7:30:0b:1e:02:b5:8d:
19:a4:cc:78:31:e1:99:b8:c6:0a:3f:10:b3:a2:88:
7b:f0:50:e9:64:a0:b6:be:cf:a5:1b:95:6b:a9:7c:
6a:e3:46:57:dd:ea:ce:b5:a2:7a:d9:8d:36:54:c4:
5d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B0:F3:60:C5:27:F1:40:6B:5B:D6:29:2F:D4:07:FE:82:3D:7E:B0
X509v3 Authority Key Identifier:
keyid:CF:DF:8F:62:5D:C5:E4:3A:99:CC:53:78:D7:7C:E9:25:91:0E:9C:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A755/BC665D4ED57D11EB8D378D25C4F9AE02/z9-PYl3F5DqZzFN413zpJZEOnBA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z9-PYl3F5DqZzFN413zpJZEOnBA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A755/BC665D4ED57D11EB8D378D25C4F9AE02/EE1B46FED58411EB807FEA37C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.145.230.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:4e:7e:d7:3c:6a:6c:38:fb:8d:0f:87:6e:8a:78:40:61:c1:
6d:1a:c7:d5:5c:aa:e6:c7:db:18:e4:cc:cf:ba:ea:fe:e9:26:
1a:60:b7:44:bc:d4:2a:3a:4f:2e:5d:40:0a:85:4d:d7:3e:77:
67:36:74:91:88:ab:79:ae:b8:81:4c:2a:c1:d0:85:5f:56:a0:
17:2d:cf:9a:37:38:4e:a4:f6:1c:68:86:69:9d:fe:d1:05:68:
b8:30:97:c8:a1:bc:2d:78:39:16:d5:e6:c1:7a:06:f2:21:5e:
fd:1f:03:bf:d7:f4:f2:de:07:75:c5:0c:cd:fd:96:ab:ce:1b:
a4:f3:5f:b5:07:ee:c8:e6:e9:fc:ce:d3:ec:0c:d7:cb:86:8f:
ab:45:6c:df:a9:e6:93:36:a6:7b:d3:6d:4a:a0:04:9c:4e:f1:
13:8b:6f:9e:d0:ee:20:e6:5f:96:83:4e:d2:cb:8e:2c:4b:18:
eb:47:4d:07:ac:68:bf:b4:15:c9:bc:0f:68:fb:cc:82:74:89:
94:d2:c6:da:1c:7c:33:95:4b:0a:76:23:b0:4c:57:68:64:b6:
52:57:b8:3e:d6:91:2a:95:b2:11:1f:8c:5e:bb:6d:39:5a:3a:
f0:8c:34:58:80:b7:51:f4:9e:cb:59:b3:53:87:5a:bf:64:ed:
14:bf:91:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:46 2023 by rpki-client on console-ams.rpki-client.org