Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/57CDC39CBCE711EDB775B94AC4F9AE02.roa
File: 57CDC39CBCE711EDB775B94AC4F9AE02.roa (raw, json)
Hash identifier: WHHlTvMcZsenArx8zOp5o66x21pREqAFSi7G9NCy5ds=
Subject key identifier: 3E:D2:DA:09:9F:54:CD:F9:6A:A5:C5:9D:87:28:F4:EB:00:41:EC:E1
Certificate issuer: /CN=A919EC2D/serialNumber=B1EE8871063A0108335BDFAA3E3A13F9C9C790DE
Certificate serial: 33
Authority key identifier: B1:EE:88:71:06:3A:01:08:33:5B:DF:AA:3E:3A:13:F9:C9:C7:90:DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/se6IcQY6AQgzW9-qPjoT-cnHkN4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/57CDC39CBCE711EDB775B94AC4F9AE02.roa
Signing time: Sat 03 Jun 2023 08:16:45 +0000
ROA not before: Sat 03 Jun 2023 08:16:45 +0000
ROA not after: Sun 01 Oct 2023 00:00:00 +0000
asID: 136969
IP address blocks: 103.188.92.0/23 maxlen: 23
103.188.92.0/24 maxlen: 24
103.188.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51 (0x33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EC2D/serialNumber=B1EE8871063A0108335BDFAA3E3A13F9C9C790DE
Validity
Not Before: Jun 3 08:16:45 2023 GMT
Not After : Oct 1 00:00:00 2023 GMT
Subject: CN=647af6ec-18b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:11:53:76:c7:f9:ae:c9:16:b6:7a:8c:3e:2d:
e3:e8:94:8e:19:d4:8b:5e:9c:0b:16:10:bf:06:33:
db:7d:fd:b7:28:98:df:18:a4:f5:cd:67:b0:35:ec:
a0:f0:5b:a0:d3:f6:f2:a9:18:12:f1:57:a9:d4:f0:
aa:93:2b:0f:3d:01:71:39:0e:08:06:b2:67:e4:3d:
e5:cb:f4:85:49:f8:11:6c:44:52:4d:2b:e8:45:6a:
9a:ec:76:63:75:3d:d5:b4:e6:04:67:9e:72:53:ee:
71:a1:b5:c6:5a:3a:7e:f9:62:18:f6:53:bc:d6:f8:
3f:8e:fb:23:3c:9c:2b:f1:1b:87:d1:aa:c9:a4:41:
ca:a9:be:75:63:63:f1:0e:9f:e7:2c:a7:50:18:78:
59:c0:fd:7a:89:2f:65:32:05:d5:88:7f:dc:9d:b6:
07:8a:13:5c:23:9a:15:c6:91:17:75:70:1e:41:73:
69:08:a1:32:40:b4:bd:0c:4b:b7:30:9b:71:c4:b4:
7b:28:91:ee:03:fc:72:80:a6:b7:19:a4:11:c3:52:
0d:6f:19:2a:c4:90:51:14:cd:6c:b2:4b:bf:ce:fd:
16:a5:53:0f:78:06:56:4d:ea:3f:2b:67:8e:0b:72:
5a:9a:85:a5:b8:5d:58:d9:5d:67:04:4d:82:28:80:
b1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D2:DA:09:9F:54:CD:F9:6A:A5:C5:9D:87:28:F4:EB:00:41:EC:E1
X509v3 Authority Key Identifier:
keyid:B1:EE:88:71:06:3A:01:08:33:5B:DF:AA:3E:3A:13:F9:C9:C7:90:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/se6IcQY6AQgzW9-qPjoT-cnHkN4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/se6IcQY6AQgzW9-qPjoT-cnHkN4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/57CDC39CBCE711EDB775B94AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.188.92.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:ca:04:fe:0a:bd:b2:77:c3:86:25:07:cd:af:23:50:dd:38:
ca:a5:46:18:c2:81:6f:9f:ab:4d:64:8b:a6:9c:2e:42:80:82:
3a:97:31:e2:36:5a:e1:da:2a:ab:f4:ee:45:f2:80:6b:4e:47:
71:8d:82:1f:0f:6a:17:4b:d4:17:0b:62:90:0a:49:28:f5:b5:
59:60:e2:56:6f:a6:a7:f7:60:de:ac:a6:02:37:b1:45:81:d2:
d8:33:11:02:a2:5b:ed:24:74:be:f2:2f:ca:1e:d6:6b:4a:87:
e8:46:82:09:37:90:f3:7e:b2:98:10:d8:25:b5:0e:ab:3b:6e:
59:56:53:d8:40:f6:58:f0:cd:6d:d8:41:5c:fa:36:cd:96:68:
2f:42:65:d5:60:8b:67:cc:e8:ad:d3:01:2b:77:58:a4:64:03:
77:7d:17:96:63:21:91:47:e2:33:6e:fa:a8:ea:6c:fe:cd:3e:
7e:cf:e5:60:95:14:66:eb:d4:1b:c6:0d:f9:54:15:d4:1e:2e:
39:e9:9a:92:e4:20:64:96:83:e9:cc:3a:db:b5:7c:d1:bf:a1:
8f:b9:4b:22:18:07:65:27:37:64:6b:f6:3c:a0:1a:6f:7f:40:
51:7c:d0:9a:c4:c2:79:1e:04:4f:eb:ba:e8:89:76:de:1c:7b:
a1:33:ba:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 14 19:15:08 2023 by rpki-client on console-fra.rpki-client.org