Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE6D7/5D7E6E1019E311EDB3816581C4F9AE02/33EDE2CA19E711EDB2D4CA32C4F9AE02.roa
File: 33EDE2CA19E711EDB2D4CA32C4F9AE02.roa (raw, json)
Hash identifier: l5zu6ECCKO5Syksejmfc3YfLwgKXlXjdflhvk9+bTBs=
Subject key identifier: 15:AC:C3:39:AF:9C:FA:8C:C2:73:27:5C:45:DD:5C:CD:65:7B:9F:42
Certificate issuer: /CN=A91BE6D7/serialNumber=9F7CD8B931FD07FDF127A8D55A9BCB8F0D91DA6B
Certificate serial: 0D
Authority key identifier: 9F:7C:D8:B9:31:FD:07:FD:F1:27:A8:D5:5A:9B:CB:8F:0D:91:DA:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n3zYuTH9B_3xJ6jVWpvLjw2R2ms.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BE6D7/5D7E6E1019E311EDB3816581C4F9AE02/33EDE2CA19E711EDB2D4CA32C4F9AE02.roa
Signing time: Mon 15 Aug 2022 22:03:30 +0000
ROA not before: Mon 15 Aug 2022 22:03:30 +0000
ROA not after: Tue 31 Jan 2023 00:00:00 +0000
asID: 212238
IP address blocks: 103.175.26.0/24 maxlen: 24
103.175.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13 (0xd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BE6D7/serialNumber=9F7CD8B931FD07FDF127A8D55A9BCB8F0D91DA6B
Validity
Not Before: Aug 15 22:03:30 2022 GMT
Not After : Jan 31 00:00:00 2023 GMT
Subject: CN=62fac2b2-ae4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:60:46:dc:a9:ba:2e:70:f2:40:82:fb:8d:e7:
4f:8f:17:92:18:5d:62:0a:9d:48:9a:10:65:21:af:
49:3d:b0:65:58:cf:21:a5:e7:67:26:db:3f:88:47:
bf:c4:e4:29:4b:b6:22:b5:08:8c:64:13:f5:84:0d:
3b:a6:f5:d2:fa:08:a1:86:85:a1:1f:f3:9a:8d:5c:
ff:82:7b:c2:25:0c:c2:40:91:71:07:fe:87:9c:c7:
c4:86:d3:31:99:2b:40:43:00:bd:eb:0c:37:8a:57:
97:a9:ba:41:8b:71:37:6b:9b:14:31:17:ae:ec:fa:
8c:d2:c6:bd:c8:9b:35:7a:d1:96:36:17:9d:c9:81:
aa:e7:ec:54:5d:66:67:e6:3c:e6:27:60:e3:5a:9d:
2f:c8:36:91:c3:03:5f:ef:14:3d:94:4a:44:aa:69:
96:17:98:78:71:9b:1b:b8:4f:17:24:b4:1d:27:9a:
2f:a0:0c:ba:27:be:d3:05:c2:23:72:f0:0b:5d:93:
74:21:ff:aa:2a:6d:47:4f:eb:50:bd:c8:1e:8f:40:
06:6a:e5:ca:9e:dc:7d:41:1b:0e:ae:07:c0:0c:40:
ea:de:e9:29:84:a7:98:1f:aa:ed:f8:da:04:d6:09:
ea:af:49:f5:72:13:a0:68:c5:76:2d:42:55:e9:74:
b3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:AC:C3:39:AF:9C:FA:8C:C2:73:27:5C:45:DD:5C:CD:65:7B:9F:42
X509v3 Authority Key Identifier:
keyid:9F:7C:D8:B9:31:FD:07:FD:F1:27:A8:D5:5A:9B:CB:8F:0D:91:DA:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BE6D7/5D7E6E1019E311EDB3816581C4F9AE02/n3zYuTH9B_3xJ6jVWpvLjw2R2ms.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n3zYuTH9B_3xJ6jVWpvLjw2R2ms.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE6D7/5D7E6E1019E311EDB3816581C4F9AE02/33EDE2CA19E711EDB2D4CA32C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.175.26.0/23
Signature Algorithm: sha256WithRSAEncryption
02:97:9a:1a:cd:0f:7f:da:a2:1d:92:4b:34:b9:0c:14:b4:36:
77:8f:70:21:1b:a2:3d:58:5c:83:0b:d1:bd:0c:ee:96:9a:c1:
ac:71:75:20:39:a5:1f:c7:9c:e7:49:f4:15:a1:6b:49:a6:ea:
81:46:37:03:ef:43:82:e4:0f:17:25:7f:99:80:ab:7a:ae:54:
48:34:20:4c:03:e2:94:32:a5:46:3a:fb:10:b1:f0:bf:6c:90:
6e:b8:d4:d7:6b:64:7f:e8:b6:43:69:29:d4:d2:0e:be:14:d9:
44:9f:a4:7e:dc:42:e6:63:51:aa:2a:ab:c0:e7:d5:03:91:cd:
23:48:c4:a8:f4:d7:b1:54:af:7a:a4:d0:c6:df:29:ef:90:48:
22:45:c8:f3:ec:5b:7d:02:e9:43:c7:58:33:fc:08:18:86:07:
8d:6c:9f:59:ea:7f:64:d6:1f:f2:3e:46:f4:90:47:02:5f:68:
3f:2c:21:a6:06:42:8b:80:62:eb:28:e8:ba:6a:eb:b1:a0:d3:
8a:87:e5:47:ce:a5:ad:6f:24:46:56:f3:c4:c5:62:c8:16:8d:
ce:79:f3:97:29:bb:b0:c8:98:f0:f8:78:71:3a:a4:e9:01:f3:
5d:89:4d:c9:14:b7:fe:b1:96:a8:20:11:59:54:67:b5:8c:b7:
40:97:71:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:03 2023 by rpki-client on console-ams.rpki-client.org