Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9111590/025CD2627A6E11EB81AF2E3FC4F9AE02/5FD5B616F14C11EB99AFEE14C4F9AE02.roa
File: 5FD5B616F14C11EB99AFEE14C4F9AE02.roa (raw, json)
Hash identifier: g2pRn12KhzZWdgxtc6x81swOTu9sUAj+S/Cxr0W9Du8=
Subject key identifier: 8B:7A:8A:1A:86:C5:0E:A5:DD:0D:31:A2:D8:8C:F7:AF:4D:1D:17:39
Certificate issuer: /CN=A9111590/serialNumber=50229DE035B72572F4E0027472EB6826FDFE94AE
Certificate serial: 034C
Authority key identifier: 50:22:9D:E0:35:B7:25:72:F4:E0:02:74:72:EB:68:26:FD:FE:94:AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCKd4DW3JXL04AJ0cutoJv3-lK4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9111590/025CD2627A6E11EB81AF2E3FC4F9AE02/5FD5B616F14C11EB99AFEE14C4F9AE02.roa
Signing time: Wed 02 Mar 2022 13:50:52 +0000
ROA not before: Wed 02 Mar 2022 13:50:52 +0000
ROA not after: Sun 28 May 2023 00:00:00 +0000
asID: 204136
IP address blocks: 103.230.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 844 (0x34c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9111590/serialNumber=50229DE035B72572F4E0027472EB6826FDFE94AE
Validity
Not Before: Mar 2 13:50:52 2022 GMT
Not After : May 28 00:00:00 2023 GMT
Subject: CN=621f763c-4a26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4d:a5:f4:7f:65:c4:b3:13:d7:2b:1e:4f:e3:
80:7d:f8:43:34:86:8c:50:43:ab:8a:3e:74:30:2b:
73:66:da:9d:34:58:59:94:4a:8d:14:65:35:af:e1:
f7:6b:3c:bf:77:92:c0:c0:45:6d:17:7f:3b:86:18:
02:41:8d:2b:62:cc:ff:6d:f9:0b:b9:38:ec:27:5e:
60:20:e2:ee:9e:c7:c6:40:d2:51:e1:4d:ad:56:c4:
48:1d:ac:db:36:33:85:4a:ad:d3:5c:01:3d:a7:74:
2b:ba:75:d9:a5:b3:2a:a9:e6:15:4b:8d:51:bb:22:
30:6a:a2:06:25:ae:c6:8c:72:eb:7e:a4:25:2b:a7:
24:ef:72:74:c4:88:d9:7a:1e:69:16:6a:96:e8:71:
40:b7:3b:41:ef:f1:f2:8b:0d:90:72:34:2e:b6:1b:
3b:4c:16:96:fe:f6:ae:40:92:f9:48:2f:9a:f7:f4:
6e:3f:1c:69:62:81:dc:48:4a:5c:ad:b9:23:be:63:
fd:d1:c4:bb:ac:43:cf:c7:b1:76:56:ca:56:1d:1c:
f3:02:d8:b8:18:e1:af:e1:14:3d:c0:fe:d6:f8:ac:
8e:16:c0:96:f9:54:13:01:16:7e:4c:6f:44:41:c8:
f2:26:da:03:a2:df:39:c3:ab:73:5f:f0:5d:95:15:
03:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:7A:8A:1A:86:C5:0E:A5:DD:0D:31:A2:D8:8C:F7:AF:4D:1D:17:39
X509v3 Authority Key Identifier:
keyid:50:22:9D:E0:35:B7:25:72:F4:E0:02:74:72:EB:68:26:FD:FE:94:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9111590/025CD2627A6E11EB81AF2E3FC4F9AE02/UCKd4DW3JXL04AJ0cutoJv3-lK4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCKd4DW3JXL04AJ0cutoJv3-lK4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111590/025CD2627A6E11EB81AF2E3FC4F9AE02/5FD5B616F14C11EB99AFEE14C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.230.141.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:c6:f0:78:c1:07:53:0d:95:4c:9d:57:aa:d6:2a:9e:21:c0:
d1:44:85:13:79:da:af:7d:5b:ea:4f:c1:a4:ae:68:df:42:61:
62:cc:09:a2:56:ec:c8:cf:d4:f6:7e:c9:6c:e4:bf:16:59:5d:
cd:8f:94:e6:c7:2f:d6:a6:d7:35:18:a2:29:21:ba:be:50:b9:
08:8e:ef:97:54:82:fe:34:95:57:73:c0:b7:5f:d3:e4:7d:48:
93:ed:4e:30:22:56:17:db:7c:38:9b:44:38:3a:a3:79:2b:c8:
99:75:de:6d:ca:07:b5:a5:06:d3:26:20:6c:48:b4:62:bc:8d:
f7:66:72:45:70:0e:e7:e2:5f:00:98:0b:0c:22:fe:95:a5:0c:
9e:fd:09:06:04:0f:b9:92:97:ae:21:6f:ed:24:a6:8a:fd:56:
16:f4:c5:fe:55:3b:f5:9c:aa:f5:9d:14:f6:97:f5:15:1b:f8:
a3:f7:86:4d:01:ac:5f:05:d5:ac:29:1f:b4:50:26:77:17:9b:
f0:33:43:81:56:31:b3:d7:a1:dc:cd:81:88:2d:61:a0:9a:96:
81:15:fd:83:f6:07:78:cc:b5:9f:ad:2e:42:aa:63:cb:0b:e9:
c9:11:8a:89:e3:1b:55:25:9f:40:33:34:10:82:99:aa:60:87:
b6:21:64:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:35 2023 by rpki-client on console-fra.rpki-client.org