Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9111590/025CD2627A6E11EB81AF2E3FC4F9AE02/D6659698FC7311EB8E369E75C4F9AE02.roa
File: D6659698FC7311EB8E369E75C4F9AE02.roa (raw, json)
Hash identifier: J8fAHk4ZJs56SsDUE3UaYKiiHHl22fO2yWnrYeiJWwM=
Subject key identifier: 9A:DE:66:76:CD:76:37:E2:DC:D0:91:D1:4A:4B:BB:37:7F:4B:39:D6
Certificate issuer: /CN=A9111590/serialNumber=50229DE035B72572F4E0027472EB6826FDFE94AE
Certificate serial: 0521
Authority key identifier: 50:22:9D:E0:35:B7:25:72:F4:E0:02:74:72:EB:68:26:FD:FE:94:AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCKd4DW3JXL04AJ0cutoJv3-lK4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9111590/025CD2627A6E11EB81AF2E3FC4F9AE02/D6659698FC7311EB8E369E75C4F9AE02.roa
Signing time: Fri 11 Nov 2022 14:50:21 +0000
ROA not before: Fri 11 Nov 2022 14:50:21 +0000
ROA not after: Sun 28 May 2023 00:00:00 +0000
asID: 61138
IP address blocks: 27.0.234.0/24 maxlen: 24
27.0.235.0/24 maxlen: 24
103.208.85.0/24 maxlen: 24
103.208.86.0/24 maxlen: 24
103.214.71.0/24 maxlen: 24
103.230.140.0/24 maxlen: 24
144.48.80.0/24 maxlen: 24
144.48.83.0/24 maxlen: 24
2404:3d80::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1313 (0x521)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9111590/serialNumber=50229DE035B72572F4E0027472EB6826FDFE94AE
Validity
Not Before: Nov 11 14:50:21 2022 GMT
Not After : May 28 00:00:00 2023 GMT
Subject: CN=636e612d-09e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:10:dd:71:77:a3:e6:c7:6e:cc:fd:11:51:6e:
de:08:af:63:d3:1c:be:15:ea:5f:8c:98:d0:d3:4a:
52:0e:1c:12:0b:d1:61:44:3b:76:ad:a3:11:04:4d:
2f:ff:46:2a:b0:72:ed:14:d3:1a:f1:e1:06:cd:a8:
b6:86:78:d4:53:95:53:0a:41:a7:c8:79:24:22:d2:
b0:89:d8:9c:ce:0c:9e:d3:d4:bf:ef:10:d2:5f:65:
1c:14:9b:60:12:ce:e2:6f:42:8e:e4:51:8b:5b:ae:
18:1c:69:80:86:01:60:bb:b4:ec:7c:3b:86:c1:3e:
b8:c0:51:28:07:8b:63:cb:2d:7f:83:6d:46:96:b9:
62:78:d9:31:58:2b:d2:23:1d:02:1d:9d:42:27:07:
10:6c:c2:be:e1:8e:a8:0a:62:dd:54:fe:a6:ea:66:
fe:90:44:c4:d8:6a:ae:a9:43:85:91:04:04:5e:b8:
ca:c0:81:d1:ed:aa:dc:81:5a:60:fb:b6:af:24:c9:
7c:e8:35:13:7e:51:6c:37:e0:01:19:2c:09:5a:bc:
5c:d4:f2:99:fa:5a:a2:e5:21:0f:1b:40:37:f1:a8:
de:37:77:93:e9:02:1d:db:69:7d:53:59:4f:d8:71:
3d:1c:2c:12:11:ea:64:bd:8e:68:f8:8c:82:bd:f3:
93:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:DE:66:76:CD:76:37:E2:DC:D0:91:D1:4A:4B:BB:37:7F:4B:39:D6
X509v3 Authority Key Identifier:
keyid:50:22:9D:E0:35:B7:25:72:F4:E0:02:74:72:EB:68:26:FD:FE:94:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9111590/025CD2627A6E11EB81AF2E3FC4F9AE02/UCKd4DW3JXL04AJ0cutoJv3-lK4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCKd4DW3JXL04AJ0cutoJv3-lK4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111590/025CD2627A6E11EB81AF2E3FC4F9AE02/D6659698FC7311EB8E369E75C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.0.234.0/23
103.208.85.0-103.208.86.255
103.214.71.0/24
103.230.140.0/24
144.48.80.0/24
144.48.83.0/24
IPv6:
2404:3d80::/32
Signature Algorithm: sha256WithRSAEncryption
19:25:66:27:bb:c9:29:fc:54:83:1a:d2:b8:d6:19:3a:8a:04:
af:24:84:90:90:34:81:0d:31:6b:e4:be:39:1d:2e:a6:b6:68:
12:fb:b8:65:3f:36:41:07:09:93:7d:a5:15:88:50:e7:c2:6c:
86:98:f2:4d:c9:1c:82:27:66:69:61:c1:74:64:dc:61:ff:db:
84:a8:8c:17:8e:f8:1f:79:e6:2c:60:ea:48:be:d8:7b:9c:18:
93:71:44:7d:bc:39:41:ce:4e:d6:83:03:39:19:19:91:62:ff:
8f:44:56:a5:b4:ef:27:7e:8c:3d:17:bb:6c:3f:3e:c5:82:cc:
a8:fd:ae:58:fe:ff:be:b3:1b:8d:59:1c:c8:a6:1e:fd:59:c0:
ba:82:4e:c8:5d:f3:d1:00:6a:c2:8a:94:4d:ba:45:e2:c5:1f:
b2:09:24:7c:d7:3a:43:a8:40:cf:ce:3d:62:3c:ad:e7:5c:92:
ce:3a:3d:ba:f7:49:54:f6:5f:0e:38:ae:58:df:6f:c8:ae:39:
3b:0b:aa:ed:9a:f8:10:8c:2d:61:e0:19:2e:f8:41:7a:9b:af:
fb:68:2f:13:eb:3d:05:77:b6:1c:3e:9d:ec:7f:97:16:c2:fe:
ff:72:4b:0b:2e:ba:66:d3:b9:3d:ad:a0:7f:ad:6a:25:6d:92:
9e:7c:19:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:54 2024 by rpki-client on console-fra.rpki-client.org