Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9111DD6/3AD2F7F2D99111EB8A17D81BC4F9AE02/E4259BA8D99511EBBBFB5D50C4F9AE02.roa
File: E4259BA8D99511EBBBFB5D50C4F9AE02.roa (raw, json)
Hash identifier: UBcLSJ4EjHLfnRnn7RwSF74+hL7J+j+8/ttierkm4AI=
Subject key identifier: 45:86:9C:2B:28:09:D9:2E:B9:5C:EA:88:47:59:5A:A4:15:3A:E1:12
Certificate issuer: /CN=A9111DD6/serialNumber=78F340F1871B70627E0EC93E97D7D0D80C0AD021
Certificate serial: 010B
Authority key identifier: 78:F3:40:F1:87:1B:70:62:7E:0E:C9:3E:97:D7:D0:D8:0C:0A:D0:21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ePNA8YcbcGJ-Dsk-l9fQ2AwK0CE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9111DD6/3AD2F7F2D99111EB8A17D81BC4F9AE02/E4259BA8D99511EBBBFB5D50C4F9AE02.roa
Signing time: Thu 11 Nov 2021 15:31:34 +0000
ROA not before: Thu 11 Nov 2021 15:31:34 +0000
ROA not after: Fri 30 Dec 2022 00:00:00 +0000
asID: 131111
IP address blocks: 103.76.20.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 267 (0x10b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9111DD6/serialNumber=78F340F1871B70627E0EC93E97D7D0D80C0AD021
Validity
Not Before: Nov 11 15:31:34 2021 GMT
Not After : Dec 30 00:00:00 2022 GMT
Subject: CN=618d3755-905a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:37:99:55:61:c7:7d:cb:8b:a4:0f:7e:e4:19:
a9:55:04:8d:de:bf:88:37:e1:25:c8:ff:99:03:a8:
16:72:62:ba:c4:b3:f6:7d:e2:55:0b:f3:f2:c1:27:
f7:8e:e1:6c:02:a7:13:d7:5a:70:d3:15:95:86:62:
da:33:35:a3:6d:da:f8:56:7f:a2:84:1b:50:69:17:
77:23:ea:9c:04:7b:6f:72:c9:e1:71:1e:e9:17:b9:
87:61:5b:7d:0d:9f:7f:53:63:05:15:a6:91:0f:64:
f0:04:61:70:d9:0d:d1:b8:1d:90:44:4f:48:c9:c4:
3a:3e:7c:25:0f:22:62:b6:58:c1:9d:2d:d7:3e:51:
e0:30:b4:48:5b:4f:52:ad:8c:70:58:82:fd:e6:32:
5e:19:dd:fc:60:e7:62:22:7a:14:2f:7a:5f:89:0b:
ed:fb:9e:40:8b:61:7f:1a:39:ca:6e:39:54:c9:f6:
ae:d0:d8:2b:d1:5c:87:8f:73:56:e9:5d:ef:db:0a:
4e:b1:26:23:5b:fe:c1:73:6c:3a:92:90:d5:1a:eb:
1a:7b:47:de:3e:06:e9:d5:58:3a:77:64:ab:87:91:
b6:e8:c2:69:58:fa:47:90:7e:fa:5b:90:35:e6:84:
8b:86:5d:50:e0:a8:3a:c9:1b:1a:4d:cf:1b:33:69:
47:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:86:9C:2B:28:09:D9:2E:B9:5C:EA:88:47:59:5A:A4:15:3A:E1:12
X509v3 Authority Key Identifier:
keyid:78:F3:40:F1:87:1B:70:62:7E:0E:C9:3E:97:D7:D0:D8:0C:0A:D0:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9111DD6/3AD2F7F2D99111EB8A17D81BC4F9AE02/ePNA8YcbcGJ-Dsk-l9fQ2AwK0CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ePNA8YcbcGJ-Dsk-l9fQ2AwK0CE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111DD6/3AD2F7F2D99111EB8A17D81BC4F9AE02/E4259BA8D99511EBBBFB5D50C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.76.20.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:03:5c:fb:65:9e:14:2e:03:67:ec:0c:48:b8:06:a8:1c:07:
6e:dd:5e:86:39:ce:42:07:f5:a4:59:40:b0:d0:fb:bb:a1:54:
95:19:44:26:9b:6f:d8:19:f2:37:96:ba:02:42:1d:6d:57:c1:
09:18:db:40:b0:b1:74:89:7f:58:f0:91:cf:2f:b3:f7:aa:f8:
b9:12:22:f3:8d:1d:a9:42:02:80:86:42:8f:81:52:1c:52:d9:
06:a2:cf:4f:a3:d7:43:68:ac:7f:78:18:46:98:05:56:02:94:
17:13:4b:2e:5f:e9:fa:f1:ec:bb:e0:83:52:47:2b:29:07:6b:
d5:66:e7:38:3e:0e:54:a0:63:4c:95:d9:34:4f:68:9e:56:35:
e6:ef:52:4e:9c:0f:0e:99:5c:54:ac:2f:0d:86:56:e7:58:93:
11:07:23:83:64:c6:de:6f:96:09:49:a8:c6:f6:85:c5:57:47:
3c:64:7b:c2:47:c9:e0:01:ee:5a:13:e0:3a:e3:0f:70:eb:ba:
4d:7b:70:12:df:b7:39:45:b9:2c:d2:9b:75:31:87:86:fa:d7:
cf:e3:14:d6:fe:1c:42:8a:7e:e6:b2:1f:39:3e:ca:10:da:c8:
c6:43:32:4a:64:8d:bf:b0:c1:b4:f3:66:e2:2a:52:47:c4:44:
b9:ef:a8:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:54 2024 by rpki-client on console-fra.rpki-client.org