Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911662A/B0937498002511ECBBDA2D12C4F9AE02/10EEE482704011ECBD6F2E5BC4F9AE02.roa
File: 10EEE482704011ECBD6F2E5BC4F9AE02.roa (raw, json)
Hash identifier: pSqlSaSRG/nIq9PmHOuppKNpk1p9v9nTsOPz6F9/krg=
Subject key identifier: 42:61:3C:E9:B4:72:F2:70:51:E1:2E:D0:5F:34:DB:C0:86:DB:01:4B
Certificate issuer: /CN=A911662A/serialNumber=D3E475DE9BA7B7372BD1936A906E86697C7EA33B
Certificate serial: 0288
Authority key identifier: D3:E4:75:DE:9B:A7:B7:37:2B:D1:93:6A:90:6E:86:69:7C:7E:A3:3B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0-R13puntzcr0ZNqkG6GaXx-ozs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911662A/B0937498002511ECBBDA2D12C4F9AE02/10EEE482704011ECBD6F2E5BC4F9AE02.roa
Signing time: Mon 27 Jun 2022 15:19:42 +0000
ROA not before: Mon 27 Jun 2022 15:19:42 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 136600
IP address blocks: 103.118.40.0/24 maxlen: 24
103.118.41.0/24 maxlen: 24
103.118.42.0/24 maxlen: 24
103.118.43.0/24 maxlen: 24
2403:27c0::/32 maxlen: 32
2403:27c0:1000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 648 (0x288)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911662A/serialNumber=D3E475DE9BA7B7372BD1936A906E86697C7EA33B
Validity
Not Before: Jun 27 15:19:42 2022 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=62b9ca8d-6e60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c3:49:78:06:8c:90:5d:42:45:16:ce:4f:99:
67:66:dd:fb:fb:36:7f:69:55:0f:fa:06:2d:30:37:
81:74:58:1e:e7:3e:29:55:c4:38:ac:77:49:ba:a2:
b2:07:5b:0e:04:4c:25:49:8e:02:26:5b:84:fd:b7:
81:c3:57:90:d1:be:54:68:07:5b:16:cf:75:00:d2:
c1:89:c0:fb:98:da:b2:bf:d4:6b:f9:47:f0:47:11:
49:a4:84:42:28:eb:18:fc:40:0b:49:ad:cd:a8:ce:
07:08:12:eb:a0:f8:4a:12:05:30:f4:f1:9a:04:65:
2f:65:e2:c1:8e:b3:18:f9:a7:a7:0d:3c:c8:19:49:
17:81:5e:ae:d2:4f:0b:33:37:eb:6a:ca:b1:a2:b9:
da:62:77:0d:11:d7:db:72:8b:ba:50:fe:13:db:aa:
07:33:17:5a:99:c9:c9:ca:ca:59:fe:0d:8a:0d:79:
74:dc:82:45:be:a4:c0:a0:16:a8:56:3b:b6:1b:bd:
67:2f:8a:3e:8e:6c:23:cc:7e:76:a9:c0:af:e4:c5:
f7:d2:8f:28:92:93:9b:b8:fb:ec:db:0e:3e:dd:22:
37:0d:21:7e:a2:09:0c:78:56:ed:b9:18:73:fc:ac:
1f:e1:da:0d:14:34:38:35:31:a9:45:8f:53:7a:2b:
6e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:61:3C:E9:B4:72:F2:70:51:E1:2E:D0:5F:34:DB:C0:86:DB:01:4B
X509v3 Authority Key Identifier:
keyid:D3:E4:75:DE:9B:A7:B7:37:2B:D1:93:6A:90:6E:86:69:7C:7E:A3:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911662A/B0937498002511ECBBDA2D12C4F9AE02/0-R13puntzcr0ZNqkG6GaXx-ozs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0-R13puntzcr0ZNqkG6GaXx-ozs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911662A/B0937498002511ECBBDA2D12C4F9AE02/10EEE482704011ECBD6F2E5BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.118.40.0/22
IPv6:
2403:27c0::/32
Signature Algorithm: sha256WithRSAEncryption
57:67:4d:03:0e:25:ae:ab:91:55:34:fd:78:7b:8b:0b:9a:b3:
8d:d8:20:66:a2:3d:f5:b4:19:0b:a8:83:2b:0b:e5:ab:88:b5:
5b:64:5a:cd:ee:92:44:63:2c:14:65:56:c4:b4:2a:23:ad:c0:
9e:ab:94:6d:b5:c7:aa:5a:5f:82:9a:c0:ee:13:41:b3:74:5d:
e3:78:6e:b1:78:b5:93:86:62:d8:af:ab:84:f2:eb:2e:a4:3d:
a3:d0:58:52:3c:ca:11:17:89:63:6a:60:ca:c4:e0:3c:6b:e0:
a1:81:e7:4c:34:8b:74:ce:47:c8:53:ae:85:cf:7c:bd:cd:e7:
af:62:4d:55:1e:0b:f0:fa:25:d7:84:42:8a:1d:49:a8:1b:82:
47:2f:35:05:c0:85:ae:d1:af:81:39:e0:b5:74:fe:96:60:30:
32:83:fd:2e:14:13:93:e3:36:14:8e:12:d1:c0:2c:cf:a0:58:
e6:22:3f:4b:7d:9e:2c:0c:5d:15:85:74:09:05:7e:b7:b3:0e:
fb:e4:7c:ad:3a:a0:32:58:c8:13:ea:d0:82:28:fd:7d:51:2b:
91:93:a7:6d:d6:be:09:8c:f8:00:86:08:bf:73:5c:4e:d8:a9:
d1:fc:56:80:49:ab:c7:5a:f6:60:90:e2:e4:81:2e:cf:57:ad:
3e:af:2a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:55 2024 by rpki-client on console-fra.rpki-client.org