Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911662A/B0937498002511ECBBDA2D12C4F9AE02/A5763D281F8311EE9CC4E925C4F9AE02.roa
File: A5763D281F8311EE9CC4E925C4F9AE02.roa (raw, json)
Hash identifier: orQrtU+uEv8qT2HyEcc+iMc98ixwDcnrUiA7LmYaYcU=
Subject key identifier: 63:E9:0B:E5:2B:A2:93:0E:51:56:A8:EC:A0:50:8E:EE:F0:DF:53:F3
Certificate issuer: /CN=A911662A/serialNumber=D3E475DE9BA7B7372BD1936A906E86697C7EA33B
Certificate serial: 0410
Authority key identifier: D3:E4:75:DE:9B:A7:B7:37:2B:D1:93:6A:90:6E:86:69:7C:7E:A3:3B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0-R13puntzcr0ZNqkG6GaXx-ozs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911662A/B0937498002511ECBBDA2D12C4F9AE02/A5763D281F8311EE9CC4E925C4F9AE02.roa
Signing time: Thu 31 Aug 2023 01:13:09 +0000
ROA not before: Thu 31 Aug 2023 01:13:09 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 7586
IP address blocks: 103.118.40.0/24 maxlen: 24
103.118.41.0/24 maxlen: 24
103.118.42.0/24 maxlen: 24
103.118.43.0/24 maxlen: 24
2403:27c0:1000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1040 (0x410)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911662A/serialNumber=D3E475DE9BA7B7372BD1936A906E86697C7EA33B
Validity
Not Before: Aug 31 01:13:09 2023 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=64efe925-6be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9f:7f:58:f7:c8:77:48:57:08:b6:db:8d:95:
12:19:74:d4:bf:5b:f2:08:5d:b7:ce:41:3f:db:5e:
5a:45:8b:a3:92:be:1e:20:5a:c2:30:b4:77:d8:f5:
fc:ba:59:a6:62:4d:37:bf:65:75:e6:ef:68:41:1b:
0e:61:fc:42:1f:e3:70:9d:90:88:9e:ac:9a:b6:0d:
96:f5:43:93:41:65:43:6f:d3:24:55:56:17:5b:01:
92:01:1f:ae:81:33:80:1f:e8:24:71:a3:8b:f7:02:
9d:19:28:3b:f0:4e:8f:ed:14:4c:c4:4e:7a:c6:64:
13:e4:83:94:7a:77:87:be:40:d7:ec:68:69:e1:7f:
e9:68:c3:dc:76:3e:3f:69:d6:ab:39:73:50:22:c1:
16:bb:37:06:7b:6d:b9:7a:b7:0e:e7:3c:b6:b6:cd:
4e:51:84:69:cc:d2:3f:df:68:93:be:90:65:29:90:
d0:49:82:fd:19:eb:6a:dd:7b:7f:14:f2:47:2e:93:
31:89:0a:3c:10:0b:27:b8:91:17:2a:43:9d:af:f4:
cd:80:64:0c:0a:1c:f8:f5:47:92:84:81:1e:62:f2:
83:b7:7c:83:47:e9:f3:0b:33:51:51:07:ac:cb:87:
43:cf:b4:ca:b1:39:46:eb:0d:f3:7f:8a:8c:53:67:
cd:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E9:0B:E5:2B:A2:93:0E:51:56:A8:EC:A0:50:8E:EE:F0:DF:53:F3
X509v3 Authority Key Identifier:
keyid:D3:E4:75:DE:9B:A7:B7:37:2B:D1:93:6A:90:6E:86:69:7C:7E:A3:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911662A/B0937498002511ECBBDA2D12C4F9AE02/0-R13puntzcr0ZNqkG6GaXx-ozs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0-R13puntzcr0ZNqkG6GaXx-ozs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911662A/B0937498002511ECBBDA2D12C4F9AE02/A5763D281F8311EE9CC4E925C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.118.40.0/22
IPv6:
2403:27c0:1000::/48
Signature Algorithm: sha256WithRSAEncryption
56:64:5d:14:67:68:9b:ed:81:4a:1a:13:c3:53:4b:f8:b9:f9:
5e:6a:37:50:c3:3f:79:5f:27:0f:1c:1f:d2:48:76:a8:c9:6c:
0f:9a:0c:fd:e4:19:c3:fc:09:64:aa:84:bc:a5:5b:f0:df:64:
26:07:f3:8a:21:60:16:b6:13:0d:4c:12:55:08:ad:dd:c5:b5:
c9:cb:a2:34:ab:aa:c6:6d:cb:d0:80:4f:3c:47:4c:ea:fa:43:
be:e9:f3:18:9b:87:0c:d7:a8:fe:f5:05:86:35:0f:9f:1b:c1:
52:62:51:9f:a7:0a:83:5d:d7:ec:9c:2d:74:59:67:11:0d:e9:
6a:40:1c:1b:b1:38:64:3d:cc:a0:55:89:05:50:ce:40:a8:67:
85:36:49:fc:e2:fb:85:bf:48:5f:28:a7:b8:9e:51:3f:55:59:
84:33:14:fb:f4:ef:45:49:5c:70:e5:a8:22:0e:2c:ad:45:52:
5a:d3:7a:44:f7:9b:83:65:42:3e:2d:a4:11:4b:ff:da:fe:f2:
de:d0:7a:ca:fe:0b:02:f4:d3:12:cb:02:96:42:f9:45:99:35:
03:5e:5b:7d:9d:17:20:44:fb:76:cc:50:40:75:1b:8b:67:f4:
21:e6:54:54:75:b1:2b:89:dd:3e:34:17:95:f4:62:54:85:1d:
60:b0:0d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:55 2024 by rpki-client on console-fra.rpki-client.org