Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911662A/B0937498002511ECBBDA2D12C4F9AE02/B647B264067E11ECB84A6B63C4F9AE02.roa
File: B647B264067E11ECB84A6B63C4F9AE02.roa (raw, json)
Hash identifier: 5TxvNZDySfJf9rCcTNVAtCUXMC+JRasEEd5yr27MrLE=
Subject key identifier: 32:C6:CA:1B:2A:CD:95:03:33:2B:62:C8:D3:75:C9:1D:E4:9F:1A:70
Certificate issuer: /CN=A911662A/serialNumber=D3E475DE9BA7B7372BD1936A906E86697C7EA33B
Certificate serial: 028B
Authority key identifier: D3:E4:75:DE:9B:A7:B7:37:2B:D1:93:6A:90:6E:86:69:7C:7E:A3:3B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0-R13puntzcr0ZNqkG6GaXx-ozs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911662A/B0937498002511ECBBDA2D12C4F9AE02/B647B264067E11ECB84A6B63C4F9AE02.roa
Signing time: Mon 27 Jun 2022 15:19:45 +0000
ROA not before: Mon 27 Jun 2022 15:19:45 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 18013
IP address blocks: 103.118.40.0/24 maxlen: 24
103.118.41.0/24 maxlen: 24
103.118.42.0/24 maxlen: 24
103.118.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 651 (0x28b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911662A/serialNumber=D3E475DE9BA7B7372BD1936A906E86697C7EA33B
Validity
Not Before: Jun 27 15:19:45 2022 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=62b9ca91-b168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9e:65:fe:d0:58:3e:60:bc:52:14:b5:55:34:
a0:fb:64:e6:05:f3:a1:a1:b9:da:a2:b3:97:35:f3:
d9:39:87:60:af:b5:11:3b:2e:e9:ca:92:bc:ca:b4:
3e:fa:de:6f:88:f7:7a:52:c9:cb:9a:36:1b:fb:c3:
b3:7b:61:b2:11:0e:35:f9:9f:e0:fc:92:b5:1e:4c:
9a:dc:61:47:2a:2d:2d:38:af:80:b2:40:cf:ee:cb:
3e:96:ec:79:a8:ed:75:4e:a8:2d:55:db:05:5d:dc:
4e:f1:c2:b2:85:98:9c:e2:40:47:21:a5:76:51:6a:
0e:8a:cf:ff:8a:65:22:79:97:72:b2:a7:3a:81:20:
9b:22:f7:d3:27:41:57:49:b7:1a:7c:c7:47:f2:20:
4c:a4:8c:2e:74:a5:70:a8:e1:f8:3e:47:60:56:a8:
78:5e:9e:ae:65:0b:49:9b:6a:81:4f:ba:9c:5d:6e:
02:3b:14:ac:b0:02:07:e2:a3:b4:6e:fa:81:12:c5:
10:7a:33:85:bb:44:1f:85:28:a6:44:56:9a:24:40:
9a:65:a9:c7:43:33:36:5d:80:e3:a5:87:fb:09:ae:
67:78:91:e0:7b:49:8b:7c:a1:38:69:c5:db:0f:c5:
ba:65:54:c4:e3:a1:4c:cb:e7:b9:58:c7:31:83:14:
23:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C6:CA:1B:2A:CD:95:03:33:2B:62:C8:D3:75:C9:1D:E4:9F:1A:70
X509v3 Authority Key Identifier:
keyid:D3:E4:75:DE:9B:A7:B7:37:2B:D1:93:6A:90:6E:86:69:7C:7E:A3:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911662A/B0937498002511ECBBDA2D12C4F9AE02/0-R13puntzcr0ZNqkG6GaXx-ozs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0-R13puntzcr0ZNqkG6GaXx-ozs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911662A/B0937498002511ECBBDA2D12C4F9AE02/B647B264067E11ECB84A6B63C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.118.40.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:0e:42:fb:1f:a0:d1:80:26:36:10:5c:1d:aa:15:9c:81:ce:
dd:84:5c:3d:10:b7:92:46:8f:a4:1a:09:8d:b9:1b:7a:36:9d:
39:95:30:9a:b0:08:29:7d:65:68:d6:e2:83:18:61:5b:3c:1e:
e2:a7:f4:70:c8:3b:a2:11:a2:97:da:2c:62:13:55:19:92:eb:
1d:53:bb:35:8c:5c:0f:96:a7:04:59:ad:90:63:8a:ab:39:e8:
62:3e:c0:11:0a:41:cc:6a:17:b3:da:f2:20:91:20:94:dd:7d:
94:a6:44:c7:6c:37:43:fd:bc:de:5e:e7:1d:e5:e0:2a:54:38:
b2:2d:a6:42:e9:b7:55:05:fc:e2:59:b2:5a:ec:49:a7:c0:51:
61:df:a4:b1:a8:83:c8:8b:25:56:27:43:19:d9:a1:da:7d:52:
43:b0:ae:30:60:8a:f0:7c:30:04:0c:21:0f:27:50:f8:b6:62:
80:fd:13:26:38:30:fe:90:d6:2e:6d:82:1c:5e:20:66:54:33:
dd:65:c2:63:d4:46:f2:57:f1:ba:51:2c:2e:0c:fc:60:3a:36:
ca:f8:6c:2e:c6:57:a6:aa:a5:a7:2c:0a:92:a9:7b:0e:b3:5d:
5d:2e:02:bc:6b:8a:1a:07:87:cf:4f:b6:d8:e6:f9:3f:5c:ab:
d5:31:eb:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:55 2024 by rpki-client on console-fra.rpki-client.org