Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/388F2642FF7411EBAD073A1AC4F9AE02.roa
File: 388F2642FF7411EBAD073A1AC4F9AE02.roa (raw, json)
Hash identifier: 4ybMVip6T+O5BX7V4vVQIqzCTNKHdQfP3nFouuw3xGA=
Subject key identifier: C1:73:BD:13:44:8A:70:91:E3:E7:0E:FB:A1:7E:E5:FF:85:AB:EC:02
Certificate issuer: /CN=A91175BA/serialNumber=46E87CFFDFB0C16282AB1EEAC6DD2427328376A6
Certificate serial: 021A
Authority key identifier: 46:E8:7C:FF:DF:B0:C1:62:82:AB:1E:EA:C6:DD:24:27:32:83:76:A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ruh8_9-wwWKCqx7qxt0kJzKDdqY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/388F2642FF7411EBAD073A1AC4F9AE02.roa
Signing time: Wed 02 Mar 2022 02:51:43 +0000
ROA not before: Wed 02 Mar 2022 02:51:43 +0000
ROA not after: Sun 28 May 2023 00:00:00 +0000
asID: 10103
IP address blocks: 203.175.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 538 (0x21a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91175BA/serialNumber=46E87CFFDFB0C16282AB1EEAC6DD2427328376A6
Validity
Not Before: Mar 2 02:51:43 2022 GMT
Not After : May 28 00:00:00 2023 GMT
Subject: CN=621edbbf-cd57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ae:29:89:b3:6f:d4:5b:79:0d:04:00:4f:9a:
b2:09:8a:45:33:fa:89:a1:9d:0c:15:0d:62:42:62:
9b:46:67:94:cc:06:74:17:56:53:3e:86:68:76:b4:
f9:d6:f0:dc:f3:a5:a7:5c:d3:70:f8:45:af:c7:f1:
88:35:bf:ba:24:17:30:ec:ac:fd:25:5e:00:73:ac:
63:b8:2a:4e:7a:0a:5f:1d:53:29:e6:87:f3:bd:3a:
6b:54:6a:16:62:ac:e5:82:65:13:b3:02:49:8b:67:
4c:e7:22:2e:86:df:41:b8:36:d1:61:18:18:1a:ed:
80:af:2b:0c:44:3e:b7:72:7b:64:92:3f:10:d1:3c:
5a:3b:4f:8e:25:a1:34:56:70:65:9b:0f:ee:24:3a:
27:f7:5e:55:a9:f0:65:6f:e5:f8:c8:97:0c:73:9f:
57:e5:be:52:1e:18:3d:74:a4:11:26:14:89:a7:59:
7d:ef:e2:17:f0:fe:06:83:36:de:e0:77:3f:f8:be:
bd:35:b1:f7:af:47:64:2d:c3:9c:0b:33:cf:17:dc:
18:d0:4d:09:5f:c0:22:bc:8c:f1:5a:1f:7b:d7:0e:
ec:d1:b7:70:e2:30:e8:eb:eb:19:7d:d5:5b:ff:7e:
1c:06:8a:a5:b3:d1:40:1d:3e:2c:5b:c9:61:21:d6:
99:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:73:BD:13:44:8A:70:91:E3:E7:0E:FB:A1:7E:E5:FF:85:AB:EC:02
X509v3 Authority Key Identifier:
keyid:46:E8:7C:FF:DF:B0:C1:62:82:AB:1E:EA:C6:DD:24:27:32:83:76:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/Ruh8_9-wwWKCqx7qxt0kJzKDdqY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ruh8_9-wwWKCqx7qxt0kJzKDdqY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/388F2642FF7411EBAD073A1AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.175.15.0/24
Signature Algorithm: sha256WithRSAEncryption
00:13:cb:cd:a3:d1:51:f5:c5:0f:16:4f:af:fb:03:31:07:a4:
89:76:d1:88:8e:d7:58:86:a1:95:e6:27:48:7a:60:51:48:0c:
d6:4a:ff:cf:99:35:fc:d1:1f:ef:4f:a4:c3:54:5e:a7:b6:62:
1f:6f:fb:ee:b8:a1:b6:ed:a8:75:8e:77:51:d3:c2:8f:67:a8:
07:30:65:7d:14:de:97:f8:53:0c:15:5d:2b:99:07:91:37:80:
7a:dd:b9:34:e5:82:9e:53:85:4b:f3:4b:13:ea:a7:bb:9e:c2:
18:8c:ae:91:5e:30:30:cd:aa:9d:c8:bd:a4:38:d2:a5:e9:81:
dc:19:83:1c:8d:4e:58:34:af:48:f9:40:71:9b:71:9e:d9:16:
1f:02:75:76:aa:0c:e5:c9:75:f3:c9:06:a2:65:9f:f3:e2:a3:
1b:7e:70:c2:03:91:32:b8:ff:bc:c5:ce:dc:72:d4:3a:df:70:
04:a0:cb:52:c6:6e:9c:ec:2c:be:b5:d1:e5:c6:ce:89:8f:3c:
df:05:67:86:bb:34:8c:e4:65:2c:74:68:9f:fc:75:96:9a:f5:
d4:69:9d:93:3f:ce:67:b3:5b:aa:73:e5:1a:11:87:2c:f8:a2:
f5:67:34:e2:37:a3:fb:af:e4:a2:5e:36:76:23:78:3a:31:f1:
f8:ef:53:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:33 2023 by rpki-client on console-ams.rpki-client.org