Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/A55B0210BCA111EC83E0EC3FC4F9AE02.roa
File: A55B0210BCA111EC83E0EC3FC4F9AE02.roa (raw, json)
Hash identifier: MN/fWSCFZ1gNgjqkVcjqoSKXr03f3D1Bc1lKRkLPMLM=
Subject key identifier: 91:B4:57:D0:71:DE:1F:F4:AC:0A:F5:0A:3B:FF:0F:C9:BE:35:3F:F4
Certificate issuer: /CN=A91175BA/serialNumber=46E87CFFDFB0C16282AB1EEAC6DD2427328376A6
Certificate serial: 027C
Authority key identifier: 46:E8:7C:FF:DF:B0:C1:62:82:AB:1E:EA:C6:DD:24:27:32:83:76:A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ruh8_9-wwWKCqx7qxt0kJzKDdqY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/A55B0210BCA111EC83E0EC3FC4F9AE02.roa
Signing time: Fri 15 Apr 2022 09:51:39 +0000
ROA not before: Fri 15 Apr 2022 09:51:39 +0000
ROA not after: Sun 28 May 2023 00:00:00 +0000
asID: 141677
IP address blocks: 103.85.72.0/22 maxlen: 24
203.175.12.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 636 (0x27c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91175BA/serialNumber=46E87CFFDFB0C16282AB1EEAC6DD2427328376A6
Validity
Not Before: Apr 15 09:51:39 2022 GMT
Not After : May 28 00:00:00 2023 GMT
Subject: CN=6259402b-6d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3a:e0:17:72:03:e1:fa:f3:1b:62:81:1d:d6:
b6:0d:05:36:96:6e:86:c5:56:10:c3:f0:88:46:ac:
5c:8f:b9:4f:fc:f1:77:a8:6e:fb:9e:e8:e8:6f:14:
cb:f7:03:87:05:15:5a:59:dc:34:6e:23:57:f3:bb:
c5:67:86:49:95:da:01:f6:0c:8e:5f:bf:11:2b:35:
c1:7b:b4:63:ec:5f:54:76:33:97:f7:0a:fc:6b:be:
7c:62:06:69:3e:2b:db:a5:d6:7c:3c:ac:c0:0f:9d:
5d:9b:5d:88:c7:80:e5:8a:7d:76:46:fb:e3:85:9f:
af:fe:86:f0:b1:54:6a:b7:2e:2b:32:59:94:f1:d4:
e7:ec:19:99:59:8c:59:b1:a8:3a:f6:9d:67:6b:7c:
e3:b9:70:e8:14:e5:f4:04:bc:93:62:a2:80:51:43:
e1:4b:76:5d:c4:73:ec:4f:46:35:1a:c8:f1:fc:d2:
81:4a:b1:fe:2c:cb:68:0b:f8:94:95:95:0f:fc:1e:
fa:d0:bd:7d:49:aa:3e:8b:67:17:eb:4a:d5:f6:e1:
84:76:57:f8:51:ab:9b:81:e0:f6:0a:90:83:f6:95:
c3:c2:11:e5:b4:6d:5f:47:81:7b:4f:4f:54:00:7c:
16:9f:aa:9e:ef:58:cd:c2:b3:85:06:27:5e:56:42:
58:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B4:57:D0:71:DE:1F:F4:AC:0A:F5:0A:3B:FF:0F:C9:BE:35:3F:F4
X509v3 Authority Key Identifier:
keyid:46:E8:7C:FF:DF:B0:C1:62:82:AB:1E:EA:C6:DD:24:27:32:83:76:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/Ruh8_9-wwWKCqx7qxt0kJzKDdqY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ruh8_9-wwWKCqx7qxt0kJzKDdqY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/A55B0210BCA111EC83E0EC3FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.85.72.0/22
203.175.12.0/22
Signature Algorithm: sha256WithRSAEncryption
ce:be:bf:46:90:51:7f:18:72:bb:7d:39:38:60:eb:ce:d8:82:
ef:d7:7a:f0:4c:34:20:56:67:46:2d:5f:c9:8f:3b:02:30:4a:
ea:e4:f8:1d:0f:fc:84:f5:d1:24:88:0b:68:eb:ec:59:a1:a1:
52:21:3e:21:7b:84:23:bd:57:79:f7:57:e8:0d:54:83:b7:0f:
bc:64:a2:bf:8c:8c:31:90:ff:55:01:af:24:2b:eb:95:f7:44:
8d:fc:1f:5e:74:3c:4f:79:ea:40:ca:da:4f:eb:b2:8e:51:8b:
00:8f:83:a2:01:e8:23:65:d7:b2:97:e2:b9:75:f7:76:fd:d1:
2d:30:53:62:21:5d:7c:03:98:fc:a1:67:21:68:bb:0b:89:b9:
2a:28:0c:2e:79:e3:40:44:dd:bc:89:ca:28:eb:51:02:ed:41:
27:9a:19:c2:35:7e:44:f4:52:64:cc:87:18:21:d9:66:24:a6:
06:47:23:62:14:cf:7d:09:07:96:fb:76:06:6b:b3:14:03:d3:
c1:4c:da:06:da:bf:11:57:4c:cc:14:7c:c0:f6:51:a2:c7:31:
f5:1e:5b:22:cf:9b:eb:0f:1a:93:65:cc:ea:07:52:9a:21:d0:
20:e9:22:64:45:b9:92:f2:8b:79:34:c7:d1:39:90:3d:f2:40:
72:04:21:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:33 2023 by rpki-client on console-ams.rpki-client.org