Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/32950FD2689411EE92D36461C4F9AE02.roa
File: 32950FD2689411EE92D36461C4F9AE02.roa (raw, json)
Hash identifier: TKLbyGWjITtd2QhKtYEbfOgOBXsPwAWtJbi5harg338=
Subject key identifier: 69:C7:D4:E1:FB:EC:93:E1:F2:53:84:BB:24:C7:3E:21:C3:B0:20:E9
Certificate issuer: /CN=A9119363/serialNumber=C8C25C63DEF56700D657FC43994A551FE40CCDC7
Certificate serial: 03
Authority key identifier: C8:C2:5C:63:DE:F5:67:00:D6:57:FC:43:99:4A:55:1F:E4:0C:CD:C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yMJcY971ZwDWV_xDmUpVH-QMzcc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/32950FD2689411EE92D36461C4F9AE02.roa
Signing time: Thu 12 Oct 2023 00:13:41 +0000
ROA not before: Thu 12 Oct 2023 00:13:41 +0000
ROA not after: Wed 29 May 2024 00:00:00 +0000
asID: 136969
IP address blocks: 103.163.48.0/23 maxlen: 23
103.163.48.0/24 maxlen: 24
103.163.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119363/serialNumber=C8C25C63DEF56700D657FC43994A551FE40CCDC7
Validity
Not Before: Oct 12 00:13:41 2023 GMT
Not After : May 29 00:00:00 2024 GMT
Subject: CN=65273a35-09c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c8:0f:27:55:97:b9:01:b1:66:08:1b:cc:75:
ba:90:90:e3:2d:fa:87:8d:ca:75:89:e0:36:b7:c6:
b8:6f:3d:fb:da:2e:98:80:f0:4b:c8:8e:d9:e3:68:
35:fd:8b:d4:ae:10:a9:80:e2:77:87:67:a7:0a:16:
07:c9:70:ae:22:36:95:f2:d6:86:88:9e:86:0c:3b:
70:05:68:8c:47:53:4e:ff:fe:c7:98:5b:04:f1:76:
0e:3d:2a:17:9a:a3:85:2e:cf:cd:ba:35:6d:cc:f5:
11:99:bc:cc:04:98:4e:64:07:5c:d0:ed:b4:b3:46:
44:9b:0a:d1:68:c2:41:ec:3f:53:dc:1b:76:56:4d:
4a:0a:ab:68:9c:03:b4:50:43:d3:15:7d:cf:98:91:
b5:20:44:22:87:5d:a0:f6:c1:1c:07:b0:c2:b9:62:
7d:31:1f:01:4a:0d:4f:8e:aa:7a:15:94:cc:47:9b:
e1:f7:6f:fe:e6:1a:84:0c:e6:bc:98:1c:20:fc:bf:
d9:40:ae:30:e9:6b:8f:64:6f:a2:c7:4c:df:32:b3:
f0:9b:3d:71:39:d2:7a:c7:0b:0d:fb:e7:06:aa:d8:
cc:5b:a8:88:16:07:88:60:bf:eb:b8:61:ef:f0:b0:
1b:1f:cd:9c:bb:d5:eb:ba:93:77:eb:5b:67:fb:16:
5b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C7:D4:E1:FB:EC:93:E1:F2:53:84:BB:24:C7:3E:21:C3:B0:20:E9
X509v3 Authority Key Identifier:
keyid:C8:C2:5C:63:DE:F5:67:00:D6:57:FC:43:99:4A:55:1F:E4:0C:CD:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/yMJcY971ZwDWV_xDmUpVH-QMzcc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yMJcY971ZwDWV_xDmUpVH-QMzcc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/32950FD2689411EE92D36461C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.163.48.0/23
Signature Algorithm: sha256WithRSAEncryption
98:13:ea:22:6c:2b:b7:3a:73:37:4a:c8:0c:80:e4:17:2b:6c:
35:85:68:fc:e1:11:be:e4:49:ef:d2:e4:ac:a1:17:a4:07:1d:
3c:01:99:b3:94:9a:8c:f3:e0:37:1a:b0:4a:e6:68:8d:b4:48:
52:b3:d3:5c:e7:b5:f2:50:35:6a:46:b2:0b:98:39:26:a9:9e:
f8:f9:e2:e2:20:c2:69:1d:9f:8a:62:17:a6:e3:c4:ac:db:d4:
ae:ba:6e:b4:07:0e:b6:d2:65:24:17:ba:e9:e2:2d:a4:06:b3:
5a:1a:0c:08:26:e1:58:26:74:d2:49:62:88:16:1b:03:6e:90:
65:79:a8:5a:40:af:f7:00:2b:c0:b0:a2:2b:a5:00:7c:c5:ad:
b7:af:96:ed:57:66:d3:54:e5:46:7a:95:e1:03:c6:6a:2e:4a:
14:ea:50:9f:fb:33:9a:fa:34:52:35:b8:11:f4:20:59:c5:49:
3c:b5:d6:51:b7:5c:3d:cf:00:96:c9:62:61:37:bc:6a:43:98:
d0:48:61:e1:29:08:64:d4:0a:ef:fc:bf:8c:e4:c2:a0:59:e8:
35:57:c5:47:ac:3d:9d:c2:71:3d:2b:3e:a9:9f:fc:4d:4d:4b:
2e:9b:6b:91:90:68:4d:e2:c7:2f:d9:d9:b2:11:7e:06:0d:33:
91:f3:36:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:46 2024 by rpki-client on console-ams.rpki-client.org