Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911DBA5/6C64C9DAB1F411EC80AB4866C4F9AE02/40C7328CB1F811EC862C476DC4F9AE02.roa
File: 40C7328CB1F811EC862C476DC4F9AE02.roa (raw, json)
Hash identifier: NBmXXTdPc+KL107FM1SDMxoL/S+v9el9UgeogxGlU7c=
Subject key identifier: 63:E4:BF:CB:0F:0A:6A:02:F0:96:60:66:12:50:1E:9D:7A:C4:D0:B6
Certificate issuer: /CN=A911DBA5/serialNumber=7CDC8B0E3E557116B39C2A72F85712FC1496FF64
Certificate serial: 01ED
Authority key identifier: 7C:DC:8B:0E:3E:55:71:16:B3:9C:2A:72:F8:57:12:FC:14:96:FF:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNyLDj5VcRaznCpy-FcS_BSW_2Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911DBA5/6C64C9DAB1F411EC80AB4866C4F9AE02/40C7328CB1F811EC862C476DC4F9AE02.roa
Signing time: Sat 03 Jun 2023 05:43:51 +0000
ROA not before: Sat 03 Jun 2023 05:43:51 +0000
ROA not after: Sun 01 Oct 2023 00:00:00 +0000
asID: 132480
IP address blocks: 103.183.244.0/24 maxlen: 24
103.183.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 493 (0x1ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911DBA5/serialNumber=7CDC8B0E3E557116B39C2A72F85712FC1496FF64
Validity
Not Before: Jun 3 05:43:51 2023 GMT
Not After : Oct 1 00:00:00 2023 GMT
Subject: CN=647ad317-6e67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:03:ca:c7:9f:ae:57:ad:51:5f:ec:e8:c8:f1:
75:27:99:b8:b5:89:b6:c5:1a:1a:2d:41:c8:31:95:
9d:17:fb:95:76:ca:2a:47:dd:15:7f:0b:6b:80:f5:
77:a8:28:a1:cb:c9:34:25:d8:f4:bb:e1:e9:89:f4:
78:47:c5:02:d9:59:d7:12:3a:2d:82:66:2a:37:db:
5b:99:c2:4a:c0:ab:0a:03:65:0d:e0:21:aa:8a:45:
25:69:be:15:c6:8f:53:e5:4d:46:57:17:08:84:f1:
21:50:7a:f2:a1:72:e4:f8:57:ae:58:96:01:61:3a:
0f:c2:52:13:c8:11:60:ac:e0:0f:5b:cd:76:90:24:
5b:f3:ff:7f:9b:ae:72:37:24:cb:b3:c7:c3:9e:f3:
39:8f:b4:51:c1:bf:0f:a4:ea:a4:d6:84:95:39:73:
cd:ed:be:e5:cc:db:07:7b:12:d8:bb:5f:c1:e0:7f:
ed:80:f5:90:4e:c1:f0:a9:14:7d:51:be:69:93:c5:
9b:b1:a5:f3:f9:37:bf:fe:df:f3:f7:66:b9:de:ba:
ca:8e:82:c5:81:18:64:f7:da:62:ac:5e:e6:ed:ed:
24:bf:58:f6:14:f3:51:e2:aa:b5:99:94:1e:65:23:
9b:65:47:15:3a:0e:cb:fc:41:09:db:24:bd:46:db:
a8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E4:BF:CB:0F:0A:6A:02:F0:96:60:66:12:50:1E:9D:7A:C4:D0:B6
X509v3 Authority Key Identifier:
keyid:7C:DC:8B:0E:3E:55:71:16:B3:9C:2A:72:F8:57:12:FC:14:96:FF:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911DBA5/6C64C9DAB1F411EC80AB4866C4F9AE02/fNyLDj5VcRaznCpy-FcS_BSW_2Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNyLDj5VcRaznCpy-FcS_BSW_2Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DBA5/6C64C9DAB1F411EC80AB4866C4F9AE02/40C7328CB1F811EC862C476DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.183.244.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:f8:59:d1:f8:cf:c7:83:e4:1e:38:92:3e:33:03:ae:8b:ae:
61:2a:6a:12:e4:01:a1:29:d0:a9:74:0b:c4:17:ee:04:0c:7d:
e6:6b:11:e2:50:a6:a4:87:c4:3f:fb:95:f9:07:84:6e:12:1e:
be:fd:67:04:ab:8c:02:d7:42:2a:25:aa:dd:c6:08:e5:8a:64:
c9:a2:4a:09:98:33:8f:76:71:0b:1a:db:57:7a:5a:c3:78:3b:
ed:3a:a0:54:86:9c:22:a4:e3:01:59:22:57:68:56:e6:c3:c8:
96:92:54:1a:0c:71:00:ec:40:ad:a9:72:7e:95:37:f2:45:58:
91:79:c2:b4:66:a9:62:25:15:7d:75:2b:f6:f3:d4:e7:cd:e9:
18:9f:03:9e:0c:e1:20:f1:ba:1e:81:c5:b1:bb:06:f2:3d:dd:
cd:79:f9:63:c4:df:62:0c:ce:a8:ed:f4:d1:60:04:e3:ac:85:
b9:80:40:ef:a2:f5:61:a0:4e:54:8a:57:b8:dc:56:6b:20:6a:
92:79:41:7a:09:74:8f:42:d3:7e:64:90:58:2f:ea:28:0f:25:
ea:05:dd:00:0a:2e:09:ce:cb:71:2b:fe:5c:a9:1b:7d:5d:55:
39:64:27:27:bc:12:87:a5:f9:fc:a6:bc:5e:08:4d:73:67:fc:
f5:08:9a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 14 13:49:38 2023 by rpki-client on console-ams.rpki-client.org