Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91279E6/F14A465A68D311EAADDCEE7CC4F9AE02/41DBABC6740B11EA8761F56CC4F9AE02.roa
File: 41DBABC6740B11EA8761F56CC4F9AE02.roa (raw, json)
Hash identifier: U+6gHLWofQjFcy7GWtjBt6hu+v7KUxr073JVUxQHsEU=
Subject key identifier: 24:2E:68:4F:2F:61:27:1C:C8:1B:E1:6B:54:23:7B:AB:56:0B:40:2D
Certificate issuer: /CN=A91279E6/serialNumber=0A44CD83C0901A567FC72C19126617881A47A121
Certificate serial: 08F2
Authority key identifier: 0A:44:CD:83:C0:90:1A:56:7F:C7:2C:19:12:66:17:88:1A:47:A1:21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkTNg8CQGlZ_xywZEmYXiBpHoSE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91279E6/F14A465A68D311EAADDCEE7CC4F9AE02/41DBABC6740B11EA8761F56CC4F9AE02.roa
Signing time: Wed 31 May 2023 22:43:42 +0000
ROA not before: Wed 31 May 2023 22:43:42 +0000
ROA not after: Sun 01 Oct 2023 00:00:00 +0000
asID: 9833
IP address blocks: 103.149.162.0/24 maxlen: 24
103.149.163.0/24 maxlen: 24
2001:df3:2e80::/48 maxlen: 48
2001:df3:2e81::/48 maxlen: 48
2001:df3:2e82::/47 maxlen: 48
2001:df3:2e84::/46 maxlen: 47
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2290 (0x8f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91279E6/serialNumber=0A44CD83C0901A567FC72C19126617881A47A121
Validity
Not Before: May 31 22:43:42 2023 GMT
Not After : Oct 1 00:00:00 2023 GMT
Subject: CN=6477cd9e-3e1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:25:ac:3c:3a:a7:64:44:a4:88:0e:b3:0f:9c:
1b:2f:df:aa:6d:90:73:a7:11:54:f8:5a:d2:84:39:
08:3e:60:25:51:e1:ad:15:2d:58:54:12:a3:f6:1c:
cb:97:a1:d0:86:0a:46:31:49:a2:33:d9:ba:71:98:
bb:ba:80:1e:b7:79:e4:7d:4c:cd:51:e6:25:68:c5:
67:f1:ee:41:05:5c:dc:9d:1f:5e:dd:f3:77:11:c6:
7f:76:91:1b:20:08:d1:b1:46:bb:74:ee:21:69:99:
23:ed:49:72:d6:d7:2d:12:76:e5:77:03:1d:52:aa:
be:68:e9:32:ac:c7:e6:5a:48:c0:21:60:ae:74:43:
b3:6a:d5:7b:cb:d9:65:aa:b6:47:70:08:09:05:5d:
bf:d0:6f:cb:1f:71:c3:44:f0:95:af:fc:0b:56:6a:
1f:1e:a8:2f:96:17:58:86:88:45:8d:fd:aa:04:78:
d2:59:b6:20:c3:44:bd:cf:fa:e5:7d:59:f2:13:80:
1b:cf:65:27:db:f9:15:22:2b:e9:2a:5b:4f:26:6f:
9d:cb:08:5a:20:c9:90:44:4c:d7:19:20:07:24:fc:
25:cf:cc:1c:d6:b6:44:90:20:1f:d9:02:37:89:e0:
7c:95:38:ea:f3:30:05:6b:0a:30:7c:93:d5:75:6b:
7b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:2E:68:4F:2F:61:27:1C:C8:1B:E1:6B:54:23:7B:AB:56:0B:40:2D
X509v3 Authority Key Identifier:
keyid:0A:44:CD:83:C0:90:1A:56:7F:C7:2C:19:12:66:17:88:1A:47:A1:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91279E6/F14A465A68D311EAADDCEE7CC4F9AE02/CkTNg8CQGlZ_xywZEmYXiBpHoSE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkTNg8CQGlZ_xywZEmYXiBpHoSE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91279E6/F14A465A68D311EAADDCEE7CC4F9AE02/41DBABC6740B11EA8761F56CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.149.162.0/23
IPv6:
2001:df3:2e80::/45
Signature Algorithm: sha256WithRSAEncryption
49:c1:50:12:66:5e:7c:f1:43:df:ad:1e:0e:f7:9e:34:9b:5a:
ec:3f:93:02:d8:26:87:73:4a:9b:ad:59:90:e6:0e:f0:06:b3:
66:2b:cd:2d:e2:9b:36:7e:5a:eb:e7:ab:c4:87:d0:6e:6c:ab:
ad:a1:37:22:e5:5b:d5:fb:e9:3b:8d:68:e3:fc:50:9f:7f:f7:
b0:8e:31:bf:17:90:9d:a5:e0:b4:75:80:bd:41:ca:b9:0e:73:
d6:f4:ac:3a:6d:5d:f1:51:a7:e5:84:79:83:29:f0:0a:fa:8a:
e9:85:e0:d2:2a:f2:fa:c3:94:31:5c:b5:49:bf:ed:17:a1:c4:
76:b8:13:ed:7f:61:ca:8a:1a:ff:27:fa:ad:88:ea:86:a9:90:
d8:75:bc:82:d9:82:6d:d9:bc:7d:a3:2b:44:e7:e0:fd:8f:8b:
33:5c:0b:2c:85:a8:a0:be:1b:62:c8:08:ef:eb:b6:db:8b:54:
29:1a:07:3d:2f:1a:e9:c7:2e:39:ad:56:a6:eb:ad:f9:39:c2:
8c:93:05:20:da:8c:e5:ce:6c:8c:a9:ee:30:4d:45:41:cf:d8:
e2:c1:6c:9b:dc:dd:a5:4f:e5:1d:49:7e:67:47:1b:dd:6f:f2:
3e:46:73:a1:fc:78:45:b0:85:c0:35:4a:d6:4d:f8:dc:82:bf:
ee:92:f0:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:57 2024 by rpki-client on console-fra.rpki-client.org