Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127EEB/19A626FE128611EA82AA0E5EC4F9AE02/3DC20312321C11EB9E4C2483C4F9AE02.roa
File: 3DC20312321C11EB9E4C2483C4F9AE02.roa (raw, json)
Hash identifier: rFpvZeoOTR8XLv37GnN/ugRXTwGTi0fxMxPmknMBFA4=
Subject key identifier: 1F:5E:4B:C9:3B:07:89:44:89:D4:6F:38:D6:E0:BA:F5:0A:4F:EB:48
Certificate issuer: /CN=A9127EEB/serialNumber=B3DF6BDBA3EFEB6516D0E77E13682FCAF1139EE5
Certificate serial: 0A88
Authority key identifier: B3:DF:6B:DB:A3:EF:EB:65:16:D0:E7:7E:13:68:2F:CA:F1:13:9E:E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s99r26Pv62UW0Od-E2gvyvETnuU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127EEB/19A626FE128611EA82AA0E5EC4F9AE02/3DC20312321C11EB9E4C2483C4F9AE02.roa
Signing time: Fri 24 Feb 2023 20:27:07 +0000
ROA not before: Fri 24 Feb 2023 20:27:07 +0000
ROA not after: Wed 01 May 2024 00:00:00 +0000
asID: 60781
IP address blocks: 103.49.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2696 (0xa88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127EEB/serialNumber=B3DF6BDBA3EFEB6516D0E77E13682FCAF1139EE5
Validity
Not Before: Feb 24 20:27:07 2023 GMT
Not After : May 1 00:00:00 2024 GMT
Subject: CN=63f91d9a-1ab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f0:76:36:78:c1:6b:c4:bd:6c:d8:7e:16:20:
c5:7f:fe:49:03:7b:de:54:25:03:79:88:db:fa:d2:
78:4c:59:f5:31:40:98:b3:13:74:f6:bb:5a:8d:f2:
ae:53:84:4d:f5:9b:64:ab:b6:6c:c8:df:05:dc:df:
b6:87:4b:3c:23:e3:d9:c4:72:9e:d9:81:38:a2:25:
f5:6f:f2:2d:34:4a:7b:99:f1:b7:6c:f8:9a:04:5d:
d5:db:cf:8e:51:d3:0b:ba:6c:f6:d8:86:2b:3d:38:
a4:5e:e0:4b:fa:17:a0:46:ab:cf:a4:df:04:a2:fe:
f4:33:ee:bf:c9:ff:d5:d4:8a:65:33:9f:c9:7c:94:
3e:57:51:82:96:20:4d:2b:8b:e7:6d:6b:e3:c4:2a:
48:f7:3d:5e:c5:2a:7d:87:8c:ef:ed:89:65:81:0e:
6f:bc:7e:27:3f:54:eb:42:23:23:b2:6d:8b:f7:13:
f8:6f:d5:b3:28:fb:ba:f3:77:b1:25:cc:21:d2:e0:
61:70:fd:2b:a9:ec:1c:aa:c9:7f:c5:e6:79:f6:dc:
c3:ef:3d:91:e8:88:ec:06:97:19:f0:a0:68:29:a1:
5a:33:6a:50:00:e5:51:16:7b:07:b5:49:7c:0f:68:
4a:14:6e:a0:ea:48:9f:a6:68:78:52:2c:87:4d:cd:
91:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:5E:4B:C9:3B:07:89:44:89:D4:6F:38:D6:E0:BA:F5:0A:4F:EB:48
X509v3 Authority Key Identifier:
keyid:B3:DF:6B:DB:A3:EF:EB:65:16:D0:E7:7E:13:68:2F:CA:F1:13:9E:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127EEB/19A626FE128611EA82AA0E5EC4F9AE02/s99r26Pv62UW0Od-E2gvyvETnuU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s99r26Pv62UW0Od-E2gvyvETnuU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127EEB/19A626FE128611EA82AA0E5EC4F9AE02/3DC20312321C11EB9E4C2483C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.49.40.0/24
Signature Algorithm: sha256WithRSAEncryption
92:4e:3e:db:f6:1a:8b:67:9c:48:3b:05:65:95:d3:54:b4:b2:
2b:09:e4:ef:b2:76:80:24:97:5b:61:21:74:dd:96:a2:c4:45:
31:78:98:c5:68:d4:3f:25:33:a3:87:9a:c3:57:13:b6:a7:07:
d8:75:eb:23:51:b2:42:45:78:f3:74:33:78:29:5c:b3:9f:a3:
9e:90:8e:a5:e7:88:7d:7b:f4:00:a2:3c:83:fa:b6:57:a7:75:
29:e9:8a:82:47:f8:42:ca:5f:e6:e8:d2:02:e4:16:f1:78:08:
38:06:fb:dd:8c:e9:8c:e5:89:7c:3c:1b:93:bc:e7:24:4b:bc:
cb:c9:62:89:31:52:a8:9e:2e:72:6f:d2:e4:4d:82:30:b2:03:
fd:0b:19:3c:f1:e8:55:36:43:82:36:49:18:98:a2:d8:38:fe:
3e:bc:ef:c3:e2:4c:6b:b8:ea:36:e9:a1:06:71:6c:2c:23:3f:
55:5e:1a:59:a4:a8:ef:98:78:7f:77:57:92:b2:b3:e4:ba:2c:
9a:89:e4:81:cc:87:98:34:7c:3d:8c:2b:c0:af:de:ba:ea:22:
5e:51:ae:c6:24:6d:3e:1d:2e:dc:04:c7:bd:82:31:d5:30:04:
13:fd:ce:6c:3f:85:86:10:47:fd:fb:82:42:1e:82:13:01:99:
bb:c7:ca:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:48 2024 by rpki-client on console-ams.rpki-client.org