Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127EEB/19A626FE128611EA82AA0E5EC4F9AE02/D2184FD871C211EE85B0ED81C4F9AE02.roa
File: D2184FD871C211EE85B0ED81C4F9AE02.roa (raw, json)
Hash identifier: BRuM/aP0Is5djv52cXhI2EOSCJizqY2tRETxGGNWDTs=
Subject key identifier: 96:27:A0:64:01:1E:D0:BF:7D:B9:BA:9B:4B:6E:82:47:5E:33:F7:80
Certificate issuer: /CN=A9127EEB/serialNumber=B3DF6BDBA3EFEB6516D0E77E13682FCAF1139EE5
Certificate serial: 0B08
Authority key identifier: B3:DF:6B:DB:A3:EF:EB:65:16:D0:E7:7E:13:68:2F:CA:F1:13:9E:E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s99r26Pv62UW0Od-E2gvyvETnuU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127EEB/19A626FE128611EA82AA0E5EC4F9AE02/D2184FD871C211EE85B0ED81C4F9AE02.roa
Signing time: Mon 23 Oct 2023 16:40:06 +0000
ROA not before: Mon 23 Oct 2023 16:40:06 +0000
ROA not after: Wed 01 May 2024 00:00:00 +0000
asID: 834
IP address blocks: 103.49.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2824 (0xb08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127EEB/serialNumber=B3DF6BDBA3EFEB6516D0E77E13682FCAF1139EE5
Validity
Not Before: Oct 23 16:40:06 2023 GMT
Not After : May 1 00:00:00 2024 GMT
Subject: CN=6536a1e6-5d5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:23:90:b8:70:d0:7a:56:3d:06:02:80:7d:c3:
c0:0e:84:a4:12:3c:76:76:9f:0c:0f:10:7f:73:77:
6d:a7:24:1f:0b:c5:62:73:70:8d:2f:4e:11:cf:ad:
9f:c7:00:0f:33:4c:8d:ea:1c:7c:48:c8:f9:a7:d0:
6d:6a:d6:0c:8a:20:a1:f6:eb:23:a9:36:c2:34:0e:
12:3a:c1:1c:74:99:cc:7f:84:3e:05:b9:60:a8:10:
45:18:2c:6c:38:f7:6d:21:eb:c2:7e:cb:65:17:74:
ff:66:8e:2c:53:2d:02:e7:20:43:ec:af:d1:0a:61:
14:8a:a5:24:b7:29:97:e9:5a:d9:a2:05:fa:66:c2:
07:92:ba:d3:8b:40:3f:28:23:53:d8:e3:98:f4:59:
67:8b:7d:35:59:4d:6c:0f:c8:d9:ff:d1:bb:81:53:
95:16:a5:25:02:35:69:c3:14:5e:0d:c6:d1:dd:e6:
e9:46:24:9e:a0:a1:3f:d3:0f:13:b6:54:0d:7e:1e:
23:14:3e:8c:63:8a:35:33:7c:cb:4e:39:c0:d8:f5:
f5:6f:f9:f8:2f:08:44:88:8e:33:91:4d:31:23:73:
0d:21:7e:97:91:76:0b:9c:35:ec:04:72:4b:14:ed:
ee:73:df:8e:ff:2e:76:dc:14:d4:51:f7:b6:a3:4b:
93:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:27:A0:64:01:1E:D0:BF:7D:B9:BA:9B:4B:6E:82:47:5E:33:F7:80
X509v3 Authority Key Identifier:
keyid:B3:DF:6B:DB:A3:EF:EB:65:16:D0:E7:7E:13:68:2F:CA:F1:13:9E:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127EEB/19A626FE128611EA82AA0E5EC4F9AE02/s99r26Pv62UW0Od-E2gvyvETnuU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s99r26Pv62UW0Od-E2gvyvETnuU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127EEB/19A626FE128611EA82AA0E5EC4F9AE02/D2184FD871C211EE85B0ED81C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.49.43.0/24
Signature Algorithm: sha256WithRSAEncryption
45:ec:38:cc:db:b0:1d:b7:34:91:25:98:b1:cc:47:2f:51:57:
a1:0a:aa:f7:9c:99:cf:d8:7d:25:91:db:bc:f2:e7:b6:0f:76:
b5:7a:d8:fc:99:04:98:ab:aa:f7:63:2b:70:0c:32:f6:be:06:
39:f8:c9:f8:98:c5:92:a5:0b:bf:f0:63:35:26:e5:0e:9c:39:
2b:bb:04:ac:d7:b1:bf:06:96:84:fd:4c:9e:f2:d1:fd:fd:9a:
dd:90:b5:d7:a1:0e:e7:b3:f0:8a:e5:2c:fa:94:5f:b6:8e:5f:
a5:3f:a0:20:6b:9c:3e:f0:4e:41:c4:61:1b:c9:27:2d:3a:9d:
d6:1b:6e:ea:03:8a:ef:fb:95:6d:bb:32:3c:77:8d:ea:b4:11:
17:cf:c3:88:f6:86:a3:34:f3:1d:ff:0e:f7:1b:79:d7:4a:f0:
82:f6:99:6f:5f:e8:e4:52:e3:37:12:29:e5:a1:52:de:0e:ad:
9a:d2:f8:c5:49:78:96:f0:f7:24:4f:62:63:61:23:fd:bc:ba:
ce:67:0f:38:04:65:49:72:09:43:f6:6b:6a:7f:73:15:91:61:
c7:20:8f:ac:e4:85:46:8e:ee:af:c5:7f:bc:19:44:5f:55:ed:
3f:45:c5:52:97:91:97:d6:e7:54:fa:c1:eb:22:4c:84:4b:5a:
44:fd:f2:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 17 23:34:12 2023 by rpki-client on console-ams.rpki-client.org