Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912903A/8DE18682B54A11EAB7E26C6DC4F9AE02/8D3B4C7AB54C11EAAB23FC70C4F9AE02.roa
File: 8D3B4C7AB54C11EAAB23FC70C4F9AE02.roa (raw, json)
Hash identifier: M9CAQQ4Vvf1EIGya7nojzOpdZ2IwkUx2BlOoCie+hs4=
Subject key identifier: 32:B9:FE:A4:58:61:72:AA:5C:B9:02:FF:CB:3C:AD:F9:A3:96:EC:6D
Certificate issuer: /CN=A912903A/serialNumber=39645E85E1A4FE7849B6A3DA01A7D0256200090F
Certificate serial: 0468
Authority key identifier: 39:64:5E:85:E1:A4:FE:78:49:B6:A3:DA:01:A7:D0:25:62:00:09:0F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OWReheGk_nhJtqPaAafQJWIACQ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912903A/8DE18682B54A11EAB7E26C6DC4F9AE02/8D3B4C7AB54C11EAAB23FC70C4F9AE02.roa
Signing time: Thu 02 Dec 2021 10:58:59 +0000
ROA not before: Thu 02 Dec 2021 10:58:59 +0000
ROA not after: Tue 31 Jan 2023 00:00:00 +0000
asID: 133882
IP address blocks: 103.44.220.0/24 maxlen: 24
103.87.189.0/24 maxlen: 24
103.87.190.0/23 maxlen: 23
202.3.13.0/24 maxlen: 24
2001:df1:9c00::/48 maxlen: 48
2403:bc80::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1128 (0x468)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912903A/serialNumber=39645E85E1A4FE7849B6A3DA01A7D0256200090F
Validity
Not Before: Dec 2 10:58:59 2021 GMT
Not After : Jan 31 00:00:00 2023 GMT
Subject: CN=61a8a6f3-8735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a2:54:c6:b6:d8:14:d5:54:eb:f0:f4:d6:c1:
59:1c:26:8f:75:0b:c4:75:66:8e:6d:bf:dc:69:42:
e3:c5:65:cf:62:64:c9:b8:6c:c0:30:7e:37:0d:88:
d7:f8:3c:cf:84:45:fa:d6:2e:1f:a5:d8:45:7a:1a:
77:b4:1a:34:17:8b:7c:a2:f0:6c:68:ae:b7:cd:8c:
43:46:7e:c8:c0:d4:21:9b:98:24:16:4f:95:de:b9:
32:19:ce:a3:6f:57:01:2f:42:2d:ff:7e:9c:9d:36:
41:16:64:ac:04:97:6b:43:6c:cd:33:2c:ba:62:f3:
ff:0e:ba:1f:31:0f:89:3d:9a:d5:69:9e:f2:47:27:
cb:63:a1:b4:8e:24:f7:3c:bd:b7:44:8c:32:2b:4d:
de:9a:ca:50:30:f8:9b:bb:cf:98:f3:40:3b:d7:89:
8e:82:f8:fb:07:f0:81:af:55:7a:4d:02:40:3a:c4:
01:92:c4:bb:81:b7:37:65:e1:76:c2:64:04:be:8b:
ec:d7:2a:94:aa:ab:34:8c:34:f5:c8:13:a3:54:d9:
b5:79:69:bc:91:f3:c0:90:1d:e2:e9:91:61:be:e0:
8e:96:11:86:18:de:e6:cd:77:c4:57:db:36:67:73:
51:0f:c7:10:7d:34:4b:01:05:db:fa:df:b9:ef:d5:
f6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B9:FE:A4:58:61:72:AA:5C:B9:02:FF:CB:3C:AD:F9:A3:96:EC:6D
X509v3 Authority Key Identifier:
keyid:39:64:5E:85:E1:A4:FE:78:49:B6:A3:DA:01:A7:D0:25:62:00:09:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912903A/8DE18682B54A11EAB7E26C6DC4F9AE02/OWReheGk_nhJtqPaAafQJWIACQ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OWReheGk_nhJtqPaAafQJWIACQ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912903A/8DE18682B54A11EAB7E26C6DC4F9AE02/8D3B4C7AB54C11EAAB23FC70C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.44.220.0/24
103.87.189.0-103.87.191.255
202.3.13.0/24
IPv6:
2001:df1:9c00::/48
2403:bc80::/32
Signature Algorithm: sha256WithRSAEncryption
7d:e2:11:54:b6:3b:85:a5:24:21:fa:62:0a:eb:c7:68:9f:db:
5b:58:fb:ff:15:46:3d:d7:ef:13:79:74:04:1d:df:87:5b:1c:
4a:93:e8:c4:43:8a:1c:f5:0d:66:61:97:d0:b6:44:e3:81:fe:
7c:e0:b4:33:21:ad:d8:cd:ec:ad:ea:f7:86:f0:4e:15:5f:51:
79:b3:c3:cd:e2:d4:3a:01:5a:86:6b:37:bb:96:56:d6:ea:b9:
b0:8c:55:1e:68:a5:c3:9d:f8:88:a2:60:46:4e:17:4a:13:53:
38:69:3a:4b:c1:f5:4d:e2:54:b8:b7:20:31:29:b1:90:9a:4e:
3a:db:47:fd:bf:b1:68:24:3c:e6:96:35:bb:8a:80:d8:2a:cd:
61:88:33:cb:fa:37:9d:4f:cd:10:e1:77:75:30:99:00:20:65:
fb:c0:66:cc:94:b7:59:71:db:60:71:8c:6b:c6:88:79:23:bc:
e5:91:54:9e:63:e4:1a:bf:03:ea:cc:5a:75:7a:2f:22:39:02:
74:38:27:19:6e:52:52:94:ee:08:1c:5e:2f:4a:1e:c3:c3:be:
30:2a:8a:0d:2b:4d:51:7a:8c:37:12:e4:da:c3:81:ac:da:8e:
04:57:2c:8a:cb:d2:39:46:df:d3:23:9e:1a:b0:55:1c:c6:c7:
60:76:a5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:57 2024 by rpki-client on console-fra.rpki-client.org