Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912EB47/D6B81358CFDA11EAA34F083AC4F9AE02/EF7FD078D62A11EA816EC60CC4F9AE02.roa
File: EF7FD078D62A11EA816EC60CC4F9AE02.roa (raw, json)
Hash identifier: P1nXaZ6t1AIwsUX9Dq7ebHQV5if3Q2lD7AZVa02T0sQ=
Subject key identifier: 40:23:A6:DF:E5:5C:1C:1E:72:C7:7D:1D:33:9E:E7:41:2B:6F:85:C5
Certificate issuer: /CN=A912EB47/serialNumber=89918F0521902773C54D9CACB545F413224BC1CA
Certificate serial: 06EF
Authority key identifier: 89:91:8F:05:21:90:27:73:C5:4D:9C:AC:B5:45:F4:13:22:4B:C1:CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iZGPBSGQJ3PFTZystUX0EyJLwco.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912EB47/D6B81358CFDA11EAA34F083AC4F9AE02/EF7FD078D62A11EA816EC60CC4F9AE02.roa
Signing time: Mon 28 Aug 2023 21:38:44 +0000
ROA not before: Mon 28 Aug 2023 21:38:44 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 132037
IP address blocks: 103.69.248.0/24 maxlen: 24
103.69.249.0/24 maxlen: 24
103.69.250.0/24 maxlen: 24
103.69.251.0/24 maxlen: 24
2406:780::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1775 (0x6ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912EB47/serialNumber=89918F0521902773C54D9CACB545F413224BC1CA
Validity
Not Before: Aug 28 21:38:44 2023 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=64ed13e4-f773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:eb:ff:22:01:04:6f:a2:0f:47:21:90:61:20:
f3:77:7f:2c:0f:9d:b3:7f:b4:c3:a0:47:df:6f:33:
e9:72:70:a7:0c:9e:f8:84:0a:71:67:7f:84:9c:d9:
3a:d8:56:66:4c:d6:fc:19:3d:d2:20:2b:77:9b:e3:
2a:4a:a5:c8:0d:54:2e:58:a2:42:e0:da:7e:61:ac:
e1:bf:fe:a5:cd:fa:cb:7a:32:ad:65:8a:aa:ad:a1:
c6:17:a6:f8:27:0a:bd:bc:f3:99:9a:8c:41:27:b1:
66:42:f0:6a:72:3e:48:c8:43:d4:45:03:01:c2:71:
ab:d4:f0:f2:61:44:a3:77:f9:b5:d3:42:a0:43:b6:
64:47:a1:17:36:40:ca:4b:1a:aa:b6:03:08:9d:b0:
b4:90:d0:17:a2:f4:ca:36:ec:9e:b4:d7:35:0d:d2:
b5:ef:3a:1d:f3:67:3b:2f:bc:2c:23:b1:77:3a:c2:
8c:4e:17:c5:c2:fd:2a:ec:0f:df:40:21:07:d3:43:
b6:90:e9:dc:ac:6a:a1:b1:5a:9e:17:72:59:b5:19:
17:f0:8b:26:01:60:a8:ed:cb:0c:d1:96:c4:a2:b0:
ab:c0:83:fa:21:e3:07:c7:8a:f4:95:51:02:39:ef:
8b:51:e5:4a:06:86:8f:c8:4e:43:21:95:0c:86:ad:
17:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:23:A6:DF:E5:5C:1C:1E:72:C7:7D:1D:33:9E:E7:41:2B:6F:85:C5
X509v3 Authority Key Identifier:
keyid:89:91:8F:05:21:90:27:73:C5:4D:9C:AC:B5:45:F4:13:22:4B:C1:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912EB47/D6B81358CFDA11EAA34F083AC4F9AE02/iZGPBSGQJ3PFTZystUX0EyJLwco.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iZGPBSGQJ3PFTZystUX0EyJLwco.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EB47/D6B81358CFDA11EAA34F083AC4F9AE02/EF7FD078D62A11EA816EC60CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.69.248.0/22
IPv6:
2406:780::/32
Signature Algorithm: sha256WithRSAEncryption
8c:5f:b2:5d:64:20:e9:1d:5c:9e:da:65:e9:fa:b0:62:60:ba:
d8:4e:fe:78:2a:80:3b:95:fd:71:67:59:9a:ea:b1:af:0c:5b:
fe:41:bc:72:b3:a6:a3:fc:6d:c0:7a:6d:1d:e5:3e:ab:79:dd:
cd:1f:f2:f7:98:ec:df:65:24:f9:cb:d1:8e:be:ad:d6:02:6a:
3b:7f:fc:87:ec:6c:ec:3e:4b:78:ed:78:06:1c:ee:7a:8e:8b:
78:70:58:9e:22:03:cd:77:c6:10:e2:36:f3:07:ad:b5:82:bd:
5c:44:7a:eb:71:3e:31:f6:24:ef:0c:86:74:df:22:fe:8c:c8:
64:0f:b9:a4:dc:e8:77:f2:3c:06:e9:04:de:b9:c6:b0:e0:66:
e0:55:9d:d9:89:bd:64:01:39:58:aa:c4:e8:18:48:5c:a0:c6:
8c:87:5a:d3:93:3f:77:f2:be:c6:79:37:ec:11:e5:81:15:1d:
db:21:57:d6:63:3c:8f:24:26:79:86:08:cd:61:ff:77:5b:49:
f5:0b:9e:b6:27:8c:a4:23:c2:bb:99:0d:74:72:91:37:a1:3a:
18:fe:ab:76:29:a9:2e:ef:83:dc:b0:fd:0d:4a:1a:79:29:ec:
02:d0:5a:fa:80:5b:7d:d9:a7:e0:c5:00:cc:c0:38:0d:9a:c7:
69:57:7c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:53 2024 by rpki-client on console-ams.rpki-client.org