Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9133B2F/45E7BC7CC1A511EA8C01B63DC4F9AE02/C9798764A28711EB9BDD0863C4F9AE02.roa
File: C9798764A28711EB9BDD0863C4F9AE02.roa (raw, json)
Hash identifier: MhAVMLGhPVf6jihyqH/g1z3NVjJm33Nejtt67V70Cbg=
Subject key identifier: 27:99:79:07:F4:1E:FA:A2:A5:04:BC:3A:62:18:77:E0:26:1E:E5:B2
Certificate issuer: /CN=A9133B2F/serialNumber=0DC89E5E9C488F41AC8111637454C654B7ADA8F2
Certificate serial: 06B7
Authority key identifier: 0D:C8:9E:5E:9C:48:8F:41:AC:81:11:63:74:54:C6:54:B7:AD:A8:F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DcieXpxIj0GsgRFjdFTGVLetqPI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9133B2F/45E7BC7CC1A511EA8C01B63DC4F9AE02/C9798764A28711EB9BDD0863C4F9AE02.roa
Signing time: Wed 02 Nov 2022 22:49:18 +0000
ROA not before: Wed 02 Nov 2022 22:49:18 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 26636
IP address blocks: 103.75.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1719 (0x6b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9133B2F/serialNumber=0DC89E5E9C488F41AC8111637454C654B7ADA8F2
Validity
Not Before: Nov 2 22:49:18 2022 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=6362f3ee-48fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4e:d6:99:9e:c9:d2:15:05:20:51:56:5d:36:
34:24:32:f6:03:c0:ad:94:f0:3c:79:a1:95:af:a4:
61:96:2e:f2:7a:f6:97:4e:51:fe:84:50:d1:03:53:
11:f0:74:03:fd:7b:10:eb:b5:8d:c7:be:d5:0f:be:
17:bb:0b:51:c1:02:21:38:bb:fa:2c:86:8d:ab:84:
f2:d6:13:b0:03:57:12:14:50:b5:5b:19:a8:2b:4f:
94:d3:84:e0:ad:92:70:23:b9:18:b4:4d:00:cb:69:
01:eb:f1:a5:bf:63:a9:f1:68:38:4a:c9:52:9f:59:
5e:21:55:94:5a:23:fc:be:28:40:f7:6b:e7:b0:3b:
75:04:10:f2:bc:e1:2c:4a:f8:84:68:66:e9:1e:46:
3f:ea:60:ce:ac:bf:db:f4:86:73:94:78:4e:6e:da:
39:b6:8c:20:aa:8a:d7:ad:d5:79:2f:49:61:bf:fa:
b5:72:ea:61:1e:85:79:3a:35:a9:57:5e:d5:78:11:
17:57:f8:60:95:3b:26:97:97:8f:d5:ac:74:82:eb:
61:74:7c:9c:e7:41:55:f7:c9:04:f0:f4:9f:16:6c:
bf:2c:a5:de:9c:ba:ac:b2:02:02:9e:dd:5a:ae:5f:
50:b0:79:96:6f:39:e4:41:cc:1a:47:22:78:54:d9:
a7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:99:79:07:F4:1E:FA:A2:A5:04:BC:3A:62:18:77:E0:26:1E:E5:B2
X509v3 Authority Key Identifier:
keyid:0D:C8:9E:5E:9C:48:8F:41:AC:81:11:63:74:54:C6:54:B7:AD:A8:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9133B2F/45E7BC7CC1A511EA8C01B63DC4F9AE02/DcieXpxIj0GsgRFjdFTGVLetqPI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DcieXpxIj0GsgRFjdFTGVLetqPI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133B2F/45E7BC7CC1A511EA8C01B63DC4F9AE02/C9798764A28711EB9BDD0863C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.75.231.0/24
Signature Algorithm: sha256WithRSAEncryption
83:f7:9c:36:eb:ff:b8:97:a6:5e:b7:76:7d:ae:04:8a:83:a1:
45:08:2f:9d:4f:36:ac:da:5d:70:5b:fa:db:83:ff:10:17:54:
0a:47:f1:61:86:f4:76:80:b5:d7:51:55:31:9f:95:2a:ce:08:
ec:41:18:32:af:b9:e9:07:12:2f:d5:3c:f6:4c:49:9c:07:aa:
f3:bb:93:9b:2a:94:67:36:c4:fd:af:cf:00:2e:97:a4:b5:9a:
60:05:06:90:5f:98:8f:a0:26:8d:aa:39:6a:4b:c6:76:83:37:
73:27:4c:51:ca:f1:6a:3e:17:95:a9:0e:2f:0f:b4:36:f3:c8:
dd:69:97:be:2b:df:33:50:d4:0b:d5:9c:e5:48:16:32:43:0c:
0b:b9:f8:e4:fb:22:ad:df:8b:b4:69:a8:d9:e1:56:02:05:ef:
8f:9a:41:ad:97:3e:65:fb:9b:4f:51:1f:01:c4:ef:4d:c8:0b:
ed:87:13:02:6d:be:0c:f4:d4:57:9f:4d:f4:b0:b2:12:21:8a:
a3:78:56:31:e9:5b:d8:6a:b9:53:ad:d5:d0:34:6b:ff:e7:f2:
90:76:bd:23:ad:5c:2e:5f:30:41:d4:08:e1:19:d6:68:ae:be:
1a:98:c1:01:49:65:de:2e:49:4b:d7:86:ea:83:32:7e:c0:52:
83:eb:71:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:38 2023 by rpki-client on console-fra.rpki-client.org