Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9133B2F/45E7BC7CC1A511EA8C01B63DC4F9AE02/CA3F3C8EA28711EB9BDD0863C4F9AE02.roa
File: CA3F3C8EA28711EB9BDD0863C4F9AE02.roa (raw, json)
Hash identifier: HlHZWgahg2qXXwuJX1x5yjErdNGHhLPzkUDWBUU7EbE=
Subject key identifier: BE:A9:79:89:FE:31:C0:66:15:33:4A:AD:E4:66:4E:B9:96:41:51:D8
Certificate issuer: /CN=A9133B2F/serialNumber=0DC89E5E9C488F41AC8111637454C654B7ADA8F2
Certificate serial: 06B8
Authority key identifier: 0D:C8:9E:5E:9C:48:8F:41:AC:81:11:63:74:54:C6:54:B7:AD:A8:F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DcieXpxIj0GsgRFjdFTGVLetqPI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9133B2F/45E7BC7CC1A511EA8C01B63DC4F9AE02/CA3F3C8EA28711EB9BDD0863C4F9AE02.roa
Signing time: Wed 02 Nov 2022 22:49:19 +0000
ROA not before: Wed 02 Nov 2022 22:49:19 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 3356
IP address blocks: 103.75.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1720 (0x6b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9133B2F/serialNumber=0DC89E5E9C488F41AC8111637454C654B7ADA8F2
Validity
Not Before: Nov 2 22:49:19 2022 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=6362f3ef-720e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:98:9b:da:97:e8:62:40:f0:5a:12:09:2a:45:
2d:db:38:47:31:86:3c:b7:08:98:27:80:a4:5f:6b:
bb:49:4f:0b:04:ba:e9:3a:88:fc:ba:af:13:cb:10:
11:96:67:6c:60:01:e2:dc:d8:7a:01:4c:bd:41:3f:
59:2c:42:07:6f:9b:6c:d5:ea:03:95:67:31:d5:7f:
12:7b:43:ad:dd:b7:2d:f9:ac:c4:47:a6:1e:4a:cd:
7b:be:b4:79:35:f0:6a:01:e2:42:ae:4c:9a:fe:bb:
b3:14:07:62:5d:1d:35:04:70:08:8b:2a:7f:b1:6b:
d4:d6:dc:62:b1:ba:f6:48:31:bf:a4:36:dd:5c:28:
97:db:87:cc:67:7e:b7:5c:2d:01:47:35:2e:f5:d8:
66:21:89:d6:b3:41:76:4e:51:cc:d8:44:03:be:6b:
b5:05:c4:f5:b9:58:6c:22:1d:2b:0a:59:16:6d:a5:
5a:a2:25:1d:93:20:44:c1:f1:e8:2a:25:90:0b:3d:
10:ec:2f:75:0e:5e:50:ee:50:5c:89:ab:6b:b5:35:
1d:a6:e8:2e:fd:20:df:d0:40:86:ca:ac:4b:eb:f7:
53:80:e7:1d:ea:e3:c6:d9:bf:bc:eb:d4:49:4b:99:
5c:ae:a4:5a:4c:ac:54:ff:fc:99:ee:96:0e:e3:bf:
5f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A9:79:89:FE:31:C0:66:15:33:4A:AD:E4:66:4E:B9:96:41:51:D8
X509v3 Authority Key Identifier:
keyid:0D:C8:9E:5E:9C:48:8F:41:AC:81:11:63:74:54:C6:54:B7:AD:A8:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9133B2F/45E7BC7CC1A511EA8C01B63DC4F9AE02/DcieXpxIj0GsgRFjdFTGVLetqPI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DcieXpxIj0GsgRFjdFTGVLetqPI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133B2F/45E7BC7CC1A511EA8C01B63DC4F9AE02/CA3F3C8EA28711EB9BDD0863C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.75.231.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:f6:df:d5:1d:e1:0b:47:3b:45:d7:f6:8f:af:eb:91:9e:ef:
5a:ca:44:12:3d:1e:b8:39:12:2f:b7:c6:56:ce:6f:17:ba:af:
1e:e4:82:19:d5:93:39:49:0e:6a:11:4d:9c:66:a5:e5:35:dc:
2d:44:df:8a:6a:09:74:d5:2b:ab:47:81:58:08:13:25:1f:17:
1c:23:f9:2c:44:c3:1b:fe:f3:2c:f3:6c:ee:71:43:43:66:bb:
63:36:f6:54:9e:b0:83:d8:00:d1:29:ff:6e:04:84:4b:5e:82:
5b:18:89:d4:80:01:f1:77:41:68:65:cb:41:5f:ba:11:43:73:
35:dd:88:c9:d1:23:fd:13:0a:cb:bf:d2:02:fa:c6:60:b8:7b:
9f:2a:df:05:b9:e8:61:f5:66:e9:e9:22:0f:e4:58:21:77:b2:
d6:9e:76:6a:57:ad:f0:b3:00:95:c3:92:4f:95:2c:6e:07:6b:
ef:f4:62:0b:7c:be:4b:2b:f4:cb:00:84:d5:8d:af:47:d3:08:
12:4b:eb:e2:5e:44:a3:42:6c:bc:d6:3d:14:70:27:c4:e0:d2:
2f:c2:3f:a6:b5:08:e4:a2:49:e3:3a:43:1b:87:b5:6f:fb:37:
2c:0f:b5:17:76:8f:9f:a6:bc:b8:ae:3f:6d:b5:32:9e:33:71:
3d:7d:aa:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:36 2023 by rpki-client on console-ams.rpki-client.org