Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134AAF/06F2DE7CBC9811EBAD0BBE82C4F9AE02/362B6546624D11ECBBFEC928C4F9AE02.roa
File: 362B6546624D11ECBBFEC928C4F9AE02.roa (raw, json)
Hash identifier: XeKy5UyJzX5zQBpF3eat/I4krj1MgjHgp6mK5IfPGcQ=
Subject key identifier: D1:A1:F5:46:B0:76:09:C3:C1:21:D9:78:22:B0:B2:5D:97:21:CC:0A
Certificate issuer: /CN=A9134AAF/serialNumber=83B5A4DDC1C4E2F499B662C81D343F1A511B8826
Certificate serial: 046F
Authority key identifier: 83:B5:A4:DD:C1:C4:E2:F4:99:B6:62:C8:1D:34:3F:1A:51:1B:88:26
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g7Wk3cHE4vSZtmLIHTQ_GlEbiCY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134AAF/06F2DE7CBC9811EBAD0BBE82C4F9AE02/362B6546624D11ECBBFEC928C4F9AE02.roa
Signing time: Wed 31 May 2023 02:30:21 +0000
ROA not before: Wed 31 May 2023 02:30:21 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 142033
IP address blocks: 103.216.52.0/24 maxlen: 24
103.216.54.0/24 maxlen: 24
103.216.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1135 (0x46f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134AAF/serialNumber=83B5A4DDC1C4E2F499B662C81D343F1A511B8826
Validity
Not Before: May 31 02:30:21 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=6476b13d-9dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c4:bd:4f:05:b1:74:ae:91:ee:f4:af:10:18:
24:d1:95:ea:52:9e:d3:b9:5f:e9:8a:d2:61:4b:6a:
41:8b:12:88:d2:e1:99:b1:ab:20:49:57:a9:ec:24:
50:c9:8e:e9:aa:02:1d:93:09:ad:51:10:87:7b:bc:
6c:90:9f:70:70:c4:b3:ae:0f:81:ce:e2:92:33:44:
31:71:aa:d3:8d:a9:7d:2d:2f:ce:b8:cf:db:a4:40:
2d:81:08:e1:fa:08:59:1a:0b:7c:12:a5:3e:c5:37:
6b:b5:f6:ce:18:24:de:a5:1b:a5:a9:f2:4a:9a:78:
cb:ab:4f:ec:c4:ec:66:9b:75:92:fa:42:9e:d0:d1:
64:0d:35:06:f2:00:40:16:62:7a:c2:a4:9f:06:f1:
ec:0b:83:39:e7:32:5f:5e:4b:9d:c0:bb:57:b1:31:
7c:cd:db:0e:2e:a8:a8:ed:51:4e:34:b9:e7:be:30:
85:ed:96:c7:1f:1b:96:d8:7d:5f:41:58:43:99:bf:
59:3e:38:1a:d2:ea:80:a3:fe:ad:3a:be:41:23:dd:
8c:cc:d9:d6:56:da:ad:7f:d5:cd:80:5d:3a:cf:a0:
d3:2c:5a:68:3e:af:dd:07:8c:27:68:b0:b1:c8:4e:
ac:66:1c:f2:4b:a3:ea:ff:83:48:e1:e5:87:ba:26:
6d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A1:F5:46:B0:76:09:C3:C1:21:D9:78:22:B0:B2:5D:97:21:CC:0A
X509v3 Authority Key Identifier:
keyid:83:B5:A4:DD:C1:C4:E2:F4:99:B6:62:C8:1D:34:3F:1A:51:1B:88:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134AAF/06F2DE7CBC9811EBAD0BBE82C4F9AE02/g7Wk3cHE4vSZtmLIHTQ_GlEbiCY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g7Wk3cHE4vSZtmLIHTQ_GlEbiCY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134AAF/06F2DE7CBC9811EBAD0BBE82C4F9AE02/362B6546624D11ECBBFEC928C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.216.52.0/24
103.216.54.0/23
Signature Algorithm: sha256WithRSAEncryption
34:53:27:ec:ae:f5:ce:07:4e:7c:8b:7b:6e:ee:46:eb:5e:5c:
d3:85:12:c3:33:2b:eb:99:d9:28:a4:ea:0f:f3:14:1a:e4:e1:
d1:13:26:b1:c0:35:4a:2d:8b:6b:66:1d:3c:f1:ec:00:cb:ed:
ce:73:8e:15:0f:1f:8c:6f:f8:37:eb:35:4a:c4:c6:38:08:b6:
47:9c:ce:77:be:cd:ac:49:6c:fd:a3:0a:45:86:77:97:b1:55:
22:9a:ea:8c:4e:1e:9a:d0:c7:fa:e4:33:b0:67:00:1c:d1:c8:
11:2e:55:70:39:11:a3:49:27:28:32:05:5d:70:6c:44:e4:7d:
d2:34:5d:82:b1:dc:bc:c2:a8:c8:c5:ea:9f:b4:9d:05:bb:f0:
ec:6e:d4:c5:7e:d9:5d:28:18:d7:12:53:c2:f5:70:91:38:77:
95:1b:9f:87:78:0e:b1:79:9a:93:8d:0d:e6:30:da:c2:3b:bb:
b0:d2:3d:15:39:a5:16:31:04:a3:7a:5d:93:39:dd:b8:a0:07:
00:6d:fd:73:0a:13:87:b6:d8:0e:9a:73:ed:bf:79:e7:9f:2a:
14:dc:d0:b9:68:5e:76:85:24:95:f8:e5:ad:5f:63:bc:1a:6b:
5b:f9:b8:7b:cc:f8:23:43:2c:16:2e:2b:77:ac:e5:ec:1c:3f:
bf:4e:24:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:53 2024 by rpki-client on console-ams.rpki-client.org