Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135A70/1A986F7CF9D011EAAB7F4251C4F9AE02/14B4CA1EF9D111EA96000A52C4F9AE02.roa
File: 14B4CA1EF9D111EA96000A52C4F9AE02.roa (raw, json)
Hash identifier: thpaJHc+2lYT+21mCz77kE+qwSLtFyPV/jWTFzNMG04=
Subject key identifier: F5:D2:FF:5D:BD:A9:D4:9D:AB:0C:26:48:59:E4:94:A2:45:46:A7:B5
Certificate issuer: /CN=A9135A70/serialNumber=CCFA0AB214DB86E1669336E520FB02FCB075BBE6
Certificate serial: 068D
Authority key identifier: CC:FA:0A:B2:14:DB:86:E1:66:93:36:E5:20:FB:02:FC:B0:75:BB:E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPoKshTbhuFmkzblIPsC_LB1u-Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135A70/1A986F7CF9D011EAAB7F4251C4F9AE02/14B4CA1EF9D111EA96000A52C4F9AE02.roa
Signing time: Mon 02 Oct 2023 22:19:30 +0000
ROA not before: Mon 02 Oct 2023 22:19:30 +0000
ROA not after: Wed 31 Jan 2024 00:00:00 +0000
asID: 56035
IP address blocks: 103.141.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1677 (0x68d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135A70/serialNumber=CCFA0AB214DB86E1669336E520FB02FCB075BBE6
Validity
Not Before: Oct 2 22:19:30 2023 GMT
Not After : Jan 31 00:00:00 2024 GMT
Subject: CN=651b41f2-2ee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:20:70:2f:1a:cd:44:9b:98:7d:ab:86:93:59:
8e:1e:f3:f1:7c:cc:a1:ba:34:da:32:b7:7f:ea:01:
36:a8:30:f9:23:34:d8:10:a4:f9:76:8e:ca:26:d1:
86:6d:5d:07:6b:91:b1:1a:a4:3d:9e:35:76:39:6d:
1d:41:8f:a4:8c:47:fc:35:1c:ce:8f:f9:1b:6a:6b:
1e:73:46:20:ce:54:26:72:8f:8e:3d:3b:1c:af:73:
ba:ff:71:3e:09:97:46:90:11:8f:a2:cd:7f:6f:09:
82:c4:67:65:cd:c8:5c:fd:79:78:e1:74:d4:45:ad:
ee:be:70:cd:8a:f1:16:67:33:e2:a5:76:09:24:aa:
05:bb:15:43:2f:83:ed:35:b8:91:89:ce:37:d5:f8:
b3:a8:91:49:ec:08:36:fe:88:e7:dc:c0:f9:4e:8a:
6d:f6:30:d3:df:8b:fb:75:d2:cd:0d:a9:c1:7a:38:
2e:7e:d0:f3:ce:f2:6b:c8:19:3c:fe:68:e3:78:d1:
b8:d7:05:af:cf:80:5c:04:20:63:55:c1:e1:5c:86:
5e:3f:e8:f6:45:36:41:7f:7b:a4:e3:db:da:97:38:
57:71:c3:2a:12:68:2b:9b:8e:de:e2:35:56:31:2f:
2e:aa:bb:b4:e2:b4:7b:37:ce:8f:ab:a3:b5:f5:c4:
bd:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D2:FF:5D:BD:A9:D4:9D:AB:0C:26:48:59:E4:94:A2:45:46:A7:B5
X509v3 Authority Key Identifier:
keyid:CC:FA:0A:B2:14:DB:86:E1:66:93:36:E5:20:FB:02:FC:B0:75:BB:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135A70/1A986F7CF9D011EAAB7F4251C4F9AE02/zPoKshTbhuFmkzblIPsC_LB1u-Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPoKshTbhuFmkzblIPsC_LB1u-Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135A70/1A986F7CF9D011EAAB7F4251C4F9AE02/14B4CA1EF9D111EA96000A52C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.141.206.0/24
Signature Algorithm: sha256WithRSAEncryption
08:69:b2:f0:71:85:ca:eb:2a:83:b7:12:29:12:9b:fb:ef:66:
d3:4f:35:ea:26:72:c8:9a:0e:e7:6b:17:de:0b:15:2d:c2:99:
42:ff:3d:0e:ce:fd:59:ad:71:a5:31:5b:ba:c1:3c:0e:cb:cf:
80:5d:f1:3c:17:c0:9b:3a:6b:1b:91:e0:24:e4:31:fc:88:31:
7d:aa:3e:37:8e:f2:cf:60:e7:c9:1c:f6:0f:c9:04:62:f7:c0:
20:8a:2a:24:61:10:e9:b7:4c:6a:1a:f0:3e:f5:12:51:75:7a:
4d:a5:8f:c4:43:a7:08:46:4c:62:37:ce:56:cd:ec:ed:6d:ed:
5b:e1:62:6e:be:92:4e:a8:d8:a3:41:e3:1f:0b:24:5e:7f:a5:
4d:d8:4c:12:c6:41:ba:c1:25:04:66:6e:96:69:bf:b1:d5:ff:
2c:97:55:4e:f1:ac:de:4e:2d:50:69:74:15:05:74:e1:eb:0c:
cc:b1:1b:59:30:fd:ea:7e:51:1f:31:fe:8e:be:ba:60:a6:54:
12:7a:2a:a8:11:fc:b0:ff:9f:6d:8a:e6:24:fa:56:f8:38:6f:
50:90:1b:78:dc:84:a2:48:e5:1d:53:80:f2:80:c5:41:61:46:
35:79:60:1c:61:e7:b4:58:c5:e1:6f:a3:0b:10:fc:7c:4a:e1:
62:51:b0:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 16 14:14:02 2023 by rpki-client on console-ams.rpki-client.org