Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9138B7F/6CDE8998FF4111EB82B31F5DC4F9AE02/76A4788AD14511EC89527642C4F9AE02.roa
File: 76A4788AD14511EC89527642C4F9AE02.roa (raw, json)
Hash identifier: 5Ch3eE58wrD60wzTp4+qEzQOiLcv+sMhxwrOoZu5pLk=
Subject key identifier: 11:DB:B7:19:AC:7A:5A:7C:29:A6:3C:31:D7:50:D9:2D:71:58:70:56
Certificate issuer: /CN=A9138B7F/serialNumber=9BE1FB19438390E5170818EAFAF00BB323A00C48
Certificate serial: 0235
Authority key identifier: 9B:E1:FB:19:43:83:90:E5:17:08:18:EA:FA:F0:0B:B3:23:A0:0C:48
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-H7GUODkOUXCBjq-vALsyOgDEg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9138B7F/6CDE8998FF4111EB82B31F5DC4F9AE02/76A4788AD14511EC89527642C4F9AE02.roa
Signing time: Wed 11 May 2022 16:14:42 +0000
ROA not before: Wed 11 May 2022 16:14:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9400
IP address blocks: 103.91.219.0/24 maxlen: 24
103.95.207.0/24 maxlen: 24
103.101.153.0/24 maxlen: 24
103.107.8.0/24 maxlen: 24
2401:1740::/40 maxlen: 40
2401:1740:100::/40 maxlen: 40
2401:1740:1000::/48 maxlen: 48
2401:1740:3000::/48 maxlen: 48
2401:1740:4000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 565 (0x235)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9138B7F/serialNumber=9BE1FB19438390E5170818EAFAF00BB323A00C48
Validity
Not Before: May 11 16:14:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=627be0f1-a087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e9:34:43:bd:a3:2e:d0:74:e9:ce:93:6c:50:
b1:36:fc:e3:55:4f:aa:23:d8:7f:18:0b:c6:44:4c:
64:06:4b:40:27:67:51:6a:c0:2e:37:69:66:54:44:
97:7c:83:b7:b2:80:4c:92:8d:a6:91:81:8a:68:31:
fa:01:5f:05:fa:51:b3:df:62:9e:c7:35:3b:f8:87:
9c:80:f5:b7:bb:f7:88:a8:e9:4e:b0:23:1a:ee:18:
4b:bd:7e:a9:8c:06:85:50:2d:db:2a:38:56:b3:c2:
1b:05:93:ef:d0:fc:10:26:e8:0f:0e:da:cb:bf:c4:
a2:68:99:d0:ff:d3:42:e5:76:ac:76:85:7f:1b:2e:
1f:72:c7:1d:63:b4:9c:d8:d7:ff:7f:63:5d:6e:e4:
2d:b2:e5:78:68:9a:b4:e9:a5:ea:55:70:28:2c:86:
21:99:ee:9f:2e:51:c2:ca:ca:8f:18:9f:98:46:cc:
17:da:cd:5c:04:98:d4:95:1b:92:bd:9a:f6:50:e9:
ea:f1:9d:73:22:73:29:93:b9:c8:2a:d2:44:42:bf:
ff:c5:e1:9d:8a:03:d8:62:73:2d:1f:16:9f:d1:f4:
57:eb:af:25:e7:6c:d6:eb:0a:6a:5c:72:b4:bc:77:
34:a1:6d:79:85:c4:2e:24:71:42:79:00:bb:64:e1:
4b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:DB:B7:19:AC:7A:5A:7C:29:A6:3C:31:D7:50:D9:2D:71:58:70:56
X509v3 Authority Key Identifier:
keyid:9B:E1:FB:19:43:83:90:E5:17:08:18:EA:FA:F0:0B:B3:23:A0:0C:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9138B7F/6CDE8998FF4111EB82B31F5DC4F9AE02/m-H7GUODkOUXCBjq-vALsyOgDEg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-H7GUODkOUXCBjq-vALsyOgDEg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138B7F/6CDE8998FF4111EB82B31F5DC4F9AE02/76A4788AD14511EC89527642C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.91.219.0/24
103.95.207.0/24
103.101.153.0/24
103.107.8.0/24
IPv6:
2401:1740::/39
2401:1740:1000::/48
2401:1740:3000::/48
2401:1740:4000::/48
Signature Algorithm: sha256WithRSAEncryption
4b:0c:fd:80:06:5b:33:8e:cc:35:96:42:ff:71:7c:8f:1a:4c:
ca:ba:15:e5:ca:3d:4d:42:64:06:34:81:46:79:4e:0d:8f:e1:
91:52:c6:55:66:8a:e4:26:14:5a:ad:18:ef:f1:b4:1b:7c:75:
3d:32:b5:f7:b4:45:06:a9:3c:f7:97:b5:95:c1:60:bc:0e:3b:
b9:79:46:00:0a:4f:c3:2b:ab:2b:6b:0a:9e:74:77:0f:13:6f:
9d:67:c5:55:ef:dd:b6:1b:9e:8b:1c:5f:b7:70:8a:15:b3:89:
0e:5d:00:6c:7f:18:23:e6:bc:ae:6a:21:6c:f0:74:24:3b:43:
71:68:f9:a9:78:89:b3:b4:fa:85:40:2f:5d:9f:b3:83:f8:76:
fe:84:a9:2b:5c:c4:07:9d:b4:af:57:5d:24:86:87:3f:0d:03:
13:c5:22:65:e3:15:88:84:23:b7:78:51:63:8a:18:ed:e9:bd:
41:dd:e6:01:dd:cf:f3:9f:15:5f:cb:36:c2:18:6b:3e:ea:32:
d0:ce:be:fa:e0:cc:37:d7:e3:ce:1b:7f:8d:55:b0:0e:b3:e1:
98:53:be:98:8e:c0:97:98:6f:f8:6e:72:fe:95:1a:60:d2:b9:
04:46:db:4a:a0:25:a2:d2:cd:11:f9:94:53:00:9b:26:fb:b9:
f7:6e:e0:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:54 2024 by rpki-client on console-ams.rpki-client.org