Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9138B7F/6CDE8998FF4111EB82B31F5DC4F9AE02/7A2ED426D45311EC8A6C8035C4F9AE02.roa
File: 7A2ED426D45311EC8A6C8035C4F9AE02.roa (raw, json)
Hash identifier: INOrx4ylw6CnKdiWtV8PAhSlZ475C8tgWMfIwQeVkCI=
Subject key identifier: 1B:6A:79:3D:B8:55:9D:38:44:66:71:B0:5D:5D:F3:AD:4D:A8:D9:25
Certificate issuer: /CN=A9138B7F/serialNumber=9BE1FB19438390E5170818EAFAF00BB323A00C48
Certificate serial: 0242
Authority key identifier: 9B:E1:FB:19:43:83:90:E5:17:08:18:EA:FA:F0:0B:B3:23:A0:0C:48
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-H7GUODkOUXCBjq-vALsyOgDEg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9138B7F/6CDE8998FF4111EB82B31F5DC4F9AE02/7A2ED426D45311EC8A6C8035C4F9AE02.roa
Signing time: Sun 15 May 2022 13:32:34 +0000
ROA not before: Sun 15 May 2022 13:32:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9400
IP address blocks: 103.95.207.0/24 maxlen: 24
103.101.153.0/24 maxlen: 24
103.107.8.0/24 maxlen: 24
2401:1740::/40 maxlen: 40
2401:1740:100::/40 maxlen: 40
2401:1740:1000::/48 maxlen: 48
2401:1740:3000::/48 maxlen: 48
2401:1740:4000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 578 (0x242)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9138B7F/serialNumber=9BE1FB19438390E5170818EAFAF00BB323A00C48
Validity
Not Before: May 15 13:32:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=628100f2-2723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d4:c5:4b:3f:8e:1e:26:47:a9:e8:5b:9a:93:
d8:61:bd:67:74:0e:f0:01:88:04:8c:9a:bb:3f:14:
c5:f5:cb:ab:3a:3b:07:25:c7:90:dd:ca:db:25:e6:
8f:bf:98:f3:f8:c0:b2:5a:aa:4d:e9:20:e5:31:4f:
4c:1b:11:e5:13:29:e0:65:d2:87:9a:63:9a:eb:fe:
84:12:54:02:f0:f9:c8:c2:e0:cd:fc:f9:f7:da:5a:
5c:ee:7a:d4:28:64:46:f6:37:17:8a:42:fa:81:4f:
e6:6f:3e:dc:6e:b2:c3:a5:e5:cb:99:1c:fc:d3:5a:
1a:55:04:8f:32:e7:a2:c3:c6:b8:37:c3:7e:12:db:
1e:a6:1f:07:1e:ae:4c:be:57:68:f9:2e:41:75:6c:
29:16:f1:2f:f0:50:a4:81:b5:aa:c1:2b:c2:a4:6b:
10:b3:45:c3:57:83:a9:09:e3:37:ba:e9:83:eb:3d:
a6:5c:93:15:c3:a8:22:35:1a:94:2b:ec:18:2a:5f:
5d:0d:31:7a:e5:9c:a7:19:2a:89:86:17:43:59:9b:
c9:2f:98:69:39:7a:e3:23:e4:d8:8c:44:e7:ab:88:
e2:e2:44:fc:4c:d0:8e:51:b6:0d:71:5e:fc:b2:d2:
a0:6c:75:f9:0a:e4:6c:3b:9f:e9:5f:32:e7:c3:c2:
e5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:6A:79:3D:B8:55:9D:38:44:66:71:B0:5D:5D:F3:AD:4D:A8:D9:25
X509v3 Authority Key Identifier:
keyid:9B:E1:FB:19:43:83:90:E5:17:08:18:EA:FA:F0:0B:B3:23:A0:0C:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9138B7F/6CDE8998FF4111EB82B31F5DC4F9AE02/m-H7GUODkOUXCBjq-vALsyOgDEg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-H7GUODkOUXCBjq-vALsyOgDEg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138B7F/6CDE8998FF4111EB82B31F5DC4F9AE02/7A2ED426D45311EC8A6C8035C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.95.207.0/24
103.101.153.0/24
103.107.8.0/24
IPv6:
2401:1740::/39
2401:1740:1000::/48
2401:1740:3000::/48
2401:1740:4000::/48
Signature Algorithm: sha256WithRSAEncryption
60:a2:14:1d:2b:fd:90:a4:60:ae:a1:b8:7e:b1:98:9d:45:8d:
35:32:17:31:92:85:af:9d:9f:64:52:bc:f2:6b:34:ab:12:98:
d5:d3:6c:b9:bd:91:c6:a0:dc:f8:eb:d3:27:9c:9f:e6:23:79:
f5:b4:aa:93:68:00:d6:11:aa:de:3d:84:61:80:23:85:a9:8f:
f1:cb:21:bc:8d:63:19:92:cc:b8:5b:ed:a0:f0:79:04:d0:b8:
b0:cf:e8:02:da:5d:f9:1d:a9:6d:58:ee:eb:da:90:43:35:b5:
fe:cd:3a:45:63:93:e4:9a:0a:c0:70:42:e6:06:f6:dd:1e:31:
6b:76:2a:94:95:26:d6:9d:8f:15:ee:aa:6e:25:2a:8d:60:79:
36:61:90:18:81:07:71:3a:41:79:1c:d8:5a:75:01:df:b8:1a:
49:05:b5:9f:c6:62:2b:83:87:4d:c0:fe:ff:0b:28:36:2e:d9:
bc:87:ae:35:5d:4e:39:ef:ed:90:4a:79:23:8b:4a:28:38:c6:
f5:7a:6b:31:31:a4:17:78:c1:6c:11:7f:71:c0:67:56:ee:5c:
f5:de:c1:6a:f1:55:91:ce:5d:01:8c:f0:49:8d:e7:de:36:4a:
67:be:ab:0e:bc:fc:0a:ca:a8:a9:8c:8b:38:c7:6d:71:97:84:
0a:9d:ad:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:02 2024 by rpki-client on console-fra.rpki-client.org