Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9138B7F/6CDE8998FF4111EB82B31F5DC4F9AE02/C9CAB45CD27B11ECAD76925DC4F9AE02.roa
File: C9CAB45CD27B11ECAD76925DC4F9AE02.roa (raw, json)
Hash identifier: Vc+HqAB1q/YI0B9jMrPYDJowjkLFSFuLGqeUmrAdu7Y=
Subject key identifier: 18:47:59:33:48:21:C6:48:19:E2:93:3E:DE:E8:FF:3E:2C:09:3D:8A
Certificate issuer: /CN=A9138B7F/serialNumber=9BE1FB19438390E5170818EAFAF00BB323A00C48
Certificate serial: 023A
Authority key identifier: 9B:E1:FB:19:43:83:90:E5:17:08:18:EA:FA:F0:0B:B3:23:A0:0C:48
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-H7GUODkOUXCBjq-vALsyOgDEg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9138B7F/6CDE8998FF4111EB82B31F5DC4F9AE02/C9CAB45CD27B11ECAD76925DC4F9AE02.roa
Signing time: Fri 13 May 2022 05:16:06 +0000
ROA not before: Fri 13 May 2022 05:16:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7586
IP address blocks: 103.95.207.0/24 maxlen: 24
103.101.153.0/24 maxlen: 24
103.107.8.0/24 maxlen: 24
2401:1740::/32 maxlen: 32
2401:1740::/40 maxlen: 40
2401:1740:100::/40 maxlen: 40
2401:1740:1000::/48 maxlen: 48
2401:1740:2000::/48 maxlen: 48
2401:1740:3000::/48 maxlen: 48
2401:1740:4000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 570 (0x23a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9138B7F/serialNumber=9BE1FB19438390E5170818EAFAF00BB323A00C48
Validity
Not Before: May 13 05:16:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=627de995-799b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2c:dd:c4:b9:fe:34:0e:00:da:61:e3:b0:01:
d3:f1:35:88:a1:79:97:50:3b:6c:37:37:61:56:08:
87:02:5d:04:c4:99:59:45:1b:3d:57:2e:c0:c9:83:
53:9a:34:36:3b:41:a5:fb:ed:26:8c:e2:0c:96:74:
d4:7b:02:cf:91:5f:7e:68:f6:41:65:fb:1d:42:77:
26:ba:ab:f2:5d:1a:c8:38:c0:4c:be:ac:d9:08:f0:
37:f5:84:9d:62:f3:4e:e4:0e:59:1f:94:78:28:67:
4e:60:3b:86:6b:27:83:45:7e:15:a2:0f:e3:46:90:
6a:b4:da:0d:db:81:67:c4:c2:6d:d3:be:1d:62:2e:
26:47:e3:6e:98:20:5b:49:6c:3a:7e:ea:f4:53:69:
3d:4e:c4:d2:cb:69:83:a8:61:cb:94:f3:39:17:05:
72:cd:7f:b6:e9:83:7c:ad:cb:e4:80:33:d7:94:9e:
06:ca:29:9b:57:e7:55:0f:dc:89:f4:93:d3:b3:00:
5f:fc:7a:22:58:3f:8f:2d:44:8b:8c:fd:d2:d1:33:
4c:4f:b2:32:6a:7d:e7:81:48:75:9e:3f:2a:22:80:
3f:e2:24:25:d1:4b:d0:16:9a:05:15:26:93:a7:5a:
83:6d:eb:df:24:43:4b:c6:90:e5:55:d7:a0:6f:af:
14:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:47:59:33:48:21:C6:48:19:E2:93:3E:DE:E8:FF:3E:2C:09:3D:8A
X509v3 Authority Key Identifier:
keyid:9B:E1:FB:19:43:83:90:E5:17:08:18:EA:FA:F0:0B:B3:23:A0:0C:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9138B7F/6CDE8998FF4111EB82B31F5DC4F9AE02/m-H7GUODkOUXCBjq-vALsyOgDEg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-H7GUODkOUXCBjq-vALsyOgDEg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138B7F/6CDE8998FF4111EB82B31F5DC4F9AE02/C9CAB45CD27B11ECAD76925DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.95.207.0/24
103.101.153.0/24
103.107.8.0/24
IPv6:
2401:1740::/32
Signature Algorithm: sha256WithRSAEncryption
46:1a:58:60:d6:e8:75:f5:9c:ee:82:46:00:80:44:c3:c7:a8:
c5:88:55:f0:1e:cb:3c:de:ef:98:c6:5e:25:93:d0:57:41:1f:
cb:0b:47:2c:d8:ed:74:8c:16:11:ad:8a:b8:3a:2b:91:3c:fd:
4c:bd:57:27:68:36:75:d3:97:c3:50:ef:da:43:fc:bd:36:56:
5b:73:ae:24:d7:d6:d0:35:fb:34:ee:2a:75:ed:12:ba:7f:4a:
c0:3a:b6:e0:41:80:e6:75:7e:af:2e:9b:3a:e6:0e:25:1e:f1:
a9:5f:6b:a4:ae:dc:f4:9b:03:5c:0c:15:7a:f5:96:91:d9:d7:
de:9d:2f:1b:44:65:7a:f6:b8:c4:89:fb:a7:a9:b0:9a:04:e1:
f6:d0:6f:5c:42:03:92:a2:70:42:48:91:4f:28:9d:ed:ab:71:
cd:0e:10:be:6a:b4:9d:d1:d0:37:d4:d8:cc:38:67:47:09:cc:
87:af:d5:4f:5b:70:98:fb:08:c7:d6:e4:d7:2b:74:40:a5:34:
2c:90:4d:72:32:b5:f2:ef:25:b0:d3:89:4d:0e:02:d8:67:95:
bb:05:fd:f8:0d:d0:32:9f:79:92:ae:eb:8e:de:cf:77:97:79:
b8:36:db:ca:b6:ad:29:04:51:63:b8:2e:b1:e6:98:d9:83:a1:
73:41:88:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:02 2024 by rpki-client on console-fra.rpki-client.org