Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B673/7D044422305B11E5A4757876C4F9AE02/60465D2EB14411E5A969C81DC4F9AE02.roa
File: 60465D2EB14411E5A969C81DC4F9AE02.roa (raw, json)
Hash identifier: +6hxi43NztAlJdb9aAoNenu57o23gJOxdZ281YCuZsc=
Subject key identifier: D6:7E:2C:07:E6:92:1B:15:81:3F:D5:23:F9:C0:6F:B0:D9:FE:A4:AB
Certificate issuer: /CN=A913B673/serialNumber=AEE68FA3D63DD2F1EF558050BA9A65842CC1CBE0
Certificate serial: 2360
Authority key identifier: AE:E6:8F:A3:D6:3D:D2:F1:EF:55:80:50:BA:9A:65:84:2C:C1:CB:E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruaPo9Y90vHvVYBQupplhCzBy-A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B673/7D044422305B11E5A4757876C4F9AE02/60465D2EB14411E5A969C81DC4F9AE02.roa
Signing time: Fri 31 Mar 2023 16:42:39 +0000
ROA not before: Fri 31 Mar 2023 16:42:39 +0000
ROA not after: Tue 01 Aug 2023 00:00:00 +0000
asID: 133324
IP address blocks: 43.243.20.0/24 maxlen: 24
45.122.231.0/24 maxlen: 24
45.124.110.0/23 maxlen: 24
103.38.145.0/24 maxlen: 24
103.38.148.0/23 maxlen: 23
103.224.162.0/24 maxlen: 24
2401:7e80::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9056 (0x2360)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B673/serialNumber=AEE68FA3D63DD2F1EF558050BA9A65842CC1CBE0
Validity
Not Before: Mar 31 16:42:39 2023 GMT
Not After : Aug 1 00:00:00 2023 GMT
Subject: CN=64270d7e-07f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d4:b6:80:0a:fb:c6:7d:d3:47:87:d7:08:e6:
ca:76:9a:7e:8d:a7:6f:c8:56:22:03:84:d7:a4:37:
f5:1a:30:18:a9:16:2d:58:99:63:d8:07:79:59:38:
f0:c1:06:8d:89:b9:ff:2e:90:83:46:ea:6e:4d:8f:
c3:02:61:eb:de:80:40:12:24:ef:86:89:89:e8:ff:
7a:24:5e:ac:f0:f0:0c:c4:e0:67:72:54:37:55:3b:
ef:52:dd:3c:9d:db:f8:e1:92:6e:9e:bb:4a:48:1a:
aa:37:e5:9e:7b:e8:40:00:70:f4:d2:15:e0:25:37:
a7:60:b7:31:1a:a9:90:e5:79:5d:40:81:5f:6a:0b:
d5:7b:e3:6d:40:9a:16:97:88:37:4d:79:7d:7d:ec:
e5:d1:29:3e:6e:f7:b7:82:be:4e:a9:77:8d:99:ec:
ea:3b:b3:b0:d5:2c:5c:c5:db:0b:c8:82:59:8a:fc:
bd:cb:8d:40:96:26:45:ad:0b:b3:0a:10:db:c0:f9:
04:31:44:eb:1d:4a:0e:b6:31:b5:4c:f8:ea:86:0e:
87:85:f2:6c:2f:e0:02:d6:bb:76:3e:45:5d:36:9f:
ee:a4:fa:2c:56:37:22:a7:42:98:f5:93:c1:1a:84:
0c:d1:c6:b9:e4:42:e5:2c:c1:da:6b:a2:65:e1:72:
cc:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:7E:2C:07:E6:92:1B:15:81:3F:D5:23:F9:C0:6F:B0:D9:FE:A4:AB
X509v3 Authority Key Identifier:
keyid:AE:E6:8F:A3:D6:3D:D2:F1:EF:55:80:50:BA:9A:65:84:2C:C1:CB:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B673/7D044422305B11E5A4757876C4F9AE02/ruaPo9Y90vHvVYBQupplhCzBy-A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruaPo9Y90vHvVYBQupplhCzBy-A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B673/7D044422305B11E5A4757876C4F9AE02/60465D2EB14411E5A969C81DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.243.20.0/24
45.122.231.0/24
45.124.110.0/23
103.38.145.0/24
103.38.148.0/23
103.224.162.0/24
IPv6:
2401:7e80::/32
Signature Algorithm: sha256WithRSAEncryption
3d:34:50:b6:c5:8b:2f:e6:52:d5:6a:2c:22:e0:21:71:af:ba:
de:99:2d:32:4c:6e:d3:97:a0:c6:45:33:1d:6d:94:3e:60:46:
ca:05:1a:ad:c4:7f:d2:55:6a:08:b0:ad:2c:89:92:07:fc:d6:
b9:db:7b:1d:4c:14:c0:8e:a4:b9:d2:ca:29:1e:28:bc:18:3c:
14:2f:b8:7d:d9:a6:46:48:40:15:f3:94:3f:ab:5c:2d:85:e5:
fd:81:98:61:f4:00:fd:7e:93:3d:1e:c5:9f:6c:c1:63:c6:a5:
e7:8b:0c:a5:a6:90:d5:6b:9b:99:c5:e3:62:b7:cc:b2:57:20:
17:bb:cc:50:d7:e2:7a:b5:9d:7a:46:dc:cb:ab:96:0c:4c:a3:
ae:ef:92:89:42:f6:c7:02:40:78:bc:ea:1d:72:b0:02:ed:aa:
c6:46:4e:f7:60:6a:77:39:ab:90:c9:e8:9a:3f:6a:4a:77:98:
0a:9e:14:c4:ef:aa:bf:1b:f6:f1:39:26:ab:5d:c0:e1:22:71:
ed:6a:d9:a8:8c:ce:4d:9c:02:9e:49:95:d5:7d:b5:0d:41:15:
11:0d:a6:79:8e:8a:98:45:c4:e9:a5:ee:10:6e:2a:d0:9b:9e:
e7:e4:4f:6c:cc:0d:c6:10:58:02:7b:d4:ba:b1:a3:80:7f:3c:
6a:66:73:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:03 2024 by rpki-client on console-fra.rpki-client.org