Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913BDEF/711FC11C8A2C11E88C3DF81EC4F9AE02/728547608BBE11ECA570C520C4F9AE02.roa
File: 728547608BBE11ECA570C520C4F9AE02.roa (raw, json)
Hash identifier: 0T5OcXAmcV/MVUGNx1q3NJiC3NZ7tcKssZUntGE1SAA=
Subject key identifier: B7:C0:CB:4A:83:CE:B9:70:C2:8F:E3:42:83:58:70:6E:29:B0:E2:3D
Certificate issuer: /CN=A913BDEF/serialNumber=75ACBE1D4E4AACB6BF731B7597D43839E24DA3E7
Certificate serial: 1176
Authority key identifier: 75:AC:BE:1D:4E:4A:AC:B6:BF:73:1B:75:97:D4:38:39:E2:4D:A3:E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/day-HU5KrLa_cxt1l9Q4OeJNo-c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913BDEF/711FC11C8A2C11E88C3DF81EC4F9AE02/728547608BBE11ECA570C520C4F9AE02.roa
Signing time: Tue 09 Aug 2022 06:24:19 +0000
ROA not before: Tue 09 Aug 2022 06:24:19 +0000
ROA not after: Sat 30 Sep 2023 00:00:00 +0000
asID: 134090
IP address blocks: 103.95.112.0/22 maxlen: 24
123.253.188.0/22 maxlen: 24
2402:7940::/32 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4470 (0x1176)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913BDEF/serialNumber=75ACBE1D4E4AACB6BF731B7597D43839E24DA3E7
Validity
Not Before: Aug 9 06:24:19 2022 GMT
Not After : Sep 30 00:00:00 2023 GMT
Subject: CN=62f1fd92-de88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:9e:f8:5e:64:ea:ce:ac:b5:fd:fe:be:3e:d7:
2e:02:d8:18:fd:75:43:d6:ca:3d:bb:28:9c:90:10:
af:f5:ac:dc:44:fd:42:6c:b8:53:b7:dd:bd:20:a4:
9d:ef:35:ff:56:6d:cb:3c:53:3e:2f:5d:d5:68:f2:
6a:a2:db:90:29:32:79:8f:27:4e:16:68:8b:e8:d2:
23:87:6e:b4:6a:5e:75:2e:5f:c3:22:9d:17:e7:09:
09:d3:70:58:01:19:72:d2:09:f9:2c:8d:21:53:4f:
6e:99:94:db:4a:d7:e4:f5:db:c7:70:24:26:ef:6b:
8d:c3:91:3a:a1:b2:8f:f8:b3:87:5f:da:10:89:ca:
bb:a4:dd:c3:ac:28:ea:27:1a:3b:74:af:ed:5c:74:
00:08:38:1d:8f:6e:6a:27:15:07:0b:7b:37:2b:a3:
60:e1:88:9e:70:09:44:be:ec:7e:a5:cf:19:6b:74:
66:c3:a5:5a:1f:4a:7e:68:7a:e1:3e:8b:f9:50:ca:
d0:e3:b9:32:c6:7c:4b:81:b1:1a:e3:28:21:51:5d:
21:d2:b8:3c:5a:e7:9a:aa:ff:a1:fd:60:2f:a3:31:
e8:df:fc:65:f8:50:2b:0c:90:55:e3:a3:40:79:01:
92:d1:9a:99:be:65:21:16:ed:f4:0b:cc:d2:4d:80:
b5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C0:CB:4A:83:CE:B9:70:C2:8F:E3:42:83:58:70:6E:29:B0:E2:3D
X509v3 Authority Key Identifier:
keyid:75:AC:BE:1D:4E:4A:AC:B6:BF:73:1B:75:97:D4:38:39:E2:4D:A3:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913BDEF/711FC11C8A2C11E88C3DF81EC4F9AE02/day-HU5KrLa_cxt1l9Q4OeJNo-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/day-HU5KrLa_cxt1l9Q4OeJNo-c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BDEF/711FC11C8A2C11E88C3DF81EC4F9AE02/728547608BBE11ECA570C520C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.95.112.0/22
123.253.188.0/22
IPv6:
2402:7940::/32
Signature Algorithm: sha256WithRSAEncryption
6c:96:39:d2:82:54:53:3b:c1:08:b5:4d:3e:12:6b:65:09:01:
ee:23:10:03:fb:bf:1c:4d:55:37:d5:3c:7b:8e:07:b0:12:90:
fb:52:4b:26:11:7e:55:00:0e:d7:4f:cd:92:ee:fc:6d:81:d2:
e7:ca:db:bb:3d:fc:71:cf:90:1d:e7:d3:36:c9:7a:18:9d:e3:
04:76:de:74:41:05:8b:46:ee:56:db:90:95:3f:0e:8c:89:19:
e9:47:03:72:b5:9d:c4:73:ac:76:41:c5:ae:f4:32:91:d5:56:
e0:af:fc:4e:da:f6:d8:b0:50:21:52:31:9d:ca:9a:1c:90:48:
1b:60:0a:cf:1b:b6:bc:b3:a7:97:41:33:cb:93:55:40:1e:27:
4d:f0:2e:fc:6a:9d:a2:10:e1:08:c0:e7:ab:fc:11:37:86:e9:
f7:a3:3f:99:7f:1c:6a:0e:56:23:e0:39:60:b0:05:f7:e4:3a:
70:1e:00:13:97:f2:4f:83:6f:9b:9c:c6:20:44:68:49:15:d4:
55:8d:0f:51:b2:e2:1c:d0:ac:d4:a4:e6:b9:55:dc:68:8f:96:
b9:e3:6d:2a:be:12:b1:b4:e0:bd:66:77:4c:15:6e:f8:1a:f1:
2b:d9:af:56:7c:04:1a:19:1b:4e:c0:a1:21:81:fe:1f:df:b3:
e4:11:4f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:55 2024 by rpki-client on console-ams.rpki-client.org