Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913BDEF/711FC11C8A2C11E88C3DF81EC4F9AE02/B8DE00A4FC7211E9A184A72FC4F9AE02.roa
File: B8DE00A4FC7211E9A184A72FC4F9AE02.roa (raw, json)
Hash identifier: cFkdYbKHup1ldERCIzBRFi/FC9csdTwet/w3TPPHsJg=
Subject key identifier: 46:45:54:33:CB:DA:41:9E:16:4F:AB:89:79:B6:49:1F:01:3E:E0:71
Certificate issuer: /CN=A913BDEF/serialNumber=75ACBE1D4E4AACB6BF731B7597D43839E24DA3E7
Certificate serial: 0E88
Authority key identifier: 75:AC:BE:1D:4E:4A:AC:B6:BF:73:1B:75:97:D4:38:39:E2:4D:A3:E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/day-HU5KrLa_cxt1l9Q4OeJNo-c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913BDEF/711FC11C8A2C11E88C3DF81EC4F9AE02/B8DE00A4FC7211E9A184A72FC4F9AE02.roa
Signing time: Sat 31 Jul 2021 06:14:06 +0000
ROA not before: Sat 31 Jul 2021 06:14:06 +0000
ROA not after: Fri 30 Sep 2022 00:00:00 +0000
asID: 134090
IP address blocks: 103.95.112.0/22 maxlen: 24
123.253.188.0/22 maxlen: 24
2402:7940::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3720 (0xe88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913BDEF/serialNumber=75ACBE1D4E4AACB6BF731B7597D43839E24DA3E7
Validity
Not Before: Jul 31 06:14:06 2021 GMT
Not After : Sep 30 00:00:00 2022 GMT
Subject: CN=6104ea2e-33bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d7:18:98:fd:9e:bf:bc:16:4d:16:1e:a7:30:
3e:7f:df:b6:70:4b:fa:7f:95:b5:a6:76:7b:b9:91:
38:f5:33:4d:ec:59:38:d2:9b:d7:2d:a6:ef:b8:da:
9c:59:d0:ed:28:43:b0:44:5c:74:cb:91:6b:a2:3c:
65:de:78:e1:d6:0d:d1:d7:1f:f1:8f:7d:58:36:3c:
00:7e:6c:9f:9b:27:ec:b5:5e:6e:41:18:b6:11:6b:
0e:a7:53:83:e7:0f:f3:b9:c1:c3:a7:59:70:a0:d9:
ab:e3:9a:2b:2e:70:69:7b:ea:14:06:44:1d:8e:85:
45:b3:b7:ed:0b:78:d5:2e:b2:17:9c:3f:a0:bd:09:
46:11:1a:97:91:0e:d8:a0:dc:be:b4:db:27:78:aa:
1a:f1:8a:50:c5:d8:2b:e6:c8:84:8f:a6:7c:f9:0b:
e5:c8:b0:55:fd:1b:24:fd:00:95:03:81:27:d1:08:
f5:f2:60:22:b2:51:cc:f3:54:b3:73:70:34:65:ef:
11:9f:d6:62:ad:b6:fb:56:19:81:6d:dd:cb:7e:ab:
88:af:72:61:65:60:9a:c0:05:9e:fb:34:47:d2:77:
71:5a:a7:99:1e:03:70:66:41:1a:05:79:b9:83:49:
14:20:ac:90:75:f7:a7:20:f1:7f:2a:1d:f2:bf:20:
d5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:45:54:33:CB:DA:41:9E:16:4F:AB:89:79:B6:49:1F:01:3E:E0:71
X509v3 Authority Key Identifier:
keyid:75:AC:BE:1D:4E:4A:AC:B6:BF:73:1B:75:97:D4:38:39:E2:4D:A3:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913BDEF/711FC11C8A2C11E88C3DF81EC4F9AE02/day-HU5KrLa_cxt1l9Q4OeJNo-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/day-HU5KrLa_cxt1l9Q4OeJNo-c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BDEF/711FC11C8A2C11E88C3DF81EC4F9AE02/B8DE00A4FC7211E9A184A72FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.95.112.0/22
123.253.188.0/22
IPv6:
2402:7940::/32
Signature Algorithm: sha256WithRSAEncryption
00:44:df:07:25:a2:25:52:f3:2e:dc:bc:4c:61:5b:24:95:d8:
8d:84:55:18:a1:ea:2d:2d:fa:5c:d2:3d:a5:7a:1a:d9:69:11:
3f:7f:d3:22:d2:c7:f6:83:5e:b1:e2:cc:61:a4:4d:76:86:4b:
f1:6c:22:ca:52:0a:ff:ff:30:bd:3b:1c:63:c0:b7:ea:50:1e:
ef:f4:a5:83:2b:95:f0:1c:83:c0:43:e5:12:79:bb:ce:5e:19:
f2:7f:fb:10:33:21:af:35:3b:5c:a9:05:ce:bf:84:1c:f8:6c:
f3:b3:d4:7d:81:09:4f:8f:58:7f:46:6c:05:67:86:91:35:fa:
c8:06:3d:27:ea:f1:08:32:be:6b:4a:08:3a:a5:ca:8c:9e:d8:
7c:ea:4e:7b:33:3c:04:a8:8e:e5:9f:75:cf:04:40:dc:77:bd:
ac:79:12:23:ba:38:18:9c:f2:02:f9:75:5d:1d:2b:a2:81:24:
46:43:01:41:90:fc:18:81:61:bc:cb:7a:9b:f4:fd:7b:87:32:
b7:eb:60:14:13:29:89:fa:d8:bf:a4:f6:d9:04:58:e9:b7:b8:
31:c5:08:ed:0b:f6:e1:be:9a:78:05:e8:0d:94:30:01:6a:da:
99:7a:0b:c3:f1:ce:e6:5e:33:ea:96:c8:f1:06:50:0f:17:73:
e9:40:d6:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:55 2024 by rpki-client on console-ams.rpki-client.org