Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913D48E/1053C706B92C11ECA0214052C4F9AE02/60A77916B92F11EC81DFAE7BC4F9AE02.roa
File: 60A77916B92F11EC81DFAE7BC4F9AE02.roa (raw, json)
Hash identifier: UbxVU4bSHGSVgTePhpLZujjj9x/jn0jrWHc3i4sf7Q8=
Subject key identifier: 0E:60:AB:9A:D1:34:12:2B:D5:A8:D8:75:3A:11:22:85:43:EF:4E:D8
Certificate issuer: /CN=A913D48E/serialNumber=46952ADC2383A8FAD1E0661D6E9D388EF8E68663
Certificate serial: 02
Authority key identifier: 46:95:2A:DC:23:83:A8:FA:D1:E0:66:1D:6E:9D:38:8E:F8:E6:86:63
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpUq3CODqPrR4GYdbp04jvjmhmM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D48E/1053C706B92C11ECA0214052C4F9AE02/60A77916B92F11EC81DFAE7BC4F9AE02.roa
Signing time: Mon 11 Apr 2022 00:36:08 +0000
ROA not before: Mon 11 Apr 2022 00:36:08 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 17551
IP address blocks: 103.15.148.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D48E/serialNumber=46952ADC2383A8FAD1E0661D6E9D388EF8E68663
Validity
Not Before: Apr 11 00:36:08 2022 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=625377f8-12ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bd:c3:a7:a6:35:01:1c:e3:7b:f5:06:8f:3c:
3d:43:16:fc:92:d9:29:94:02:74:fa:16:79:2d:75:
69:50:99:6b:33:3e:98:91:61:bf:2d:b3:b5:64:6b:
e4:92:e6:1a:0a:ee:15:a3:21:62:07:35:5d:95:c9:
f4:64:6d:b4:0e:7d:e5:2b:eb:99:3e:26:f8:94:9c:
a4:1e:1e:a3:b4:24:58:56:26:2c:be:4e:53:59:15:
75:cd:fc:8c:12:8f:01:c3:77:71:a7:40:1d:47:05:
70:d7:f1:ee:69:c0:4d:45:d4:26:16:93:40:00:5b:
d0:3e:81:8c:df:cf:0c:47:ad:17:f6:e2:41:8d:e9:
2b:db:18:34:96:07:ff:50:91:04:1c:d5:e6:66:65:
c3:df:80:37:d2:31:e3:fc:c9:cb:ed:c9:59:88:f1:
cf:9e:05:73:ff:70:bc:0f:68:1e:25:35:5f:a7:8f:
1b:ab:b6:c7:3e:6c:07:d4:83:06:c9:c0:f7:a0:97:
ba:76:55:1b:45:cd:6f:9b:db:af:83:86:54:3b:a5:
50:2b:a1:fd:14:cc:b9:68:08:ad:5d:77:50:48:f3:
c4:a5:8d:7c:71:91:ca:20:dc:9d:5e:f7:c5:29:e9:
00:67:5d:b7:dd:e4:58:87:33:6b:e4:d8:a2:c0:3c:
67:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:60:AB:9A:D1:34:12:2B:D5:A8:D8:75:3A:11:22:85:43:EF:4E:D8
X509v3 Authority Key Identifier:
keyid:46:95:2A:DC:23:83:A8:FA:D1:E0:66:1D:6E:9D:38:8E:F8:E6:86:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D48E/1053C706B92C11ECA0214052C4F9AE02/RpUq3CODqPrR4GYdbp04jvjmhmM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpUq3CODqPrR4GYdbp04jvjmhmM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D48E/1053C706B92C11ECA0214052C4F9AE02/60A77916B92F11EC81DFAE7BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.15.148.0/22
Signature Algorithm: sha256WithRSAEncryption
18:4a:bb:a6:d3:a4:46:e4:38:c5:cd:f6:3f:cf:3b:32:2d:6c:
3c:b9:1f:fd:b4:70:9d:34:59:7a:50:04:4c:37:ef:92:67:de:
71:5b:f8:e6:25:d0:6b:c3:96:c9:24:68:84:ae:1e:b5:f1:e4:
95:ae:ed:9d:d5:e1:87:8a:78:00:87:bf:a1:00:28:7a:de:27:
24:ea:03:86:6c:37:3f:7b:5d:a7:a5:da:18:5f:f3:19:20:ba:
52:2a:60:78:f2:54:fb:2b:de:0d:2d:6e:04:43:1b:b2:44:7b:
18:b0:93:60:da:bf:cd:22:26:78:49:39:b8:14:4f:5a:4a:c8:
92:bc:48:4f:27:1a:d3:42:fa:7a:23:58:e1:14:32:24:5b:70:
85:a1:dd:ea:ed:65:23:d4:d7:22:65:69:c3:bd:6e:63:b9:06:
af:0b:db:18:83:a7:6a:68:9c:89:21:bd:f4:da:f5:09:3b:68:
bd:60:7c:86:cd:df:e8:c8:47:0f:12:0b:39:2e:0e:91:c4:62:
ac:34:2f:40:ce:77:cf:8d:a2:00:28:0a:ba:34:6a:ec:15:1e:
2c:0e:79:b2:88:e9:8d:62:f8:f5:2d:bb:33:8b:3e:a0:bd:f0:
6b:e6:a9:4d:42:d0:5f:47:29:f9:4a:cd:4d:64:8b:39:23:12:
aa:06:61:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:03 2024 by rpki-client on console-fra.rpki-client.org