Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913D8E5/712BA4AC8CFA11ED99C2195FC4F9AE02/BCD9FE588D0411ED81B5C57BC4F9AE02.roa
File: BCD9FE588D0411ED81B5C57BC4F9AE02.roa (raw, json)
Hash identifier: ZKsVsEr2Xm+aagvsBKxNbnOpCTbpoNS/NvBbnB039HU=
Subject key identifier: AC:12:7F:69:AA:C8:81:EB:2F:B5:4A:AF:B6:E4:A8:60:E5:2D:A9:56
Certificate issuer: /CN=A913D8E5/serialNumber=57A2B7FC4E7620AD2BF531B08E4B2268E765CCBB
Certificate serial: 02
Authority key identifier: 57:A2:B7:FC:4E:76:20:AD:2B:F5:31:B0:8E:4B:22:68:E7:65:CC:BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V6K3_E52IK0r9TGwjksiaOdlzLs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D8E5/712BA4AC8CFA11ED99C2195FC4F9AE02/BCD9FE588D0411ED81B5C57BC4F9AE02.roa
Signing time: Thu 05 Jan 2023 14:25:01 +0000
ROA not before: Thu 05 Jan 2023 14:25:01 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 63834
IP address blocks: 103.40.208.0/22 maxlen: 22
103.40.208.0/24 maxlen: 24
103.40.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D8E5/serialNumber=57A2B7FC4E7620AD2BF531B08E4B2268E765CCBB
Validity
Not Before: Jan 5 14:25:01 2023 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=63b6ddbc-8ad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:82:12:92:4d:df:8a:68:00:ae:b7:9a:c3:f0:
bd:ae:06:7e:9e:67:b2:09:12:23:85:67:a2:1c:8d:
75:70:66:66:97:67:8d:bf:60:7e:47:08:15:1c:3f:
1a:db:db:c3:e7:20:95:fa:cc:75:38:04:1c:af:4f:
9f:63:53:5a:e2:89:51:19:28:92:fc:37:3d:ec:c4:
dd:29:02:30:77:3b:55:06:ff:98:b2:1a:4b:bb:e6:
2a:3b:31:f3:13:4e:7e:b8:f0:f6:c5:99:d8:bc:23:
8d:43:71:65:5a:af:8a:ee:05:75:f3:1b:be:f8:7d:
1d:d0:5f:0d:2a:79:30:8f:a8:6a:c2:c6:a8:7f:53:
08:72:89:04:98:f4:ac:ee:13:96:07:69:a8:76:b4:
fc:69:48:d3:a1:ce:c1:a3:08:1f:b3:2e:82:da:d3:
37:07:03:b4:8a:34:5e:52:3e:9d:8b:e2:f7:67:59:
a8:1e:83:d8:73:38:77:b6:12:3c:68:ca:9f:00:1c:
fa:1f:e2:3b:d4:26:d9:f2:a9:44:ba:6e:71:49:3a:
1d:32:69:44:bc:b6:23:fd:5b:7b:3f:38:b3:7c:ba:
67:f5:5c:d2:5d:b9:73:62:73:4e:03:11:1e:1c:0c:
f1:04:c1:cb:06:48:79:1c:0e:2e:e4:c0:c3:45:9a:
cc:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:12:7F:69:AA:C8:81:EB:2F:B5:4A:AF:B6:E4:A8:60:E5:2D:A9:56
X509v3 Authority Key Identifier:
keyid:57:A2:B7:FC:4E:76:20:AD:2B:F5:31:B0:8E:4B:22:68:E7:65:CC:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D8E5/712BA4AC8CFA11ED99C2195FC4F9AE02/V6K3_E52IK0r9TGwjksiaOdlzLs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V6K3_E52IK0r9TGwjksiaOdlzLs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D8E5/712BA4AC8CFA11ED99C2195FC4F9AE02/BCD9FE588D0411ED81B5C57BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.40.208.0/22
Signature Algorithm: sha256WithRSAEncryption
05:48:72:61:2c:b4:06:19:48:1d:e8:3a:89:cd:33:26:71:27:
6d:95:8c:76:fc:a7:a5:24:01:4d:16:08:7e:18:59:de:16:d8:
ed:81:10:1d:ca:5b:d6:37:c7:df:8a:4c:4c:83:d0:a1:09:51:
25:50:64:de:db:68:50:f2:bb:d5:64:14:ca:ff:30:d9:5b:01:
f5:10:8c:d0:15:0d:15:e1:18:6c:37:d4:da:72:9e:a1:0c:0f:
c1:e0:0c:16:e1:bd:8c:32:c6:28:12:8d:b5:eb:52:58:20:03:
3a:cf:24:e6:f8:60:29:2c:c6:d9:a8:3d:67:ba:f5:dc:32:99:
cd:27:88:ff:e3:1e:cf:2f:85:1b:0e:c6:81:4f:71:d4:ce:1f:
81:e0:31:85:21:4c:50:de:70:9e:1b:af:11:1f:03:ce:01:6b:
fa:dc:b6:12:cc:9b:b7:49:fe:c3:bf:99:81:20:12:cc:cb:a4:
93:7b:23:9c:c3:d3:fa:13:53:80:75:2f:a2:a4:bb:9d:90:5e:
ab:eb:2d:ce:cc:44:1e:ad:01:5a:e4:92:30:36:cf:b6:87:9d:
b8:10:31:05:18:cc:e4:79:43:36:21:38:52:98:ec:a2:7e:6f:
97:d9:be:9d:9c:78:75:0f:7b:87:72:56:be:d0:85:3c:2b:d6:
b4:5e:84:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:39 2023 by rpki-client on console-fra.rpki-client.org