Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F3C3/89025CA87C8711EC96B82629C4F9AE02/16764E587C8A11EC9535272BC4F9AE02.roa
File: 16764E587C8A11EC9535272BC4F9AE02.roa (raw, json)
Hash identifier: TOBUgcQf4PVvAXXgx+f/M3gllXyJHRtGVJcfDgXC5zA=
Subject key identifier: 15:81:51:22:B9:E1:4B:E2:9A:1F:4B:AF:E4:57:9A:62:57:73:09:30
Certificate issuer: /CN=A913F3C3/serialNumber=F07B4F57A5530DF9BCFE5596B441FA371DEB3FB4
Certificate serial: 02
Authority key identifier: F0:7B:4F:57:A5:53:0D:F9:BC:FE:55:96:B4:41:FA:37:1D:EB:3F:B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HtPV6VTDfm8_lWWtEH6Nx3rP7Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F3C3/89025CA87C8711EC96B82629C4F9AE02/16764E587C8A11EC9535272BC4F9AE02.roa
Signing time: Sun 23 Jan 2022 20:21:47 +0000
ROA not before: Sun 23 Jan 2022 20:21:47 +0000
ROA not after: Fri 30 Sep 2022 00:00:00 +0000
asID: 203098
IP address blocks: 103.66.64.0/22 maxlen: 22
103.228.224.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F3C3/serialNumber=F07B4F57A5530DF9BCFE5596B441FA371DEB3FB4
Validity
Not Before: Jan 23 20:21:47 2022 GMT
Not After : Sep 30 00:00:00 2022 GMT
Subject: CN=61edb8da-bc2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:32:19:20:0d:ea:5a:8a:6e:14:ff:4a:a7:b5:
7f:cd:5b:7b:93:5c:fe:88:79:2a:f5:12:2f:e8:bc:
92:8a:10:46:d7:23:92:8d:46:b7:66:c2:a3:8a:cb:
05:df:f6:29:5b:5a:04:26:89:0b:5a:1b:88:3d:78:
3f:28:2e:d4:3d:bd:76:82:7a:90:39:a8:ec:f1:52:
25:0d:6a:86:84:50:b8:47:45:19:8c:a2:9c:dc:09:
93:45:76:e6:e4:9b:1f:ad:55:27:a3:d1:aa:c3:61:
0a:3f:02:53:bf:63:f7:7a:fd:e2:cb:95:41:bd:36:
89:fb:64:3a:ef:a8:ae:fb:9a:13:06:e0:70:2e:b4:
50:d9:90:f9:09:29:fb:b4:07:3e:4d:3c:e1:a7:83:
9d:ff:46:39:45:44:40:4c:9d:28:25:b2:fa:35:40:
2f:8f:de:fb:f5:bf:c1:b5:85:b5:4f:1e:0d:89:db:
cf:a9:98:7b:e9:90:65:d9:01:7b:96:4e:e0:52:40:
23:fe:9a:e2:61:98:9c:55:30:1e:b0:b2:a5:8a:cc:
b9:44:80:3b:98:8a:88:83:5a:38:f4:7a:b7:bf:d5:
8c:e2:96:f3:75:40:ef:08:94:60:67:c4:87:1b:20:
ca:14:33:8d:20:5d:a9:47:c1:43:23:87:3a:93:45:
f1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:81:51:22:B9:E1:4B:E2:9A:1F:4B:AF:E4:57:9A:62:57:73:09:30
X509v3 Authority Key Identifier:
keyid:F0:7B:4F:57:A5:53:0D:F9:BC:FE:55:96:B4:41:FA:37:1D:EB:3F:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F3C3/89025CA87C8711EC96B82629C4F9AE02/8HtPV6VTDfm8_lWWtEH6Nx3rP7Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HtPV6VTDfm8_lWWtEH6Nx3rP7Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F3C3/89025CA87C8711EC96B82629C4F9AE02/16764E587C8A11EC9535272BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.66.64.0/22
103.228.224.0/22
Signature Algorithm: sha256WithRSAEncryption
09:b1:87:f9:63:90:41:92:3a:e8:a6:b6:b1:9f:9d:9f:76:55:
29:08:68:4f:13:2e:1d:a4:b6:a8:60:dd:1c:09:4a:83:a2:e0:
c4:86:fc:71:67:74:59:08:a6:1a:a7:13:db:0e:2d:c6:2b:fe:
a3:b4:bc:45:96:d7:5e:a4:45:48:bc:9c:0a:75:65:5b:44:38:
7c:45:d4:1b:70:91:80:14:8b:3c:98:b4:88:e3:99:7a:50:5c:
b8:c9:db:68:a4:18:26:86:d0:24:56:12:e3:56:fd:59:9a:2c:
a5:dc:a0:7e:91:13:28:75:a8:8b:f2:42:e2:58:75:5a:48:e0:
f7:20:9d:6a:03:14:42:e7:0d:67:35:d2:c7:43:a8:55:50:d9:
49:db:fe:f8:3c:b5:74:c0:dc:b4:ef:48:4a:30:10:14:c0:b0:
a0:61:cd:fd:a4:be:25:1a:7d:69:62:ee:f3:3e:e9:28:c8:12:
9a:cb:2b:b6:96:d5:d5:0c:6b:67:69:d6:eb:2b:c2:67:f9:a4:
ab:1a:b6:fa:2f:99:ec:97:eb:e5:d1:a0:9e:aa:80:a4:06:48:
f4:24:ca:cf:1c:0c:cd:ab:cf:c5:e8:40:7b:6f:4d:f3:c0:c5:
1e:e9:ba:45:e5:cb:31:7d:be:0a:c6:7f:2d:92:45:34:96:5a:
c0:6a:2b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:03 2024 by rpki-client on console-fra.rpki-client.org