Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914993E/3F216D4C6C1111E9A55A8D5FC4F9AE02/473BDFEED20211ECB9C24F58C4F9AE02.roa
File: 473BDFEED20211ECB9C24F58C4F9AE02.roa (raw, json)
Hash identifier: MhSRMGc4dhEA64Ltwaa17PWv/uHanZPashBSp+1j6DA=
Subject key identifier: 59:DD:0B:E8:46:91:1E:1B:98:A4:12:9D:F9:F8:CF:58:77:D0:27:3C
Certificate issuer: /CN=A914993E/serialNumber=3CF4A743B862F475E9221F48D23B9E8153D58F62
Certificate serial: 0C7E
Authority key identifier: 3C:F4:A7:43:B8:62:F4:75:E9:22:1F:48:D2:3B:9E:81:53:D5:8F:62
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPSnQ7hi9HXpIh9I0juegVPVj2I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914993E/3F216D4C6C1111E9A55A8D5FC4F9AE02/473BDFEED20211ECB9C24F58C4F9AE02.roa
Signing time: Thu 12 May 2022 14:46:17 +0000
ROA not before: Thu 12 May 2022 14:46:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 137833
IP address blocks: 103.87.232.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3198 (0xc7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914993E/serialNumber=3CF4A743B862F475E9221F48D23B9E8153D58F62
Validity
Not Before: May 12 14:46:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=627d1db9-1019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c8:a0:0a:37:e4:87:09:d9:b8:c6:45:cb:a8:
04:71:18:71:5d:64:73:a2:df:f2:30:28:77:d4:3d:
aa:9f:84:cd:63:a5:4d:ed:9c:c9:26:a2:52:82:fa:
6c:b1:d0:f6:c3:fb:fe:ea:a8:84:86:9a:51:4e:a7:
94:73:27:9d:a4:56:55:0a:e7:e3:f5:66:f5:db:97:
55:89:c5:5f:2c:ab:71:8a:19:73:13:dc:d0:53:c2:
ad:be:8d:91:b1:5e:aa:5e:19:5b:e7:43:d0:93:c5:
1c:3a:a5:9a:83:58:5a:3a:af:1e:9e:ff:3b:93:06:
c7:bc:ff:2c:5a:5f:86:e5:36:93:30:0d:45:b0:3c:
86:ca:5f:bb:00:b9:21:86:98:2e:df:5b:ff:67:2f:
35:39:5d:02:31:c5:bd:18:52:64:d0:00:14:c0:47:
4c:66:7e:4f:9b:cc:72:9a:66:5a:83:99:39:5a:18:
db:5e:9d:6f:da:41:ff:dd:1f:80:43:81:45:06:cb:
ac:aa:0f:01:9f:fb:75:4a:b0:66:44:41:7e:7e:e6:
81:b6:bc:35:ec:db:58:8b:cb:99:1d:9f:19:a9:46:
96:14:da:2f:f8:23:a5:ee:d5:57:da:30:24:55:a8:
4f:67:96:30:30:fd:91:58:2a:eb:d4:dc:32:70:46:
91:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:DD:0B:E8:46:91:1E:1B:98:A4:12:9D:F9:F8:CF:58:77:D0:27:3C
X509v3 Authority Key Identifier:
keyid:3C:F4:A7:43:B8:62:F4:75:E9:22:1F:48:D2:3B:9E:81:53:D5:8F:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914993E/3F216D4C6C1111E9A55A8D5FC4F9AE02/PPSnQ7hi9HXpIh9I0juegVPVj2I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPSnQ7hi9HXpIh9I0juegVPVj2I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914993E/3F216D4C6C1111E9A55A8D5FC4F9AE02/473BDFEED20211ECB9C24F58C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.87.232.0/22
Signature Algorithm: sha256WithRSAEncryption
16:31:e9:9d:4c:96:0b:e6:7a:57:e4:9a:ec:6c:bc:ae:22:dd:
72:80:02:20:85:e2:1b:8f:82:5d:19:81:3f:e8:60:22:9d:88:
8e:73:cd:31:e6:ac:0a:34:0d:69:d3:ea:91:c1:85:60:e2:40:
de:4d:58:4f:01:a8:4e:09:82:57:20:b4:ab:00:b4:e0:3e:6d:
85:5a:8c:4a:2d:9b:6c:81:88:4a:ee:73:0b:72:04:ca:fa:99:
62:20:63:f3:46:2f:ac:31:fd:94:5e:9b:85:7a:de:81:33:af:
9b:15:32:ed:71:3e:ea:1b:e1:4b:4d:c7:0d:e0:e2:c9:79:69:
7a:45:96:df:8f:e9:6c:da:a6:ec:e4:80:5f:06:93:aa:5e:aa:
17:6d:72:c8:3c:84:c9:c8:48:35:a1:3f:bd:12:c0:df:c6:ce:
9f:4e:cb:5f:3f:f4:1e:c3:9e:ac:ed:04:3f:0d:05:03:a9:ff:
1f:a9:ae:9e:0e:97:98:a4:fb:1d:e6:f3:55:61:81:75:21:4c:
56:15:aa:3e:9f:85:25:3f:51:58:6c:7e:bd:77:53:d0:26:bd:
f4:07:d0:46:b6:96:aa:07:06:67:95:6b:e6:53:d7:5f:be:8a:
c6:54:ad:65:1c:31:bb:d9:67:67:a1:f9:e7:39:17:6a:e1:f7:
9c:af:46:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:38 2023 by rpki-client on console-ams.rpki-client.org