Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914993E/3F216D4C6C1111E9A55A8D5FC4F9AE02/9A8361DC334611ECB2923482C4F9AE02.roa
File: 9A8361DC334611ECB2923482C4F9AE02.roa (raw, json)
Hash identifier: ZtFjmG+qPQ2aj5hvTVyTQVCXL1KU6p4+H51wwYjfN/M=
Subject key identifier: 6A:90:2A:FE:A5:5D:F3:85:DA:C6:7A:37:0C:14:2A:0A:E6:30:A0:D4
Certificate issuer: /CN=A914993E/serialNumber=3CF4A743B862F475E9221F48D23B9E8153D58F62
Certificate serial: 0AE4
Authority key identifier: 3C:F4:A7:43:B8:62:F4:75:E9:22:1F:48:D2:3B:9E:81:53:D5:8F:62
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPSnQ7hi9HXpIh9I0juegVPVj2I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914993E/3F216D4C6C1111E9A55A8D5FC4F9AE02/9A8361DC334611ECB2923482C4F9AE02.roa
Signing time: Fri 22 Oct 2021 14:44:47 +0000
ROA not before: Fri 22 Oct 2021 14:44:47 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 133410
IP address blocks: 103.87.234.0/23 maxlen: 23
103.87.234.0/24 maxlen: 24
103.87.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2788 (0xae4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914993E/serialNumber=3CF4A743B862F475E9221F48D23B9E8153D58F62
Validity
Not Before: Oct 22 14:44:47 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=6172ce5f-49c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:26:83:a4:c5:cb:19:79:85:79:75:06:5f:41:
1d:e0:bf:6e:05:27:af:a1:ec:f3:59:b3:61:c1:b3:
a5:2f:5a:1f:17:f8:67:d3:5a:65:0b:bb:91:ee:eb:
5b:ef:db:de:fe:b3:67:3d:42:1e:f9:df:c0:33:b7:
87:fc:b3:be:bc:37:c4:48:c3:23:0a:5d:92:70:43:
1b:d6:e6:42:45:cf:df:53:68:a7:b6:32:70:b4:75:
15:bc:2c:62:f9:38:8d:c8:34:a6:91:56:ba:ee:e2:
8c:23:11:3d:98:7a:aa:0a:cf:8b:eb:c8:30:f8:a3:
a9:34:16:65:1e:fd:15:57:13:f1:97:cc:d4:1b:96:
46:22:32:e3:96:03:91:51:3f:23:49:c4:f8:c9:be:
b3:93:31:66:bf:04:b0:bd:88:58:0a:2a:a4:de:37:
ad:a3:9c:14:81:84:f7:9d:99:5a:5e:89:a5:e8:4d:
60:0a:a5:3f:13:6e:7f:18:1b:f2:c5:da:bd:5e:3c:
57:47:d8:ac:94:c0:fd:b6:a3:4b:64:54:23:8e:6f:
89:8f:78:9c:80:a6:89:e0:3b:04:1b:4d:10:43:7d:
0b:10:ed:21:71:25:35:a3:05:5e:bd:11:8c:71:34:
22:e8:61:d8:bf:d6:be:f0:fd:24:fb:74:5d:41:c1:
2f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:90:2A:FE:A5:5D:F3:85:DA:C6:7A:37:0C:14:2A:0A:E6:30:A0:D4
X509v3 Authority Key Identifier:
keyid:3C:F4:A7:43:B8:62:F4:75:E9:22:1F:48:D2:3B:9E:81:53:D5:8F:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914993E/3F216D4C6C1111E9A55A8D5FC4F9AE02/PPSnQ7hi9HXpIh9I0juegVPVj2I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPSnQ7hi9HXpIh9I0juegVPVj2I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914993E/3F216D4C6C1111E9A55A8D5FC4F9AE02/9A8361DC334611ECB2923482C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.87.234.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:c0:2c:3c:71:74:82:5c:26:96:6f:0a:40:fc:e1:8b:0d:26:
4b:bc:2c:1e:53:72:98:53:a5:40:fa:e4:3f:d8:38:f4:ac:33:
69:79:f4:03:46:65:9d:a6:b2:e0:51:d6:91:02:c0:fe:79:8e:
0c:92:42:1d:9a:b9:0e:1b:8b:30:f2:e2:af:22:49:76:b5:e4:
36:1e:bf:11:18:c0:12:d3:6d:d3:30:5d:42:be:ec:f6:69:f6:
b2:77:5d:5e:20:22:7e:d3:2f:f3:5e:5f:d4:bd:f9:c8:c2:1a:
4e:43:45:6c:dc:f7:af:22:12:33:85:43:c3:73:58:6c:5b:83:
73:9a:70:91:83:61:a7:6e:17:bf:ec:17:2b:eb:85:e0:fd:30:
1c:04:b0:9f:2b:e0:8c:de:dd:2e:1d:f1:7e:a8:71:d6:5f:90:
3d:f1:65:07:45:ef:56:cd:34:9f:ee:16:b0:98:85:d2:da:06:
71:d5:27:3a:d9:58:ba:4b:4c:23:aa:8f:70:84:92:89:04:be:
33:3f:65:cc:f1:32:8d:16:49:54:82:92:40:1e:a3:e1:31:33:
3f:27:5c:d8:3f:54:01:b2:01:2a:3d:79:32:1a:26:02:d5:74:
ad:66:d9:bd:73:e7:d8:af:de:8f:ef:a0:d7:a1:18:ca:73:20:
ed:26:41:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:58 2024 by rpki-client on console-ams.rpki-client.org