Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C07F/9F9E1ECA0B6311EB8105B374C4F9AE02/A0A8355061C711ED80DF7363C4F9AE02.roa
File: A0A8355061C711ED80DF7363C4F9AE02.roa (raw, json)
Hash identifier: NzveNozpP2hIrqDesoZd5oi6QqtK7ENdxsRUH/cgipQ=
Subject key identifier: A2:A1:92:8B:7F:69:FE:56:02:50:E5:37:1E:A0:2A:8F:A0:62:8B:4A
Certificate issuer: /CN=A914C07F/serialNumber=D91F77BE22011D7E1D575D9F9ADB5F8E160E5FD9
Certificate serial: 05D8
Authority key identifier: D9:1F:77:BE:22:01:1D:7E:1D:57:5D:9F:9A:DB:5F:8E:16:0E:5F:D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2R93viIBHX4dV12fmttfjhYOX9k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C07F/9F9E1ECA0B6311EB8105B374C4F9AE02/A0A8355061C711ED80DF7363C4F9AE02.roa
Signing time: Fri 11 Nov 2022 13:49:14 +0000
ROA not before: Fri 11 Nov 2022 13:49:14 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 138195
IP address blocks: 103.101.176.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1496 (0x5d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C07F/serialNumber=D91F77BE22011D7E1D575D9F9ADB5F8E160E5FD9
Validity
Not Before: Nov 11 13:49:14 2022 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=636e52da-7b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:05:f0:ca:2f:7b:84:fc:ce:1d:48:d0:cb:b3:
9d:97:4a:3c:71:f7:94:84:2a:61:9e:d7:c9:e5:13:
f0:fb:5a:48:8e:e3:5d:4c:f1:45:5d:d1:2f:c2:ab:
2b:6d:52:b9:fb:2a:fa:3f:47:d1:e3:59:06:bf:a5:
3c:a4:4a:f4:28:7e:6b:c4:3f:00:d2:fd:16:a9:fd:
66:7f:ee:53:5b:17:00:77:f1:40:fb:05:b9:c6:b3:
24:87:b6:55:11:ad:f4:cf:d3:fa:dd:f4:8f:4d:6f:
8d:03:a8:72:82:09:ee:92:04:b0:92:25:8b:70:d1:
6e:01:9c:17:21:eb:bc:df:af:5f:55:b7:dc:59:27:
92:e5:18:66:16:40:3c:33:e4:d1:d2:0f:ea:e6:e7:
f3:36:bc:4b:aa:b3:9c:7b:41:82:17:ad:ec:8d:ac:
32:5a:77:5b:c5:fa:14:f8:84:92:57:5e:a9:0c:5c:
fd:b7:16:69:67:28:c2:5b:16:32:ee:81:d9:bc:e5:
ad:a3:f1:ae:c4:8e:6a:48:23:f4:79:e8:0b:13:ef:
b1:90:f2:32:e2:4a:79:23:34:69:b9:ca:1b:32:2d:
c8:30:80:0a:38:76:fc:63:4d:33:ba:6b:39:09:05:
d6:3a:2d:90:43:2d:c3:fc:39:f6:d4:77:5b:f4:8b:
81:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A1:92:8B:7F:69:FE:56:02:50:E5:37:1E:A0:2A:8F:A0:62:8B:4A
X509v3 Authority Key Identifier:
keyid:D9:1F:77:BE:22:01:1D:7E:1D:57:5D:9F:9A:DB:5F:8E:16:0E:5F:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C07F/9F9E1ECA0B6311EB8105B374C4F9AE02/2R93viIBHX4dV12fmttfjhYOX9k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2R93viIBHX4dV12fmttfjhYOX9k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C07F/9F9E1ECA0B6311EB8105B374C4F9AE02/A0A8355061C711ED80DF7363C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.101.176.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:00:25:3c:74:55:10:7e:2b:a5:65:a6:e7:e3:6b:a7:58:87:
e0:21:8a:4b:d4:6c:b4:3f:23:8f:3b:64:d4:fd:a7:04:ca:b5:
ef:56:87:05:d1:44:2c:a2:e1:31:bc:55:95:68:11:c7:70:bf:
84:28:f7:43:0f:10:28:d4:a8:64:f4:df:7d:d1:41:26:b4:27:
d0:d9:2f:5e:8e:a8:46:74:0f:7b:b4:73:6a:06:38:6f:b4:92:
70:4f:91:16:84:c3:54:37:5c:fe:00:42:10:69:2f:df:95:a8:
dd:43:6a:1c:55:89:4a:7b:ea:7e:e1:7a:d9:0f:a6:6c:3d:28:
28:72:6b:96:82:6f:12:a5:e0:fc:07:0a:ca:ac:12:bf:b7:3f:
89:75:7f:11:c2:40:2f:1f:e8:d5:99:64:2d:45:74:ab:25:33:
d4:28:f5:f2:92:ca:af:bd:08:cb:29:c4:64:88:ce:80:6a:40:
e3:1d:b2:b2:53:15:8f:7a:14:54:f9:1f:aa:56:b7:f6:84:80:
a2:45:50:61:75:05:6d:b8:29:f3:6e:3a:c6:81:92:9b:85:2c:
62:36:2a:99:5a:d6:ac:d0:18:09:d1:fd:25:38:f4:0e:8b:54:
ca:43:1e:77:d8:92:d9:4b:c9:3e:8f:79:c9:7e:6e:40:03:8c:
92:c3:a6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:58 2024 by rpki-client on console-ams.rpki-client.org