Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914DE7E/8DD2EF4C836011ECBE2C1A6DC4F9AE02/76ED0878836311ECB4D9F06FC4F9AE02.roa
File: 76ED0878836311ECB4D9F06FC4F9AE02.roa (raw, json)
Hash identifier: Ibj/1zg4JIjT1hGGxpuAFmA1ABgTi7FeMyPTbbj3U80=
Subject key identifier: 38:33:AF:26:DB:10:DC:23:B1:AC:5C:DE:AA:F9:AD:12:D6:91:4B:3A
Certificate issuer: /CN=A914DE7E/serialNumber=38CF8FC02076F53F4A2DCA9454F6E2F3A0BA34C0
Certificate serial: 024A
Authority key identifier: 38:CF:8F:C0:20:76:F5:3F:4A:2D:CA:94:54:F6:E2:F3:A0:BA:34:C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OM-PwCB29T9KLcqUVPbi86C6NMA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914DE7E/8DD2EF4C836011ECBE2C1A6DC4F9AE02/76ED0878836311ECB4D9F06FC4F9AE02.roa
Signing time: Mon 03 Apr 2023 04:35:16 +0000
ROA not before: Mon 03 Apr 2023 04:35:16 +0000
ROA not after: Tue 01 Aug 2023 00:00:00 +0000
asID: 149486
IP address blocks: 103.180.252.0/23 maxlen: 23
103.180.252.0/24 maxlen: 24
103.180.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 586 (0x24a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914DE7E/serialNumber=38CF8FC02076F53F4A2DCA9454F6E2F3A0BA34C0
Validity
Not Before: Apr 3 04:35:16 2023 GMT
Not After : Aug 1 00:00:00 2023 GMT
Subject: CN=642a5784-19a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:24:36:71:4d:3d:bf:80:95:83:f8:97:d5:0d:
39:35:25:65:7c:94:e9:bc:f8:1b:98:a8:20:95:c3:
24:20:24:21:b2:27:4a:3e:d0:24:28:74:c6:4b:de:
21:8c:d0:86:6b:49:8d:36:23:28:0d:d4:54:8a:ad:
59:95:79:dd:f0:34:55:7a:70:e0:e8:ad:0b:ce:ed:
63:2d:11:4e:b3:b6:98:af:81:0d:ec:81:1b:72:c0:
7c:6d:3c:4a:34:21:97:46:78:ad:f8:39:cb:86:d2:
b4:09:21:7c:36:b0:f6:dc:d8:9d:81:75:ab:5c:e0:
d1:89:98:c7:41:3e:69:3a:d3:c8:88:6f:f1:ba:9e:
39:11:99:bc:31:9d:a4:76:ca:b9:f7:9c:a5:8d:a9:
9c:af:26:a5:c2:3e:c3:38:e8:d3:c2:3e:92:0f:bf:
99:eb:05:d6:89:dd:f6:88:aa:d2:f1:22:98:ef:5b:
a1:72:7e:61:35:bb:9d:c9:d1:0c:bb:de:a5:96:0c:
d5:23:d6:1f:5b:80:1d:95:fc:be:ea:9a:58:15:58:
f9:6e:c5:9a:a1:ff:c6:6c:04:fa:4e:e0:2e:71:14:
21:2f:c5:76:04:08:4c:fd:dd:ed:4c:7a:e3:12:74:
83:7d:5d:3b:cb:49:83:9a:f0:ac:e0:d2:e5:ae:5a:
ce:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:33:AF:26:DB:10:DC:23:B1:AC:5C:DE:AA:F9:AD:12:D6:91:4B:3A
X509v3 Authority Key Identifier:
keyid:38:CF:8F:C0:20:76:F5:3F:4A:2D:CA:94:54:F6:E2:F3:A0:BA:34:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914DE7E/8DD2EF4C836011ECBE2C1A6DC4F9AE02/OM-PwCB29T9KLcqUVPbi86C6NMA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OM-PwCB29T9KLcqUVPbi86C6NMA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DE7E/8DD2EF4C836011ECBE2C1A6DC4F9AE02/76ED0878836311ECB4D9F06FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.180.252.0/23
Signature Algorithm: sha256WithRSAEncryption
32:45:d8:f0:31:72:c6:11:2d:83:c9:34:c4:57:9e:d6:b0:9a:
a1:df:f6:90:44:ee:74:a2:76:01:c1:17:ce:66:e4:55:b0:a4:
d3:c8:fd:2e:f9:00:15:2f:cd:dc:83:7a:55:2b:56:2a:10:4b:
45:5d:30:e3:b2:ac:c1:ad:79:22:a1:29:29:54:78:c0:98:c5:
4d:f5:6b:ce:be:3e:e8:ea:de:0f:31:8a:e4:e3:15:51:1b:38:
ff:1e:12:9e:26:eb:e6:d3:c0:b1:da:c9:5a:66:c6:23:33:17:
f1:40:ff:cc:ea:e1:c9:54:ca:ab:95:8d:db:8d:68:ec:34:05:
53:88:ff:9f:1c:78:e0:9b:26:ca:ff:ed:a3:97:9a:59:90:b7:
1f:ba:9f:c0:2f:92:c4:c0:ad:b4:6f:a7:e2:a1:8d:a9:c7:75:
a6:0c:18:d8:c6:cb:a0:0e:d5:14:f0:a4:ce:10:c4:0d:2d:1c:
1a:09:d9:48:a1:57:ef:e1:7a:17:7a:70:98:9e:6b:10:58:0e:
44:ad:43:93:80:cf:b9:3e:5f:51:50:4d:45:f0:c8:6b:12:b8:
67:62:f9:00:63:95:c5:1c:c4:7e:a2:d3:9b:1f:e2:68:36:e1:
79:60:d3:04:c6:5d:e5:66:d3:43:26:c1:68:ac:bf:95:dc:67:
12:b7:91:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:39 2023 by rpki-client on console-ams.rpki-client.org