Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914EBD6/0BB8E272BF8F11EBA8AB3A59C4F9AE02/61AA120065C911EDBDA3C43DC4F9AE02.roa
File: 61AA120065C911EDBDA3C43DC4F9AE02.roa (raw, json)
Hash identifier: JxnGXALh5VrUi/GDhdC1F1awZeR4r392cdsEo+Ax0MI=
Subject key identifier: C1:D2:C8:04:FA:9D:EB:A2:77:64:C9:2D:2D:C2:4F:DC:3A:F7:6D:39
Certificate issuer: /CN=A914EBD6/serialNumber=A4FFE40CC8FC727B87145212D2CAD6D2AB1EB5B5
Certificate serial: 0474
Authority key identifier: A4:FF:E4:0C:C8:FC:72:7B:87:14:52:12:D2:CA:D6:D2:AB:1E:B5:B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pP_kDMj8cnuHFFIS0srW0qsetbU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914EBD6/0BB8E272BF8F11EBA8AB3A59C4F9AE02/61AA120065C911EDBDA3C43DC4F9AE02.roa
Signing time: Tue 01 Aug 2023 01:01:40 +0000
ROA not before: Tue 01 Aug 2023 01:01:40 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 141322
IP address blocks: 103.167.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1140 (0x474)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EBD6/serialNumber=A4FFE40CC8FC727B87145212D2CAD6D2AB1EB5B5
Validity
Not Before: Aug 1 01:01:40 2023 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=64c85974-fb07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:81:f5:66:5e:40:04:42:31:91:74:5e:c7:ed:
1e:3c:75:fc:b7:04:3a:c9:c0:93:d8:bb:fc:8a:b0:
ef:86:2c:8c:36:64:70:37:e9:a3:1a:54:a3:73:52:
4a:60:2e:37:9a:01:01:19:e3:10:fc:be:38:66:1c:
f0:0d:bd:87:d7:4b:6f:f2:ae:aa:c5:e1:39:99:1c:
95:28:f3:c4:a6:b1:ef:87:88:f2:d3:bc:c3:46:f9:
c4:1d:d6:80:ba:31:90:d3:32:e8:fa:4d:b8:2a:68:
58:1b:93:42:53:65:e3:27:15:ae:be:4c:24:81:c2:
b9:fc:c2:68:e7:c0:74:d8:6f:ab:8e:39:75:e1:29:
9f:d8:f5:4c:64:ee:02:db:2a:0e:ec:b5:53:4b:7d:
4b:bf:7a:0c:c3:66:bd:48:93:01:7f:32:7a:78:dd:
db:89:12:a0:f2:99:c2:27:85:21:3c:0e:10:98:3d:
1a:ee:86:e5:96:5a:fc:93:30:dd:7a:f4:67:6d:1f:
17:66:d9:9d:1e:9a:6e:7f:e5:03:46:98:ef:1e:37:
79:55:3f:d5:f9:19:5e:f8:06:a9:0b:8a:6b:a7:03:
d3:66:0a:13:3d:39:a5:ba:71:a0:a2:0e:65:e5:7f:
88:05:45:3c:d1:fe:cc:6e:54:5a:52:3d:01:41:da:
19:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:D2:C8:04:FA:9D:EB:A2:77:64:C9:2D:2D:C2:4F:DC:3A:F7:6D:39
X509v3 Authority Key Identifier:
keyid:A4:FF:E4:0C:C8:FC:72:7B:87:14:52:12:D2:CA:D6:D2:AB:1E:B5:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914EBD6/0BB8E272BF8F11EBA8AB3A59C4F9AE02/pP_kDMj8cnuHFFIS0srW0qsetbU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pP_kDMj8cnuHFFIS0srW0qsetbU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EBD6/0BB8E272BF8F11EBA8AB3A59C4F9AE02/61AA120065C911EDBDA3C43DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.167.165.0/24
Signature Algorithm: sha256WithRSAEncryption
36:a2:d3:5c:63:a4:fa:ef:0b:5c:31:31:96:3d:60:28:47:39:
96:1d:b4:e5:9a:3c:c1:2c:e5:9c:55:a5:78:87:09:8b:e6:38:
ad:80:04:a4:85:80:ca:b6:72:e5:ff:74:f4:bf:86:87:f0:d1:
fb:27:1c:cf:52:d7:db:76:63:8d:26:7e:80:4f:f1:82:35:06:
63:27:7b:4c:3a:d5:dd:db:ab:25:e1:f9:8e:6e:13:85:57:69:
57:01:20:b3:ca:82:40:5a:e8:20:43:c4:89:07:62:a7:65:67:
4b:fe:c5:b0:bb:5b:f0:03:05:68:6b:ed:5f:e3:97:f5:d0:99:
79:d3:8a:e3:89:87:30:5e:b8:ea:12:f6:2c:b7:d2:b0:d6:04:
15:91:6f:86:20:91:60:1e:65:83:2b:df:bc:a3:1b:6e:13:4e:
ab:9b:7b:10:47:ff:82:0f:5d:44:4e:4a:75:23:73:6f:9b:1e:
ed:20:e8:d9:be:6a:07:e2:4a:5c:df:e8:d1:bf:fc:4a:e7:26:
26:cb:d0:0a:58:73:9a:38:8a:c6:bf:6f:68:4a:d2:d3:00:84:
db:f0:c9:06:4b:b2:6e:5e:fe:7c:9f:64:80:e1:5a:6e:0c:f2:
9c:96:cc:8b:12:b2:b7:17:48:29:1f:6f:3c:35:83:95:44:fb:
2c:77:68:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:58 2024 by rpki-client on console-ams.rpki-client.org