Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914EBD6/0BB8E272BF8F11EBA8AB3A59C4F9AE02/87868536BF9311EB9C726B5CC4F9AE02.roa
File: 87868536BF9311EB9C726B5CC4F9AE02.roa (raw, json)
Hash identifier: 9k/lJKnh7oQkqkQtx0JGAhePY/q4TWGCstVywIMKSdA=
Subject key identifier: F4:41:6B:FD:E4:AC:A3:B2:B1:52:5D:7A:2E:DB:7B:CF:4B:8E:61:07
Certificate issuer: /CN=A914EBD6/serialNumber=A4FFE40CC8FC727B87145212D2CAD6D2AB1EB5B5
Certificate serial: 0330
Authority key identifier: A4:FF:E4:0C:C8:FC:72:7B:87:14:52:12:D2:CA:D6:D2:AB:1E:B5:B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pP_kDMj8cnuHFFIS0srW0qsetbU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914EBD6/0BB8E272BF8F11EBA8AB3A59C4F9AE02/87868536BF9311EB9C726B5CC4F9AE02.roa
Signing time: Mon 11 Jul 2022 14:11:55 +0000
ROA not before: Mon 11 Jul 2022 14:11:55 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 142294
IP address blocks: 103.167.164.0/24 maxlen: 24
103.167.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 816 (0x330)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EBD6/serialNumber=A4FFE40CC8FC727B87145212D2CAD6D2AB1EB5B5
Validity
Not Before: Jul 11 14:11:55 2022 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=62cc2fab-21ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d6:97:82:79:cb:68:f4:43:51:62:63:6d:fc:
d6:23:a3:db:6d:15:78:1b:13:ea:97:0d:be:f3:4e:
47:f6:d4:03:b6:c5:f1:c4:29:b7:89:cf:fa:d1:18:
94:c5:69:ba:30:b0:63:39:31:f9:d7:84:09:82:b5:
f3:12:f6:e4:a5:a0:b4:65:cd:f8:8c:e9:a5:34:e0:
62:db:75:55:86:12:40:26:a5:bc:e0:f2:18:db:60:
3f:f0:5d:35:97:d6:88:b6:e0:94:62:c8:f0:59:f4:
04:5c:d6:de:84:ad:dd:7e:34:23:a3:03:a8:d2:8c:
77:13:46:fd:1a:06:a6:7c:5b:c1:be:9a:71:cb:fe:
78:40:26:42:08:04:0f:0a:2b:92:44:b4:0a:03:4b:
9c:a8:5a:a7:05:53:64:9c:5f:b0:2b:00:d2:82:54:
72:06:5d:41:e8:5a:01:82:77:d2:61:96:de:a5:28:
29:b5:71:6a:92:49:f1:84:57:55:a2:ad:2a:f8:bb:
da:ba:d9:49:16:18:4c:ec:0e:63:cf:22:07:4f:69:
50:6e:fe:16:dc:3c:30:aa:34:8e:8b:52:63:d0:90:
01:76:71:71:9b:5f:93:da:30:d8:a3:00:c7:68:12:
4f:84:01:1f:59:4f:2b:89:ea:21:2e:be:cb:b3:17:
46:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:41:6B:FD:E4:AC:A3:B2:B1:52:5D:7A:2E:DB:7B:CF:4B:8E:61:07
X509v3 Authority Key Identifier:
keyid:A4:FF:E4:0C:C8:FC:72:7B:87:14:52:12:D2:CA:D6:D2:AB:1E:B5:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914EBD6/0BB8E272BF8F11EBA8AB3A59C4F9AE02/pP_kDMj8cnuHFFIS0srW0qsetbU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pP_kDMj8cnuHFFIS0srW0qsetbU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EBD6/0BB8E272BF8F11EBA8AB3A59C4F9AE02/87868536BF9311EB9C726B5CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.167.164.0/23
Signature Algorithm: sha256WithRSAEncryption
53:db:f7:f6:eb:b0:c4:ae:c5:65:f6:e4:1e:10:43:62:15:d4:
25:3f:5b:8e:6a:27:fa:ca:a2:dc:84:be:6b:01:14:ec:04:83:
06:6d:1e:89:e6:8a:61:71:ae:04:f6:cd:a7:40:a6:88:9d:05:
9d:a5:78:78:6a:a7:8f:a5:ea:c1:f8:dc:d0:73:3f:f1:56:85:
1b:a9:a4:5b:53:7e:8d:15:39:81:cf:6b:34:92:66:30:a1:18:
30:83:e0:c4:35:61:f0:47:10:16:53:82:4d:18:4b:5f:9d:95:
9f:44:e3:c3:aa:96:f9:96:d3:47:2e:e7:58:f8:8c:78:8a:c1:
1a:26:c6:8c:96:42:3d:e9:a3:9a:50:74:46:ef:8d:84:21:50:
1f:3d:02:67:d9:c4:ee:86:fe:cf:20:20:95:29:f9:61:4f:5b:
93:f8:5a:55:3f:37:93:e0:af:36:cd:f1:1e:4f:5c:55:61:3a:
a9:8e:54:ae:81:bf:a0:a0:40:bc:f5:48:8d:ba:fe:99:ca:e6:
21:0c:f0:51:9d:dc:1e:f8:1b:5b:ae:c3:3b:af:eb:c4:1e:2c:
e8:74:ca:16:d8:34:51:71:bb:11:70:93:29:da:ba:f7:55:b3:
62:1b:f3:5e:44:8b:dd:e6:6d:d6:91:4c:30:26:30:46:8a:c5:
f9:a7:08:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:58 2024 by rpki-client on console-ams.rpki-client.org