Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152F52/88EBCFDC1D4911EAAE775B34C4F9AE02/1DA7074E94AC11EE9DC7D24AC4F9AE02.roa
File: 1DA7074E94AC11EE9DC7D24AC4F9AE02.roa (raw, json)
Hash identifier: p/1tF2/ilvemUOVEPtMudUJxCOZQyGRW0Ck2u46HSpo=
Subject key identifier: CD:D4:EF:55:0E:68:25:6D:E4:D1:D7:4D:F5:D3:F4:EC:E3:9A:AD:D9
Certificate issuer: /CN=A9152F52/serialNumber=81428A01C51691E7A8C5D843ECB6B1D3D9AE424E
Certificate serial: 0B1B
Authority key identifier: 81:42:8A:01:C5:16:91:E7:A8:C5:D8:43:EC:B6:B1:D3:D9:AE:42:4E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gUKKAcUWkeeoxdhD7Lax09muQk4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152F52/88EBCFDC1D4911EAAE775B34C4F9AE02/1DA7074E94AC11EE9DC7D24AC4F9AE02.roa
Signing time: Thu 07 Dec 2023 02:55:45 +0000
ROA not before: Thu 07 Dec 2023 02:55:45 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 24557
IP address blocks: 103.7.136.0/24 maxlen: 24
103.7.137.0/24 maxlen: 24
103.11.76.0/24 maxlen: 24
103.11.78.0/24 maxlen: 24
113.20.0.0/24 maxlen: 24
113.20.1.0/24 maxlen: 24
113.20.2.0/24 maxlen: 24
113.20.3.0/24 maxlen: 24
113.20.4.0/22 maxlen: 22
113.20.8.0/21 maxlen: 21
117.55.224.0/21 maxlen: 21
117.55.232.0/21 maxlen: 21
2405:5000::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2843 (0xb1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152F52/serialNumber=81428A01C51691E7A8C5D843ECB6B1D3D9AE424E
Validity
Not Before: Dec 7 02:55:45 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=65713431-2688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:26:7c:35:a7:ee:ad:b4:79:ab:32:a7:23:52:
65:7f:11:34:db:39:61:c4:29:04:c6:36:f5:ac:ba:
4a:23:d7:5a:2e:80:6b:71:9d:dc:ce:2d:10:79:c6:
30:c1:7b:f1:c0:df:be:19:87:a9:a4:df:00:d7:93:
e3:13:4f:9a:7d:53:90:54:a0:89:c8:fc:db:47:56:
96:cc:8c:d6:b0:0e:8e:e9:c1:8b:ec:2f:86:4e:99:
c4:e4:3b:d9:31:3d:00:37:e7:d0:25:ba:d8:91:37:
2b:df:66:43:69:14:73:1a:79:f9:39:65:25:5e:0f:
69:7f:05:75:4f:55:0f:b0:be:06:fe:10:41:fc:f1:
f7:56:10:a9:fc:0f:94:52:0d:07:a6:67:ee:8c:04:
f6:89:17:14:c0:f2:09:32:c9:7b:c5:05:4c:c1:1c:
59:40:d3:49:29:80:b5:07:72:e0:2a:19:3f:0d:9d:
ac:c4:f5:69:09:33:af:6b:fb:0b:38:a6:88:87:6c:
9a:70:81:63:af:51:a4:7a:29:3e:5d:13:f8:8d:a8:
f6:9b:a7:37:54:cc:bf:c4:1f:b7:42:0a:1f:17:aa:
8d:b3:b3:be:cc:74:6a:51:7a:21:dc:81:6b:65:c0:
c9:90:ce:d9:9f:f0:23:7f:b6:19:78:6d:e5:88:85:
6b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D4:EF:55:0E:68:25:6D:E4:D1:D7:4D:F5:D3:F4:EC:E3:9A:AD:D9
X509v3 Authority Key Identifier:
keyid:81:42:8A:01:C5:16:91:E7:A8:C5:D8:43:EC:B6:B1:D3:D9:AE:42:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152F52/88EBCFDC1D4911EAAE775B34C4F9AE02/gUKKAcUWkeeoxdhD7Lax09muQk4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gUKKAcUWkeeoxdhD7Lax09muQk4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152F52/88EBCFDC1D4911EAAE775B34C4F9AE02/1DA7074E94AC11EE9DC7D24AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.7.136.0/23
103.11.76.0/24
103.11.78.0/24
113.20.0.0/20
117.55.224.0/20
IPv6:
2405:5000::/32
Signature Algorithm: sha256WithRSAEncryption
8e:b0:93:f6:e5:bb:f7:fb:0d:98:ac:a2:ed:7b:48:05:56:44:
af:cf:de:90:cf:35:d4:a4:2c:2c:0d:66:4d:b9:e0:b1:9d:9d:
61:3e:34:96:08:e2:1f:70:0e:4c:19:66:36:f7:c9:76:da:b6:
c3:d0:5f:03:9d:68:06:c3:a8:82:76:bf:d6:9d:88:82:32:35:
ab:a6:98:94:4f:c8:dd:b1:0a:8c:2f:31:b4:26:e4:84:d6:6f:
e1:d4:7f:bb:d6:5d:b9:48:15:90:45:70:dc:62:85:1f:2b:29:
e6:25:11:46:e4:3c:b6:6c:fc:9e:95:0d:dc:ed:cb:0f:ef:ac:
f9:3b:21:b9:a7:45:9c:2a:8a:a1:93:9f:30:aa:c6:0f:1f:7b:
0a:50:bb:55:1b:05:89:0f:93:b2:c9:a2:ec:81:26:93:cf:5d:
33:19:44:3d:8d:68:e5:7f:81:cc:6b:a3:46:c5:45:bd:f7:40:
bf:06:13:b2:18:6b:04:ec:e3:6b:c7:47:9f:01:1a:fa:0c:75:
34:e3:4d:69:d0:74:3c:66:fb:45:8d:01:a5:3b:a4:9c:f0:17:
85:d3:c2:61:ac:ab:06:7c:5c:1c:06:fd:94:c9:0a:f5:77:ec:
71:a3:ed:5b:b0:be:75:ef:f9:16:3d:a5:e3:d2:ba:06:ed:8f:
18:fc:d2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 19 18:33:19 2024 by rpki-client on console-fra.rpki-client.org