Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154E7F/78CFFD7E295811EA958A7F1EC4F9AE02/B90ABC26632F11ED9122442CC4F9AE02.roa
File: B90ABC26632F11ED9122442CC4F9AE02.roa (raw, json)
Hash identifier: UK0rKnQ0djaY/ynFBBmU99W4ZGNGUuIF/ZSRRXx5iWw=
Subject key identifier: 30:08:04:6B:2E:DC:B0:28:ED:C0:30:4B:A1:75:54:D0:07:5D:18:B5
Certificate issuer: /CN=A9154E7F/serialNumber=A65E006E534F587A6B81C82C8D8C00F4A10DFFAC
Certificate serial: 09BA
Authority key identifier: A6:5E:00:6E:53:4F:58:7A:6B:81:C8:2C:8D:8C:00:F4:A1:0D:FF:AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pl4AblNPWHprgcgsjYwA9KEN_6w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154E7F/78CFFD7E295811EA958A7F1EC4F9AE02/B90ABC26632F11ED9122442CC4F9AE02.roa
Signing time: Sat 26 Nov 2022 20:47:04 +0000
ROA not before: Sat 26 Nov 2022 20:47:04 +0000
ROA not after: Wed 31 Jan 2024 00:00:00 +0000
asID: 149829
IP address blocks: 103.78.188.0/22 maxlen: 22
103.78.188.0/23 maxlen: 23
103.78.188.0/24 maxlen: 24
103.78.189.0/24 maxlen: 24
103.78.190.0/23 maxlen: 23
103.78.190.0/24 maxlen: 24
103.78.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2490 (0x9ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154E7F/serialNumber=A65E006E534F587A6B81C82C8D8C00F4A10DFFAC
Validity
Not Before: Nov 26 20:47:04 2022 GMT
Not After : Jan 31 00:00:00 2024 GMT
Subject: CN=63827b47-1409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:49:c5:8a:31:72:91:8c:23:b3:79:35:6c:29:
17:e3:48:e3:64:8c:b5:2c:b2:9a:1e:f4:63:6d:79:
45:7b:1e:6e:fa:82:4a:ac:be:52:75:ac:55:c7:f3:
05:1f:0a:5c:8a:20:dd:db:fa:12:ed:07:eb:25:12:
d0:d2:18:77:fe:db:f7:fc:58:02:60:f7:22:34:50:
7d:85:28:37:13:23:9c:70:31:a5:4f:70:cf:c0:e0:
21:9d:3c:44:63:31:7e:83:60:82:b6:84:fc:c6:57:
3f:d2:7c:a0:36:6b:12:e6:ea:d9:e7:9c:eb:06:99:
0b:24:25:4d:6b:bf:8b:b4:29:e0:62:fd:fb:bd:92:
9c:54:34:31:f3:b6:ab:b1:53:12:ad:25:58:14:76:
4f:f4:a8:1d:d6:d5:12:5d:c0:20:1e:08:f6:b5:0a:
d3:af:fb:15:6b:eb:23:52:f3:17:77:0a:4f:00:48:
17:c3:96:20:0b:02:19:a2:f4:60:69:0f:2a:5b:1d:
d4:6d:e7:bb:b9:59:52:d9:09:a3:69:91:5a:bc:8f:
3c:90:07:34:fa:fb:27:04:c6:ba:c1:3c:ae:cd:df:
8e:b4:73:55:f1:0c:f8:20:91:99:4c:b3:e1:d9:a1:
95:0c:d4:ac:af:82:42:52:9c:bf:d0:6f:47:13:24:
9e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:08:04:6B:2E:DC:B0:28:ED:C0:30:4B:A1:75:54:D0:07:5D:18:B5
X509v3 Authority Key Identifier:
keyid:A6:5E:00:6E:53:4F:58:7A:6B:81:C8:2C:8D:8C:00:F4:A1:0D:FF:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154E7F/78CFFD7E295811EA958A7F1EC4F9AE02/pl4AblNPWHprgcgsjYwA9KEN_6w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pl4AblNPWHprgcgsjYwA9KEN_6w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154E7F/78CFFD7E295811EA958A7F1EC4F9AE02/B90ABC26632F11ED9122442CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.78.188.0/22
Signature Algorithm: sha256WithRSAEncryption
45:18:6a:89:40:29:70:53:47:d5:b5:eb:e8:00:fb:c5:4e:db:
b2:cb:72:06:a3:2d:f1:03:96:29:44:4f:a0:4e:8e:a2:c1:cb:
80:8f:19:5d:69:2c:50:60:0d:bc:4b:42:0c:3d:2d:dc:df:10:
f6:58:9a:06:a5:0c:94:c9:89:f6:81:df:7c:76:68:6e:67:a3:
52:e3:3d:4f:91:d8:8f:ed:ee:4b:eb:ee:ea:23:83:d6:00:d6:
7f:3d:fb:36:a4:6b:b7:57:13:5b:28:84:14:4e:34:5a:c8:7e:
46:0c:71:69:af:4a:91:27:95:bc:c0:a1:a5:d2:e2:b8:56:ad:
35:02:9b:8b:33:f6:6a:c1:a6:d1:2e:07:9e:cf:9a:4c:16:c3:
e6:33:63:0e:aa:cb:8c:de:f8:a1:51:13:38:ba:e7:34:02:81:
13:79:3e:c3:65:83:3d:00:72:4c:09:e4:98:c5:ec:e3:11:e6:
45:f8:00:2a:28:8f:f1:0e:3c:46:94:32:f1:db:b1:5f:c2:93:
c6:a5:a6:54:4c:0a:b6:37:12:d0:b2:10:7e:6a:79:ab:07:0d:
f5:9e:95:ed:f6:86:f4:27:9d:3b:83:4c:55:1e:81:1b:3a:c0:
32:0b:2f:9a:ef:5f:4b:92:cc:aa:a6:d7:8b:8a:53:be:d7:13:
1c:89:86:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:42 2023 by rpki-client on console-fra.rpki-client.org