Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160AB7/460B980C5C1611EBB3954D22C4F9AE02/0F36487E5C1911EBB6B78426C4F9AE02.roa
File: 0F36487E5C1911EBB6B78426C4F9AE02.roa (raw, json)
Hash identifier: +HAytKW3JBU2mxHhBeUWH3xtJTHvFEf1wXCVzWBrD6I=
Subject key identifier: 57:D8:8A:C3:AC:57:51:25:46:75:B2:52:67:55:E2:F5:7F:17:A6:3D
Certificate issuer: /CN=A9160AB7/serialNumber=4800D7F90598D3DC00E3B47FFFD2DB051AC51D61
Certificate serial: 051D
Authority key identifier: 48:00:D7:F9:05:98:D3:DC:00:E3:B4:7F:FF:D2:DB:05:1A:C5:1D:61
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SADX-QWY09wA47R__9LbBRrFHWE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160AB7/460B980C5C1611EBB3954D22C4F9AE02/0F36487E5C1911EBB6B78426C4F9AE02.roa
Signing time: Wed 01 Mar 2023 01:11:51 +0000
ROA not before: Wed 01 Mar 2023 01:11:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 141687
IP address blocks: 103.161.86.0/23 maxlen: 23
103.161.86.0/24 maxlen: 24
103.161.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1309 (0x51d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160AB7/serialNumber=4800D7F90598D3DC00E3B47FFFD2DB051AC51D61
Validity
Not Before: Mar 1 01:11:51 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63fea657-a730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ea:99:26:f2:a8:26:c3:fc:63:0b:78:a4:d7:
6e:76:98:28:2a:06:ff:48:4f:55:83:71:e1:43:61:
2a:db:55:40:1a:fd:5d:86:74:8e:da:0f:e0:42:34:
d3:02:17:15:ec:71:3b:1e:43:73:55:83:3c:7e:5e:
e6:79:b5:82:ac:dd:6a:f5:f0:ec:3d:43:2d:bf:e2:
62:90:8b:b5:6e:fd:27:5e:2a:ee:19:56:ba:d0:10:
d8:97:d5:53:52:49:ea:2c:8a:1e:57:b5:15:d3:b3:
4b:0f:83:90:c7:7b:6a:81:77:f0:87:38:08:85:94:
4d:f6:a0:07:8a:0d:be:85:99:1d:34:53:0b:b9:5e:
04:20:7d:d3:c4:ad:4c:21:c2:dc:02:a6:bf:89:10:
69:7f:39:d7:aa:2b:49:ae:36:1c:d2:f9:5c:13:60:
82:8d:d3:2c:35:3f:2f:71:78:aa:a5:fb:82:68:71:
50:b6:bd:46:54:c5:5c:95:88:82:6f:d4:0f:dc:1c:
7f:db:a4:87:82:ee:43:40:8a:9b:84:5c:6c:a7:4f:
7c:55:f6:7c:18:1c:04:9f:a6:86:ac:b7:46:dd:d5:
48:5c:59:86:5c:ad:07:86:3d:1d:e1:95:f5:16:73:
8b:22:eb:c8:8b:92:eb:d3:15:a7:44:33:8a:78:ac:
08:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D8:8A:C3:AC:57:51:25:46:75:B2:52:67:55:E2:F5:7F:17:A6:3D
X509v3 Authority Key Identifier:
keyid:48:00:D7:F9:05:98:D3:DC:00:E3:B4:7F:FF:D2:DB:05:1A:C5:1D:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160AB7/460B980C5C1611EBB3954D22C4F9AE02/SADX-QWY09wA47R__9LbBRrFHWE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SADX-QWY09wA47R__9LbBRrFHWE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160AB7/460B980C5C1611EBB3954D22C4F9AE02/0F36487E5C1911EBB6B78426C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.161.86.0/23
Signature Algorithm: sha256WithRSAEncryption
47:19:71:78:77:29:39:13:d2:90:c6:26:68:55:99:b4:ed:4e:
86:f9:c6:15:72:a9:89:88:d7:02:f6:61:f2:01:5a:30:9d:47:
cd:c7:ba:e4:60:ef:49:e3:4c:aa:18:3d:e5:94:3c:42:a7:27:
04:3a:08:6c:56:d6:e8:45:65:64:72:2a:6d:4a:fd:16:2d:6c:
15:eb:96:2a:eb:59:df:d2:23:97:90:29:bc:1a:b8:04:2c:73:
ee:31:3b:ad:75:af:73:89:34:13:16:6e:e4:7c:e1:41:77:06:
7a:05:f6:0d:3e:88:d0:11:31:dc:24:58:48:af:66:4f:c1:86:
22:88:2d:49:1e:e3:2e:a3:e1:07:2b:84:ba:fb:2a:53:46:9f:
2d:09:e6:f5:a9:6f:09:3d:e0:91:04:0e:bc:17:17:0d:c3:7f:
e3:13:6a:4a:d1:af:16:c5:65:7a:a2:2f:10:db:fd:e5:ba:6d:
3c:41:14:72:cc:61:6e:3d:ce:7d:5d:4c:17:fb:81:f2:06:d7:
aa:d1:ad:72:50:18:22:0a:54:81:b9:34:dc:f7:64:4a:72:c8:
26:49:5f:34:f2:fe:8a:1b:a5:2e:f4:40:d7:4e:c2:ab:4c:88:
60:61:de:68:ca:f3:37:76:42:27:8f:8c:de:bb:88:0e:00:22:
2e:5e:2e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:09 2024 by rpki-client on console-fra.rpki-client.org