Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916155A/2D250014864411EB8A814D46C4F9AE02/6FE478EC864611EBAEFE3249C4F9AE02.roa
File: 6FE478EC864611EBAEFE3249C4F9AE02.roa (raw, json)
Hash identifier: XhPZXHr3t0tNzGOdcsXkoDMNJF4JCw6LM7dYhf4M190=
Subject key identifier: C9:A6:19:1A:58:B3:A8:73:3E:86:23:A3:80:64:C6:2E:35:B0:FA:32
Certificate issuer: /CN=A916155A/serialNumber=5DB5C2C014FF2DCDC03502A8995CA3EB3B36DE5F
Certificate serial: 033A
Authority key identifier: 5D:B5:C2:C0:14:FF:2D:CD:C0:35:02:A8:99:5C:A3:EB:3B:36:DE:5F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XbXCwBT_Lc3ANQKomVyj6zs23l8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916155A/2D250014864411EB8A814D46C4F9AE02/6FE478EC864611EBAEFE3249C4F9AE02.roa
Signing time: Fri 29 Apr 2022 01:50:59 +0000
ROA not before: Fri 29 Apr 2022 01:50:59 +0000
ROA not after: Sun 28 Aug 2022 00:00:00 +0000
asID: 138640
IP address blocks: 103.135.44.0/24 maxlen: 24
103.135.45.0/24 maxlen: 24
2001:df3:9180::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 826 (0x33a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916155A/serialNumber=5DB5C2C014FF2DCDC03502A8995CA3EB3B36DE5F
Validity
Not Before: Apr 29 01:50:59 2022 GMT
Not After : Aug 28 00:00:00 2022 GMT
Subject: CN=626b4483-8b83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0b:52:64:8a:d1:8a:69:22:c1:26:5d:a6:97:
d9:a9:84:96:1e:74:56:d6:25:68:c4:51:39:a1:58:
ce:cc:70:2f:87:a1:1b:48:48:89:22:79:2a:01:87:
d0:78:21:4a:06:3c:39:22:1d:e0:6e:34:a5:d8:c0:
34:11:5e:58:1b:68:7e:f9:32:fd:8e:12:f0:09:61:
30:a8:8a:ee:3c:37:45:d9:c9:96:09:a2:18:9f:ec:
9a:17:78:56:5e:d2:c6:40:57:ab:99:70:6e:be:9f:
e5:46:95:db:f8:72:13:5c:5d:df:1a:35:40:34:6e:
57:a2:9b:0d:2c:27:2f:fc:b1:d6:4e:77:92:88:2b:
9c:e5:5f:1d:d5:d8:a6:ee:33:0f:ef:4e:05:00:62:
19:df:39:4c:cf:eb:fe:26:32:eb:33:7f:f0:c8:4b:
eb:7c:74:ed:22:9d:2a:11:e3:5a:af:37:cd:dd:47:
22:88:99:95:ed:a2:df:02:39:d7:0d:79:a0:ef:66:
e4:07:7b:ef:42:ad:19:0f:07:a3:bc:1b:30:7e:9c:
56:7f:23:05:d1:e4:6d:b5:07:fd:47:4b:f7:30:d5:
56:78:e9:5a:f7:ae:0b:a9:cb:07:04:2d:0f:39:00:
76:fc:81:de:1f:65:ab:e2:60:b2:16:48:db:da:dc:
0b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A6:19:1A:58:B3:A8:73:3E:86:23:A3:80:64:C6:2E:35:B0:FA:32
X509v3 Authority Key Identifier:
keyid:5D:B5:C2:C0:14:FF:2D:CD:C0:35:02:A8:99:5C:A3:EB:3B:36:DE:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916155A/2D250014864411EB8A814D46C4F9AE02/XbXCwBT_Lc3ANQKomVyj6zs23l8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XbXCwBT_Lc3ANQKomVyj6zs23l8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916155A/2D250014864411EB8A814D46C4F9AE02/6FE478EC864611EBAEFE3249C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.135.44.0/23
IPv6:
2001:df3:9180::/48
Signature Algorithm: sha256WithRSAEncryption
61:29:67:01:ae:30:df:8b:40:12:82:33:7b:5e:93:12:63:7f:
e9:66:52:c2:c5:9f:62:cc:12:cd:ab:73:7c:21:2d:76:95:ff:
82:5d:db:d5:73:9a:41:40:25:3f:bf:f6:da:5a:9b:33:98:8c:
ac:a4:b7:aa:de:cf:ee:88:d2:a6:60:52:ef:d6:f3:99:ca:92:
5b:75:c8:ce:71:5f:ad:ed:b8:fd:45:b4:85:b9:ce:a7:fe:d7:
77:24:3a:e1:46:b4:12:ab:b5:db:26:fc:e3:8c:7b:27:e5:70:
ee:58:6b:24:52:dd:37:9f:e5:44:b3:18:3b:65:a7:17:33:64:
ab:ff:8b:4f:da:e1:21:02:75:7c:32:d8:05:74:bf:87:42:02:
ec:90:ea:3e:a3:f2:06:87:2a:68:ee:0c:7e:7d:c5:47:ee:f0:
27:bb:63:b3:1b:46:bc:09:c2:04:c8:70:7e:dd:44:06:0c:de:
6d:03:f1:de:ad:94:ca:91:05:c4:29:7d:36:54:88:79:f3:1b:
d0:68:01:5f:e6:52:81:91:0a:5f:39:0e:ce:59:3d:1c:61:37:
dd:ec:62:6d:80:d7:be:f8:06:39:da:68:04:17:d7:84:b4:99:
84:a7:ea:87:b4:b1:dd:4d:d5:ed:09:b5:37:d3:85:68:61:9c:
df:53:3d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:09 2024 by rpki-client on console-fra.rpki-client.org