Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916155A/2D250014864411EB8A814D46C4F9AE02/705DF9CE864611EBAEFE3249C4F9AE02.roa
File: 705DF9CE864611EBAEFE3249C4F9AE02.roa (raw, json)
Hash identifier: NrbXCfEtk9jdNwBv49x6/Ghaym4M75lVLifiU0IGNN4=
Subject key identifier: 25:9C:C1:D9:B4:10:9A:FF:E9:45:49:DF:5F:51:22:F6:6F:F2:B1:F4
Certificate issuer: /CN=A916155A/serialNumber=5DB5C2C014FF2DCDC03502A8995CA3EB3B36DE5F
Certificate serial: 033B
Authority key identifier: 5D:B5:C2:C0:14:FF:2D:CD:C0:35:02:A8:99:5C:A3:EB:3B:36:DE:5F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XbXCwBT_Lc3ANQKomVyj6zs23l8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916155A/2D250014864411EB8A814D46C4F9AE02/705DF9CE864611EBAEFE3249C4F9AE02.roa
Signing time: Fri 29 Apr 2022 01:51:00 +0000
ROA not before: Fri 29 Apr 2022 01:51:00 +0000
ROA not after: Sun 28 Aug 2022 00:00:00 +0000
asID: 17557
IP address blocks: 103.135.44.0/24 maxlen: 24
103.135.45.0/24 maxlen: 24
2001:df3:9180::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 827 (0x33b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916155A/serialNumber=5DB5C2C014FF2DCDC03502A8995CA3EB3B36DE5F
Validity
Not Before: Apr 29 01:51:00 2022 GMT
Not After : Aug 28 00:00:00 2022 GMT
Subject: CN=626b4484-06e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0d:87:44:34:79:12:c3:64:91:71:36:0d:7a:
73:32:20:2d:00:80:b4:4a:f5:a6:81:b9:a6:63:55:
2a:49:90:ac:33:32:d0:4e:b7:d0:6f:bf:24:d4:6b:
62:b0:5f:d1:fc:00:ad:64:c4:8c:7a:31:cb:6c:aa:
6a:60:83:c9:24:91:85:72:a8:fd:7f:f2:69:d2:22:
11:3d:25:de:4a:00:95:26:a8:c9:3c:95:54:c8:3a:
ec:c6:8d:25:7b:92:59:00:b9:f6:cd:ab:3c:61:52:
39:92:a6:83:09:18:dc:85:56:23:d8:7b:3b:d4:3e:
5b:93:98:ac:a7:b8:b4:64:d5:0e:3c:a5:09:bd:77:
01:88:5b:de:35:e6:4c:64:95:72:1c:11:a3:f2:bf:
81:58:51:7f:93:7f:63:58:07:28:42:dd:bd:4a:85:
b6:a3:38:bc:af:94:4a:e3:02:e0:51:f8:69:73:41:
a6:81:41:e3:77:7e:28:28:f2:55:e5:70:c2:bd:71:
8a:60:16:bd:b1:38:eb:29:bf:1e:97:9e:3a:ea:4e:
f5:f5:a1:6a:da:0a:8b:bc:1f:6f:38:65:cd:bf:f9:
9b:72:d2:d5:ec:08:f7:06:8e:32:1d:63:82:52:3f:
f3:2b:ec:1f:7b:44:93:85:19:ed:15:d2:c5:b8:53:
4a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:9C:C1:D9:B4:10:9A:FF:E9:45:49:DF:5F:51:22:F6:6F:F2:B1:F4
X509v3 Authority Key Identifier:
keyid:5D:B5:C2:C0:14:FF:2D:CD:C0:35:02:A8:99:5C:A3:EB:3B:36:DE:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916155A/2D250014864411EB8A814D46C4F9AE02/XbXCwBT_Lc3ANQKomVyj6zs23l8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XbXCwBT_Lc3ANQKomVyj6zs23l8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916155A/2D250014864411EB8A814D46C4F9AE02/705DF9CE864611EBAEFE3249C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.135.44.0/23
IPv6:
2001:df3:9180::/48
Signature Algorithm: sha256WithRSAEncryption
17:6b:c8:7f:cb:e2:a6:8e:07:d6:7e:79:97:da:8a:ec:31:da:
48:bf:cb:81:a9:2d:8a:52:75:60:12:c1:1b:88:91:be:0b:4d:
5c:5d:37:3b:8e:ec:79:a3:53:72:3f:99:71:09:8c:c9:fe:63:
d4:8c:22:81:c0:3b:87:41:e0:06:3d:3c:0a:dc:31:b1:c4:c3:
b9:02:14:d0:45:85:65:63:22:2b:ea:2a:b1:6e:ac:21:d2:3c:
33:70:96:db:0e:9c:19:6a:3b:b5:aa:42:ee:d5:31:ed:82:95:
a9:1f:2c:e6:d1:a7:f4:20:bc:f4:ac:98:2f:63:15:01:8b:1c:
a6:16:6c:5d:70:42:27:e3:6d:4f:aa:23:33:c4:b0:63:c2:ff:
df:74:61:a3:89:c4:ee:c4:01:ea:e6:56:15:e1:9d:82:30:9d:
6d:cc:86:3b:b4:2d:d1:8b:e8:f0:6b:4d:c0:eb:a0:d0:f1:ca:
39:ca:d6:85:29:08:95:07:f9:a8:4d:e4:df:b0:83:e5:fd:ea:
13:eb:61:9e:23:e5:3a:a4:8d:20:26:a2:33:a6:04:c4:70:50:
a7:fd:04:19:9f:b6:f2:4a:86:95:86:30:1d:55:85:85:61:e7:
9c:ff:9a:fa:71:9a:93:e7:0e:cc:b5:98:15:ed:dd:09:25:4d:
45:1b:78:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:09 2024 by rpki-client on console-fra.rpki-client.org