Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9162578/25C39ECC7BE811EBB0B1F63CC4F9AE02/571A04A8FBF311EBB9894464C4F9AE02.roa
File: 571A04A8FBF311EBB9894464C4F9AE02.roa (raw, json)
Hash identifier: KTFFOQ79tJjTfr3XZqgJPSgGijTQgygDj1qAQ/h45uE=
Subject key identifier: CC:BC:2C:CD:67:E1:93:23:7B:23:0F:CA:43:35:3E:57:3C:A7:73:EF
Certificate issuer: /CN=A9162578/serialNumber=2D91AD316BC5EEFF7EDC25253834EBE3AD5641BD
Certificate serial: 04FF
Authority key identifier: 2D:91:AD:31:6B:C5:EE:FF:7E:DC:25:25:38:34:EB:E3:AD:56:41:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZGtMWvF7v9-3CUlODTr461WQb0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9162578/25C39ECC7BE811EBB0B1F63CC4F9AE02/571A04A8FBF311EBB9894464C4F9AE02.roa
Signing time: Thu 13 Apr 2023 01:42:01 +0000
ROA not before: Thu 13 Apr 2023 01:42:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 45250
IP address blocks: 103.136.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1279 (0x4ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162578/serialNumber=2D91AD316BC5EEFF7EDC25253834EBE3AD5641BD
Validity
Not Before: Apr 13 01:42:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64375de8-220b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:44:1f:07:5e:8d:4d:4c:8a:85:eb:1d:d7:78:
a1:57:1c:4a:84:9e:18:66:2c:61:e9:13:dc:e0:46:
28:5a:a3:f1:f6:b6:a5:5c:13:57:39:c3:bd:e1:75:
e6:d5:3c:46:85:ca:94:9b:d3:4e:a0:21:34:4b:7f:
66:39:9b:71:65:1e:b8:0b:8c:46:e2:bd:59:9c:5d:
a2:df:dc:37:81:35:a0:93:8a:65:05:ee:40:8c:1a:
b3:1d:c7:26:a0:58:8a:99:17:e1:3f:c7:f7:38:df:
05:00:43:5b:19:74:39:36:aa:cf:25:67:d4:46:7b:
3d:a6:35:b1:9a:36:33:30:a7:b9:fe:3c:55:75:bf:
c1:23:37:d3:f1:51:de:a9:39:b5:21:1c:92:34:1c:
92:cf:c7:70:5a:69:87:7b:c4:26:47:0e:78:bf:09:
28:53:5c:ac:e6:e1:c0:f3:43:ed:a0:c9:cc:38:0d:
98:2e:30:fd:ab:b7:3c:e0:e6:cf:c9:f9:a3:e6:56:
d3:0c:b6:16:ca:ee:17:11:55:98:79:ec:8e:db:98:
84:ba:37:00:ea:da:e9:0e:f2:4f:d0:10:1a:83:97:
31:77:d8:19:d4:6d:e3:f8:83:e3:17:1e:37:7f:0e:
a2:52:c4:38:a0:76:c8:2f:d4:e8:43:1a:82:4a:4d:
d6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:BC:2C:CD:67:E1:93:23:7B:23:0F:CA:43:35:3E:57:3C:A7:73:EF
X509v3 Authority Key Identifier:
keyid:2D:91:AD:31:6B:C5:EE:FF:7E:DC:25:25:38:34:EB:E3:AD:56:41:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9162578/25C39ECC7BE811EBB0B1F63CC4F9AE02/LZGtMWvF7v9-3CUlODTr461WQb0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZGtMWvF7v9-3CUlODTr461WQb0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162578/25C39ECC7BE811EBB0B1F63CC4F9AE02/571A04A8FBF311EBB9894464C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.136.178.0/24
Signature Algorithm: sha256WithRSAEncryption
30:55:2f:9f:cf:a1:0c:00:3a:f6:6b:9c:3d:75:0b:cb:f1:bf:
ba:e6:68:49:f1:b0:69:49:64:19:6c:b8:cf:42:b8:b3:58:cd:
89:6a:5f:8b:f6:64:42:f4:26:77:f4:41:ac:bd:02:ff:41:d0:
0d:8f:9c:7c:9e:a5:60:fe:29:ca:d1:58:66:02:b3:26:70:58:
a7:54:6b:18:a0:d9:39:2a:f2:1e:ed:94:2e:e2:66:75:3a:e4:
26:f0:2c:f4:a2:55:99:90:93:0a:fe:15:98:96:f1:66:e7:78:
62:6b:2b:86:cc:7d:4d:5a:e0:37:3a:10:5b:65:e6:bf:27:05:
d6:38:e5:b0:3a:04:4e:96:d7:2f:89:97:c8:c8:a1:55:f5:66:
6e:e4:3c:3e:2a:a9:fb:22:12:68:59:83:23:85:33:2f:14:79:
1d:86:6c:4b:c7:59:6c:b2:85:a5:a2:8a:be:d7:a6:09:8d:38:
8f:d7:35:3f:da:4e:a3:b6:ed:6c:63:1d:e1:66:86:f8:19:6e:
ec:7d:e5:f7:52:54:e8:c3:61:02:e2:b1:af:8e:4e:c2:34:d3:
ee:17:d8:2c:61:23:38:af:31:1d:50:2c:a7:7b:c8:74:a8:d5:
f9:ac:84:ee:18:41:b3:39:71:ee:65:f9:8d:fd:33:68:cc:5f:
de:3c:87:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 18:27:14 2024 by rpki-client on console-ams.rpki-client.org