Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9162578/25C39ECC7BE811EBB0B1F63CC4F9AE02/B205FB4E98D211EB86B24441C4F9AE02.roa
File: B205FB4E98D211EB86B24441C4F9AE02.roa (raw, json)
Hash identifier: s4yYKdbzD4Qz/eCvBbl+89u0HjoJcUQCLbSASXxUJaE=
Subject key identifier: FF:F7:39:20:1B:05:6B:BD:59:B2:A8:04:6C:A9:A2:53:AF:48:FC:DF
Certificate issuer: /CN=A9162578/serialNumber=2D91AD316BC5EEFF7EDC25253834EBE3AD5641BD
Certificate serial: 04FB
Authority key identifier: 2D:91:AD:31:6B:C5:EE:FF:7E:DC:25:25:38:34:EB:E3:AD:56:41:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZGtMWvF7v9-3CUlODTr461WQb0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9162578/25C39ECC7BE811EBB0B1F63CC4F9AE02/B205FB4E98D211EB86B24441C4F9AE02.roa
Signing time: Thu 13 Apr 2023 01:41:57 +0000
ROA not before: Thu 13 Apr 2023 01:41:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 135391
IP address blocks: 103.136.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1275 (0x4fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162578/serialNumber=2D91AD316BC5EEFF7EDC25253834EBE3AD5641BD
Validity
Not Before: Apr 13 01:41:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64375de5-5fc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c5:67:a8:97:df:a4:df:cb:cd:28:bc:3e:e0:
9a:fd:74:8f:c4:b4:34:27:73:af:c6:ce:0b:12:4e:
49:37:53:bc:07:78:a8:87:ed:50:bd:59:0a:bd:87:
d5:64:1b:62:98:cb:2c:44:2e:e1:f2:3c:2a:92:8f:
40:9a:d6:cd:04:41:0f:db:e9:b1:8a:6f:01:48:76:
6a:27:c6:a3:99:4a:33:bf:71:59:6a:b3:80:5a:31:
29:db:1d:f9:9b:05:de:a1:de:a2:62:db:f2:75:a4:
e6:a8:96:a6:88:78:87:74:16:dd:af:37:27:f6:73:
a1:8e:bd:c1:c6:0d:b1:c3:05:00:ff:76:9c:8a:a3:
d0:8f:24:c6:5c:32:26:3c:9f:59:a5:c4:e0:0a:50:
cc:32:a4:49:5d:e2:cc:ae:3a:83:7f:00:74:db:98:
88:28:90:f0:9c:b3:a1:5c:47:1c:35:ab:6e:07:29:
a7:7e:45:33:3b:f3:bd:aa:5a:df:b8:02:3e:05:6e:
27:7b:42:78:b7:92:90:e9:5c:b4:43:de:6e:b2:5d:
b6:ab:9f:82:ae:be:26:a6:51:26:bc:5a:e3:d0:f6:
c8:d0:9e:3a:5e:5b:df:c0:2e:24:e5:ed:a1:db:ab:
e9:e9:5d:3b:bc:ff:c2:4e:41:79:16:3c:e8:43:2f:
5b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F7:39:20:1B:05:6B:BD:59:B2:A8:04:6C:A9:A2:53:AF:48:FC:DF
X509v3 Authority Key Identifier:
keyid:2D:91:AD:31:6B:C5:EE:FF:7E:DC:25:25:38:34:EB:E3:AD:56:41:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9162578/25C39ECC7BE811EBB0B1F63CC4F9AE02/LZGtMWvF7v9-3CUlODTr461WQb0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZGtMWvF7v9-3CUlODTr461WQb0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162578/25C39ECC7BE811EBB0B1F63CC4F9AE02/B205FB4E98D211EB86B24441C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.136.177.0/24
Signature Algorithm: sha256WithRSAEncryption
70:67:51:05:29:90:1d:ef:a4:5e:6b:e8:df:65:51:b0:bc:e4:
4b:0d:4a:2d:43:63:c8:ea:9e:6a:9d:ac:5e:be:34:3f:90:37:
21:b6:7a:c8:f4:39:c4:f9:d2:59:93:86:76:45:b6:48:ae:dc:
0e:43:2f:43:c5:f1:c8:36:5c:c6:06:84:21:3b:9c:ae:58:c3:
38:85:b4:ec:8b:14:a2:7f:d3:f0:24:16:d8:3d:05:3f:78:d8:
47:58:99:9d:0d:2b:64:bc:11:7c:29:c4:ad:2b:da:d9:c1:ee:
76:05:12:5d:db:54:e4:97:87:a3:a8:6c:48:26:51:02:a5:4b:
d2:09:d3:35:11:23:eb:46:90:f3:b4:1a:87:34:06:06:90:41:
6f:d2:ab:48:f4:1d:76:e9:8b:84:d7:3d:45:94:7d:cc:24:b2:
70:67:93:59:11:66:57:5c:2b:fa:2a:eb:75:73:b4:fd:90:b8:
22:e3:f6:50:10:6e:ef:19:73:9f:8f:3d:ff:57:40:32:22:5f:
1d:2a:c0:21:66:b7:9c:23:23:60:f5:70:82:c7:17:47:5c:0e:
19:92:ce:c6:2a:6d:b4:94:83:5e:09:ea:a6:90:a0:ce:4a:a6:
34:5f:42:c1:4c:b2:b8:cc:2e:35:4b:ce:33:44:7c:fd:86:32:
4d:c1:c6:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:09 2024 by rpki-client on console-fra.rpki-client.org