Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917473D/594D95DC9EDA11E99674B877C4F9AE02/5743707C7AF711EB8BE37B3EC4F9AE02.roa
File: 5743707C7AF711EB8BE37B3EC4F9AE02.roa (raw, json)
Hash identifier: M0ulkzqYKboD3zhFfOXcNR5bKRe+ao6Xj6dANuPxu2M=
Subject key identifier: 1F:CD:5B:49:B4:3A:CE:D4:CF:BF:30:87:94:20:78:B6:23:C1:44:0C
Certificate issuer: /CN=A917473D/serialNumber=BFC010E47C714F2612A015F2820CDE48307FBCD8
Certificate serial: 0C6F
Authority key identifier: BF:C0:10:E4:7C:71:4F:26:12:A0:15:F2:82:0C:DE:48:30:7F:BC:D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v8AQ5HxxTyYSoBXyggzeSDB_vNg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917473D/594D95DC9EDA11E99674B877C4F9AE02/5743707C7AF711EB8BE37B3EC4F9AE02.roa
Signing time: Thu 10 Nov 2022 19:05:49 +0000
ROA not before: Thu 10 Nov 2022 19:05:49 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 24433
IP address blocks: 203.15.122.0/24 maxlen: 24
203.27.220.0/24 maxlen: 24
203.27.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3183 (0xc6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917473D/serialNumber=BFC010E47C714F2612A015F2820CDE48307FBCD8
Validity
Not Before: Nov 10 19:05:49 2022 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=636d4b8d-57c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1e:bb:f5:b4:27:1d:8f:e9:3e:21:3a:b1:2f:
f2:3e:b2:c0:19:33:19:62:84:44:8d:aa:90:91:e4:
96:b7:b3:e2:e4:40:1e:e0:58:05:a1:50:95:6d:10:
fc:fc:aa:1b:61:e3:95:df:0a:08:1f:64:3c:ad:ba:
03:67:1f:4b:2e:fb:9d:38:0b:5f:ac:a0:6c:22:38:
03:5a:d2:91:4b:dd:df:8c:a9:07:83:4d:80:ab:10:
23:4d:ca:38:e9:cd:bd:00:2d:26:00:bb:d8:47:95:
9e:bc:90:ab:ee:7d:0b:ae:89:39:50:93:cc:71:65:
e9:42:d2:de:3f:4c:17:d9:1b:e5:c4:e9:76:d3:e1:
8a:ac:d7:83:d1:b0:57:51:b3:37:c5:7f:fd:46:46:
75:e3:c8:53:64:cc:67:5c:40:80:b5:16:9b:54:09:
4c:50:96:a4:f3:a5:ee:59:e8:84:13:ab:ba:6a:79:
f3:40:b4:65:fa:dd:f0:5c:bb:ba:76:3e:15:ba:ab:
62:1b:a9:bc:d5:d4:dc:4c:6a:bb:35:9d:e0:c8:90:
de:c0:7c:12:e2:21:c8:c7:88:7f:5f:d8:1b:cc:84:
59:ce:55:8a:ae:06:1b:6a:fd:f0:96:ce:d3:4c:21:
6b:5c:80:92:68:94:b5:3a:37:95:75:b1:94:87:4a:
34:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:CD:5B:49:B4:3A:CE:D4:CF:BF:30:87:94:20:78:B6:23:C1:44:0C
X509v3 Authority Key Identifier:
keyid:BF:C0:10:E4:7C:71:4F:26:12:A0:15:F2:82:0C:DE:48:30:7F:BC:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917473D/594D95DC9EDA11E99674B877C4F9AE02/v8AQ5HxxTyYSoBXyggzeSDB_vNg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v8AQ5HxxTyYSoBXyggzeSDB_vNg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917473D/594D95DC9EDA11E99674B877C4F9AE02/5743707C7AF711EB8BE37B3EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.15.122.0/24
203.27.220.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:4e:b2:43:b8:8b:72:e8:58:91:e2:bd:5c:de:80:91:d8:42:
c9:7b:85:73:0b:40:fa:df:42:02:c7:04:a8:43:10:da:64:a4:
a8:f3:c3:f2:90:a2:9c:0b:1b:37:dd:85:16:a2:bc:d6:d7:e1:
bf:94:6d:42:d9:ca:af:81:63:7e:9f:01:10:40:70:24:d8:a4:
f8:2a:4d:d6:a3:73:df:0f:33:2d:83:c2:2a:2c:b9:52:b4:83:
2c:d2:14:f2:a5:ae:7d:1a:c9:5e:e9:12:3c:70:a9:c2:da:5a:
db:43:e0:a0:dc:3e:d3:c4:46:75:3e:a1:73:b1:22:2e:9e:8b:
e9:8b:22:70:55:c3:27:44:9f:e3:71:a8:2c:b3:45:a3:fa:d3:
2d:b1:e4:32:8c:1a:c0:d5:05:73:00:a2:79:af:30:7f:5f:d8:
16:04:54:81:5e:bd:9b:38:27:fc:cb:da:a2:2f:7b:19:00:1f:
8c:1f:4c:90:5c:fb:15:5f:80:79:4f:5a:24:2e:78:59:af:07:
e8:c3:00:f4:01:a2:c0:2c:ef:f3:a1:1c:a3:e2:d8:bf:99:f3:
e6:2a:12:a4:d1:2d:cf:71:7a:4d:7d:08:9f:19:ae:d1:73:b2:
2f:66:c1:4c:eb:46:01:7a:18:6d:c6:7e:c3:fc:2b:df:f8:50:
2f:b6:70:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 17:28:21 2023 by rpki-client on console-fra.rpki-client.org