Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9177953/0563FDB4703C11EBBF742480C4F9AE02/5E4598E2703D11EB8878EF80C4F9AE02.roa
File: 5E4598E2703D11EB8878EF80C4F9AE02.roa (raw, json)
Hash identifier: rfs3PuTPIvk/xupaa4J8b+z4CzSwihyieQP2rLWNGmA=
Subject key identifier: 80:EF:D4:2E:A1:28:B5:1F:1D:28:5F:1F:7E:B2:A0:06:72:0B:52:D5
Certificate issuer: /CN=A9177953/serialNumber=E79D8941CB579F76ACE2BA971358B72FF7BE9602
Certificate serial: 0513
Authority key identifier: E7:9D:89:41:CB:57:9F:76:AC:E2:BA:97:13:58:B7:2F:F7:BE:96:02
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/552JQctXn3as4rqXE1i3L_e-lgI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9177953/0563FDB4703C11EBBF742480C4F9AE02/5E4598E2703D11EB8878EF80C4F9AE02.roa
Signing time: Mon 15 May 2023 01:48:24 +0000
ROA not before: Mon 15 May 2023 01:48:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 136445
IP address blocks: 103.112.168.0/23 maxlen: 23
103.112.168.0/24 maxlen: 24
103.112.169.0/24 maxlen: 24
103.112.170.0/24 maxlen: 24
103.112.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1299 (0x513)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9177953/serialNumber=E79D8941CB579F76ACE2BA971358B72FF7BE9602
Validity
Not Before: May 15 01:48:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64618f67-1bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:40:43:b9:2e:ee:21:64:00:50:71:27:90:8a:
3f:d8:13:30:12:af:ee:44:0c:d6:87:b5:cb:d7:53:
41:99:51:ee:82:cb:b2:0a:e9:b8:79:09:e1:1c:40:
fd:0c:d7:15:e2:50:9d:d5:e0:2f:0f:9c:90:0a:56:
8c:6e:c2:34:b8:51:e9:29:5d:e1:bd:62:06:4b:98:
50:8b:1b:69:59:01:42:cf:0e:c7:28:91:f4:db:27:
0c:1a:d5:0d:d5:0c:9f:f8:b8:44:59:f2:b4:0f:58:
01:b1:a8:1d:0f:3c:65:fe:d8:e3:95:11:67:e1:61:
f3:38:9c:0c:ba:94:43:9d:14:af:1a:47:b2:c2:e5:
81:5f:c3:54:7a:42:df:24:62:55:ca:b6:30:71:cb:
41:67:12:c3:70:e7:87:0a:64:c1:be:8c:3d:f6:66:
97:04:ff:87:45:36:40:b4:57:ef:95:ab:be:19:78:
da:d4:55:9b:90:ee:13:79:f7:88:50:f0:8a:50:4a:
d7:bc:22:0e:54:02:fe:13:e3:d1:3c:2c:f8:6f:01:
8f:32:ed:be:f2:b9:f8:d7:de:fd:f1:14:57:ae:22:
0c:cb:45:58:4d:42:36:cd:75:65:49:ac:8a:97:66:
57:8d:f3:1c:c1:2f:65:f6:cc:33:e7:c2:a2:c4:bc:
d4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:EF:D4:2E:A1:28:B5:1F:1D:28:5F:1F:7E:B2:A0:06:72:0B:52:D5
X509v3 Authority Key Identifier:
keyid:E7:9D:89:41:CB:57:9F:76:AC:E2:BA:97:13:58:B7:2F:F7:BE:96:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9177953/0563FDB4703C11EBBF742480C4F9AE02/552JQctXn3as4rqXE1i3L_e-lgI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/552JQctXn3as4rqXE1i3L_e-lgI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177953/0563FDB4703C11EBBF742480C4F9AE02/5E4598E2703D11EB8878EF80C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.112.168.0/22
Signature Algorithm: sha256WithRSAEncryption
97:07:7f:8a:53:8c:66:6d:a0:34:fe:82:a5:b0:ff:7e:c3:d6:
08:f1:c6:ba:00:90:fa:a0:4d:ac:87:8a:88:3e:7a:dd:58:7b:
30:1e:27:29:c0:ac:b0:ba:e6:3c:12:86:0e:53:0d:01:c6:98:
81:77:19:3a:2d:7d:cb:e5:5d:dc:de:70:d7:07:5a:19:93:ca:
e5:38:0b:a5:2c:76:ad:78:05:f9:d4:53:c5:de:ac:a9:eb:58:
15:74:98:1a:47:0b:99:49:cc:fe:a0:2c:16:3e:e2:13:d9:60:
b5:8d:96:52:c6:0f:35:a7:81:65:f0:6f:a9:89:ce:28:bb:10:
f2:29:85:c9:dc:ad:00:a9:29:28:ac:f5:7a:ce:92:eb:83:7e:
f7:98:1e:6f:90:6a:bf:df:0b:45:bf:81:12:45:32:98:f4:0b:
50:13:72:cb:18:a0:de:c4:d7:6c:a5:2f:9f:d0:63:96:6e:b4:
91:4c:dc:d5:c2:83:2a:d9:a7:cf:5f:62:d7:01:57:fc:50:27:
7a:36:b5:ce:51:bc:d3:80:7c:77:1f:50:cb:52:eb:c0:d2:69:
a5:d1:92:31:e0:04:fd:a5:29:ea:3d:23:4d:c8:c4:a2:f8:6a:
8c:b9:e1:29:a0:70:1e:7b:b4:96:62:92:d1:c4:3e:49:32:78:
b9:10:ef:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:22 2024 by rpki-client on console-ams.rpki-client.org