Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178CC3/E300BC7E7C6411EA951A404DC4F9AE02/4F56EDE87C6611EAA47D984FC4F9AE02.roa
File: 4F56EDE87C6611EAA47D984FC4F9AE02.roa (raw, json)
Hash identifier: +GvNx/pOvd79kjn9iOgk9kCEOARVNktSkKWmETPTgfc=
Subject key identifier: 1A:F2:B0:D7:BC:99:59:D6:00:94:41:03:33:F6:31:29:05:5A:0E:50
Certificate issuer: /CN=A9178CC3/serialNumber=0EBCB71A5C37764D7B7C2520C3976D82F026722B
Certificate serial: 0851
Authority key identifier: 0E:BC:B7:1A:5C:37:76:4D:7B:7C:25:20:C3:97:6D:82:F0:26:72:2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dry3Glw3dk17fCUgw5dtgvAmcis.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178CC3/E300BC7E7C6411EA951A404DC4F9AE02/4F56EDE87C6611EAA47D984FC4F9AE02.roa
Signing time: Fri 24 Mar 2023 00:08:53 +0000
ROA not before: Fri 24 Mar 2023 00:08:53 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 137549
IP address blocks: 43.230.176.0/22 maxlen: 24
103.80.120.0/22 maxlen: 22
103.100.28.0/22 maxlen: 24
103.226.104.0/22 maxlen: 24
116.206.184.0/22 maxlen: 24
202.40.0.0/22 maxlen: 24
2401:b740::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2129 (0x851)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178CC3/serialNumber=0EBCB71A5C37764D7B7C2520C3976D82F026722B
Validity
Not Before: Mar 24 00:08:53 2023 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=641cea14-ec66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:22:5f:74:bb:06:f5:1f:1b:6f:d9:ee:72:d4:
ae:6d:e5:97:99:cd:0f:af:45:1d:83:f3:37:74:7f:
40:19:7f:7f:94:6e:0b:75:19:6f:95:c7:60:d2:3c:
0d:8f:4c:39:19:cd:e8:4a:83:bd:b6:aa:38:c8:fc:
a2:33:43:f1:65:6d:16:06:c7:ac:b0:eb:bf:61:1e:
da:7a:b0:1d:39:22:48:28:7b:ff:0d:9f:7b:4c:85:
2c:4e:b9:75:d1:04:1d:e0:e7:6f:9e:86:6f:8d:a9:
0b:78:19:f8:ba:17:3d:61:71:d9:45:41:8c:84:6b:
f4:16:dd:44:2a:cf:8f:3e:51:4c:f5:e9:e0:a5:9b:
8a:73:06:9a:f1:ca:53:4d:12:eb:c9:c0:15:16:fe:
e3:fe:a7:94:85:4c:50:77:6f:a1:9f:2c:fe:f2:98:
64:46:ee:86:b9:37:0e:56:50:26:3d:7f:37:a2:ab:
62:bf:f4:70:b9:98:b0:5e:6b:2f:8f:b1:15:00:fb:
51:c9:df:c1:f7:8c:7c:bb:83:4a:60:05:d3:68:87:
c8:36:a7:80:1f:c9:b0:f6:a6:9f:9c:89:15:2f:f5:
36:63:24:76:a8:0e:32:d9:2d:8f:b1:01:a2:c7:1a:
af:e0:43:63:9b:50:0c:31:31:de:c1:24:88:38:ae:
48:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F2:B0:D7:BC:99:59:D6:00:94:41:03:33:F6:31:29:05:5A:0E:50
X509v3 Authority Key Identifier:
keyid:0E:BC:B7:1A:5C:37:76:4D:7B:7C:25:20:C3:97:6D:82:F0:26:72:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178CC3/E300BC7E7C6411EA951A404DC4F9AE02/Dry3Glw3dk17fCUgw5dtgvAmcis.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dry3Glw3dk17fCUgw5dtgvAmcis.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178CC3/E300BC7E7C6411EA951A404DC4F9AE02/4F56EDE87C6611EAA47D984FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.230.176.0/22
103.80.120.0/22
103.100.28.0/22
103.226.104.0/22
116.206.184.0/22
202.40.0.0/22
IPv6:
2401:b740::/32
Signature Algorithm: sha256WithRSAEncryption
3c:07:07:68:76:64:d4:ed:14:c6:03:d9:7c:11:ab:66:f8:07:
2f:c7:86:87:92:7f:11:48:8b:e1:73:d5:93:91:da:3c:75:e6:
1b:d9:98:5c:2a:5f:45:f7:52:d5:bb:5c:91:5a:63:97:bb:6a:
c6:99:c7:3c:6d:65:3d:94:c4:ad:f8:ac:bb:f8:6e:bd:00:42:
5b:e0:24:e7:f0:5f:46:be:5c:a6:ec:c8:e2:5c:c3:5e:7c:82:
bf:f5:4e:3b:a7:51:f1:de:e8:18:01:fc:b8:f7:b0:eb:0f:49:
eb:e1:04:2e:5a:01:f8:3b:0d:7d:16:05:09:84:dc:8c:97:8b:
51:7a:20:d8:01:b0:b1:51:9f:ed:e5:6d:1b:b8:7c:bc:e4:a4:
a6:1d:cb:e6:5e:85:bf:92:a5:2e:07:8f:44:ed:17:31:05:10:
e2:b3:99:97:df:7c:1e:b0:70:58:cf:6c:57:8f:41:30:df:c7:
0a:a4:81:a7:35:e4:a3:bf:34:71:84:7d:70:c9:38:3d:2d:72:
5c:89:e5:14:b9:65:d9:5f:64:1f:02:4c:d8:10:63:fc:98:c9:
05:db:d7:29:3c:fc:b5:46:cc:82:61:63:87:02:53:84:4e:55:
f2:3c:7a:d2:8f:d0:c9:f3:02:11:9b:b0:a6:5a:43:41:db:41:
d2:c3:fb:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:22 2024 by rpki-client on console-ams.rpki-client.org