Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B55D/A250912C0DC311EB9D943816C4F9AE02/87A4655A0DC411EB9DBC9E16C4F9AE02.roa
File: 87A4655A0DC411EB9DBC9E16C4F9AE02.roa (raw, json)
Hash identifier: SgZfPMXv96kKpRMB0uVO+6ORyQYwuAc5tSUepDpgD40=
Subject key identifier: 0F:89:CA:E0:77:4A:9A:ED:C1:99:81:B2:A2:DE:52:0E:A2:03:14:24
Certificate issuer: /CN=A917B55D/serialNumber=212DC99FF5AE839DF3739D0DCBF224A7B3460ABF
Certificate serial: 029E
Authority key identifier: 21:2D:C9:9F:F5:AE:83:9D:F3:73:9D:0D:CB:F2:24:A7:B3:46:0A:BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IS3Jn_Wug53zc50Ny_Ikp7NGCr8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B55D/A250912C0DC311EB9D943816C4F9AE02/87A4655A0DC411EB9DBC9E16C4F9AE02.roa
Signing time: Tue 14 Sep 2021 12:49:46 +0000
ROA not before: Tue 14 Sep 2021 12:49:46 +0000
ROA not after: Thu 01 Dec 2022 00:00:00 +0000
asID: 132825
IP address blocks: 103.250.4.0/24 maxlen: 24
103.250.5.0/24 maxlen: 24
103.250.6.0/24 maxlen: 24
103.250.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 670 (0x29e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B55D/serialNumber=212DC99FF5AE839DF3739D0DCBF224A7B3460ABF
Validity
Not Before: Sep 14 12:49:46 2021 GMT
Not After : Dec 1 00:00:00 2022 GMT
Subject: CN=61409a6a-8eb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a2:b5:4a:91:d5:4f:42:20:53:2b:4b:f0:30:
95:62:90:bc:2b:3d:9c:15:9c:17:d8:e1:0d:3e:04:
55:12:fd:49:19:aa:b3:3d:6c:79:ad:34:e1:ec:4f:
7e:df:66:03:10:86:b6:8e:64:dc:cc:32:8c:3e:8d:
cf:58:d2:9d:a7:81:61:73:24:58:74:27:31:b9:f0:
67:60:ed:8e:c5:c2:d6:d9:65:8b:5a:3d:98:49:de:
47:10:34:8b:c4:e7:de:51:a1:da:b7:b3:7c:5c:d2:
c9:93:74:f2:b8:d1:73:ff:e0:fb:53:d6:6c:0d:a5:
22:b2:53:4a:4e:99:e9:af:7f:99:02:c8:50:2f:a5:
31:9e:6f:7a:14:35:63:ce:58:56:91:a4:e4:51:da:
92:d6:83:9c:ad:61:f2:f3:7b:27:a7:51:e4:7b:03:
89:0a:4d:66:43:52:0a:4e:b3:ea:cb:74:77:db:b3:
eb:ed:ab:bd:ad:ea:79:97:f1:e6:2d:26:be:6c:e5:
67:53:57:ce:58:2e:12:77:f5:c0:73:c6:7a:32:69:
12:0e:83:97:ce:7f:e9:a4:ef:5d:af:98:f1:db:ed:
de:6c:5e:45:e4:11:6a:ed:4f:9f:75:a6:1b:15:ad:
a8:3c:d1:e2:2e:05:1c:01:83:6a:8a:a9:0a:b9:79:
91:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:89:CA:E0:77:4A:9A:ED:C1:99:81:B2:A2:DE:52:0E:A2:03:14:24
X509v3 Authority Key Identifier:
keyid:21:2D:C9:9F:F5:AE:83:9D:F3:73:9D:0D:CB:F2:24:A7:B3:46:0A:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B55D/A250912C0DC311EB9D943816C4F9AE02/IS3Jn_Wug53zc50Ny_Ikp7NGCr8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IS3Jn_Wug53zc50Ny_Ikp7NGCr8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B55D/A250912C0DC311EB9D943816C4F9AE02/87A4655A0DC411EB9DBC9E16C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.250.4.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:9f:6b:00:c7:95:ed:a6:62:1a:12:1f:56:39:31:bf:e9:72:
49:9b:cf:23:26:22:45:07:41:9f:1e:d0:0a:b5:18:c3:a8:dc:
2d:b5:0e:fc:48:83:94:e3:11:73:70:55:c5:d0:bd:c2:33:29:
fe:96:ff:cf:08:12:f9:73:4b:8d:63:0e:32:f0:4a:e1:28:6b:
16:38:e1:83:58:9b:68:e4:a3:7a:46:71:29:3d:b9:a2:fd:9c:
a5:27:f8:63:cb:5a:c7:12:fe:52:90:0d:fe:5f:b1:15:f3:93:
1a:9f:d7:ce:35:31:3c:b4:f5:29:10:04:b9:58:79:51:49:11:
c3:8f:a5:0d:47:bf:4f:41:74:f0:d7:62:2f:6a:80:b6:82:2f:
95:c2:6e:39:a8:93:bf:b9:83:6b:b6:6b:08:0c:58:e5:b3:65:
58:15:58:90:e8:14:83:ca:4a:ef:a1:3e:70:68:10:7b:17:9b:
ae:bb:35:ec:1f:45:0b:7e:32:a0:00:42:64:d9:30:da:54:44:
a1:ef:b4:1c:7c:3f:6a:8c:6b:ee:14:5e:e4:49:74:9e:47:1e:
bc:ff:70:1d:8b:6d:08:44:4b:c7:7c:3e:67:ab:11:a5:dc:cf:
87:c4:72:c6:9a:8f:ab:3e:9a:3f:6c:9c:80:c2:d9:b7:95:39:
77:e2:fc:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:22 2024 by rpki-client on console-ams.rpki-client.org