Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917BC03/AB66351EA7ED11EA91DCC566C4F9AE02/34336C38A80011EAB55F6323C4F9AE02.roa
File: 34336C38A80011EAB55F6323C4F9AE02.roa (raw, json)
Hash identifier: kvz2RpOBRbYRLqIoxkRyh6fDHBoY3it2eSKOlZotvXw=
Subject key identifier: 73:3B:87:F8:15:FD:EE:1B:1C:38:C7:6F:EA:72:E5:7C:8F:93:56:15
Certificate issuer: /CN=A917BC03/serialNumber=167D9E47FD35B229D323EECBEC0A514EEB7C92DC
Certificate serial: 0290
Authority key identifier: 16:7D:9E:47:FD:35:B2:29:D3:23:EE:CB:EC:0A:51:4E:EB:7C:92:DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fn2eR_01sinTI-7L7ApRTut8ktw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917BC03/AB66351EA7ED11EA91DCC566C4F9AE02/34336C38A80011EAB55F6323C4F9AE02.roa
Signing time: Wed 03 Mar 2021 10:26:09 +0000
ROA not before: Wed 03 Mar 2021 10:26:09 +0000
ROA not after: Sun 01 May 2022 00:00:00 +0000
asID: 135386
IP address blocks: 103.50.16.0/22 maxlen: 22
103.50.16.0/24 maxlen: 24
103.50.17.0/24 maxlen: 24
103.50.18.0/24 maxlen: 24
103.50.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 656 (0x290)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917BC03/serialNumber=167D9E47FD35B229D323EECBEC0A514EEB7C92DC
Validity
Not Before: Mar 3 10:26:09 2021 GMT
Not After : May 1 00:00:00 2022 GMT
Subject: CN=603f6441-bf9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:83:c2:91:52:54:e3:b5:04:e3:aa:d9:5c:8e:
a8:a2:17:87:56:55:f4:52:b0:31:1c:49:06:27:92:
68:a2:ce:ac:42:0a:6a:a5:99:52:4c:1d:68:5d:d1:
62:3b:ff:49:79:be:85:19:41:ff:d9:69:c1:03:77:
11:57:b6:40:57:ce:29:07:8c:90:eb:4e:5f:ce:7e:
cb:9e:1d:ce:fc:9e:bc:4f:31:8e:95:81:db:31:17:
2d:5c:35:d0:53:e2:f9:ed:00:bf:1e:f8:7d:c3:52:
78:7f:28:cc:8e:03:d4:fb:68:83:6b:e5:8c:12:79:
62:ac:44:0a:0f:da:53:6b:d6:46:1a:07:44:fb:1e:
33:37:64:fb:5f:e2:d2:50:c5:b2:67:0f:37:c8:f6:
ff:11:0c:f0:69:34:d1:54:66:e9:51:03:b2:89:b7:
ec:d2:24:a5:51:69:31:1f:f9:0d:1d:4b:c7:43:96:
f7:09:3f:27:eb:03:92:e3:16:24:6f:67:04:4a:f3:
04:0a:f2:83:e6:4a:4d:fd:4b:34:3d:38:03:61:c8:
2c:88:5c:c9:6d:a9:6b:fe:bc:3c:72:c9:28:3c:80:
85:14:79:c9:a9:77:1e:ad:7a:3e:a0:33:89:ab:43:
93:45:cc:ee:48:b5:7d:22:31:b2:5a:b4:04:c0:de:
84:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:3B:87:F8:15:FD:EE:1B:1C:38:C7:6F:EA:72:E5:7C:8F:93:56:15
X509v3 Authority Key Identifier:
keyid:16:7D:9E:47:FD:35:B2:29:D3:23:EE:CB:EC:0A:51:4E:EB:7C:92:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917BC03/AB66351EA7ED11EA91DCC566C4F9AE02/Fn2eR_01sinTI-7L7ApRTut8ktw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fn2eR_01sinTI-7L7ApRTut8ktw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BC03/AB66351EA7ED11EA91DCC566C4F9AE02/34336C38A80011EAB55F6323C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.50.16.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:89:e8:da:26:8d:5e:93:30:0e:a3:75:74:af:31:0c:f3:09:
13:a2:6a:9d:b2:95:01:52:58:6f:cf:f6:ce:2d:6a:8c:50:17:
0b:6f:01:4d:29:75:e7:df:ce:03:c8:2f:f7:f2:27:e8:73:d1:
14:54:1a:23:ba:d2:12:5a:04:ea:9e:a1:86:cb:28:31:06:de:
64:3b:5a:9a:2a:e9:94:d0:ee:31:dc:ee:0c:bc:84:88:5f:2e:
d7:db:e6:bf:a3:83:f0:82:c6:01:73:35:5c:4a:73:57:91:03:
48:d5:de:76:3a:3d:e4:ed:1c:07:9e:9f:aa:3a:eb:6a:1c:6d:
57:d4:2c:62:ff:6c:66:a6:9d:40:a2:43:61:1c:a2:d3:05:e4:
c5:3a:12:ac:90:90:04:f6:89:53:1f:60:6f:37:82:c8:59:61:
5d:2c:46:d0:4b:28:cb:d8:67:2c:34:20:60:69:d2:b9:2d:9b:
a5:da:e8:d7:9e:58:ae:00:d0:f5:58:a4:81:8c:d9:6f:f4:65:
25:28:a0:3d:53:ac:57:20:da:b6:6d:a8:46:ba:9a:c7:b5:23:
a3:5a:2f:93:06:e6:1f:a3:30:dc:f3:b9:bb:0d:96:75:a8:b6:
6e:fe:1a:6d:d8:29:b6:a0:c6:50:2f:f5:69:cb:ec:c3:0b:ab:
be:5f:7a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:22 2024 by rpki-client on console-ams.rpki-client.org