Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917BC84/903C80A649B711EB8372D95BC4F9AE02/199F14EC9AB311ECAB14320DC4F9AE02.roa
File: 199F14EC9AB311ECAB14320DC4F9AE02.roa (raw, json)
Hash identifier: DdhGbkhZEJGuTqBw13gRou8u7lTDosct9r9kmkA0ouk=
Subject key identifier: 4D:58:9A:8C:67:51:D2:81:0F:24:26:E9:C6:B6:21:79:57:1B:A2:02
Certificate issuer: /CN=A917BC84/serialNumber=81B6DD1FB8AEBAD864D02ADC40FF270C78B4A59F
Certificate serial: 0355
Authority key identifier: 81:B6:DD:1F:B8:AE:BA:D8:64:D0:2A:DC:40:FF:27:0C:78:B4:A5:9F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gbbdH7iuuthk0CrcQP8nDHi0pZ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917BC84/903C80A649B711EB8372D95BC4F9AE02/199F14EC9AB311ECAB14320DC4F9AE02.roa
Signing time: Thu 03 Mar 2022 05:51:56 +0000
ROA not before: Thu 03 Mar 2022 05:51:56 +0000
ROA not after: Thu 02 Mar 2023 00:00:00 +0000
asID: 54994
IP address blocks: 103.146.6.0/23 maxlen: 23
2405:8f40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 853 (0x355)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917BC84/serialNumber=81B6DD1FB8AEBAD864D02ADC40FF270C78B4A59F
Validity
Not Before: Mar 3 05:51:56 2022 GMT
Not After : Mar 2 00:00:00 2023 GMT
Subject: CN=6220577c-9281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e9:39:a3:f9:41:09:dd:d4:b8:c9:b2:8a:55:
3f:86:de:74:47:dd:92:0e:91:4f:e2:c3:f5:90:42:
b6:bb:c9:15:1f:d6:1d:24:43:d9:ac:ed:13:2c:37:
91:42:b9:16:81:5a:4d:9d:25:a7:6a:e4:6f:ee:d8:
fd:52:bd:5e:a1:cc:b5:1d:8b:3b:82:9e:31:46:1c:
6c:c9:c2:7a:6d:b8:45:42:ab:17:51:ef:41:6c:97:
3a:56:0c:6a:9c:84:ea:69:dc:9c:97:ed:b3:f5:2f:
7a:d8:8b:2f:16:09:7a:67:fb:fb:6e:23:fb:a3:67:
b9:a1:a2:04:98:cf:e2:68:d1:3b:28:94:ee:6e:08:
d6:48:70:cb:58:f4:f0:13:73:fc:c4:fa:3a:bf:92:
3a:f9:63:cd:c3:e8:ef:54:4f:ee:70:a4:fd:a1:34:
03:9e:00:34:1b:98:c4:97:7a:90:54:87:8e:81:be:
47:59:68:d6:c4:2a:b3:c6:74:c5:8c:cb:ad:a1:e0:
ca:6e:6f:9f:53:d4:10:72:98:60:52:15:81:e1:d1:
3a:2d:9b:77:01:0e:ba:13:5a:dd:53:70:46:23:47:
97:e5:7e:eb:ea:d0:c9:96:1e:55:ce:70:8a:44:68:
71:c5:a1:32:a6:0b:db:98:e2:80:cc:2b:84:f2:ca:
e4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:58:9A:8C:67:51:D2:81:0F:24:26:E9:C6:B6:21:79:57:1B:A2:02
X509v3 Authority Key Identifier:
keyid:81:B6:DD:1F:B8:AE:BA:D8:64:D0:2A:DC:40:FF:27:0C:78:B4:A5:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917BC84/903C80A649B711EB8372D95BC4F9AE02/gbbdH7iuuthk0CrcQP8nDHi0pZ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gbbdH7iuuthk0CrcQP8nDHi0pZ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BC84/903C80A649B711EB8372D95BC4F9AE02/199F14EC9AB311ECAB14320DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.146.6.0/23
IPv6:
2405:8f40::/32
Signature Algorithm: sha256WithRSAEncryption
2d:ae:86:c9:0f:6d:72:d8:da:34:71:f7:5b:7f:b2:a9:8b:9c:
9e:be:e1:de:cf:2e:3d:bf:6e:f7:c7:86:85:7b:d1:bb:99:9b:
f6:f4:34:28:d4:d4:7f:7a:7d:cc:ed:d3:f9:02:4c:a9:48:33:
c7:bd:ac:be:8d:3e:04:82:5b:4f:49:e5:54:54:65:34:44:57:
d2:db:36:8b:aa:f3:7a:f3:1b:31:22:1d:ca:9f:51:3f:27:2c:
cd:ba:c0:bd:3d:ac:d9:dd:cd:64:37:dc:1b:61:0f:c3:22:b4:
a2:0e:ea:eb:ee:7c:c4:e0:9e:98:be:16:cd:82:d6:c4:00:ba:
02:20:34:32:1f:4a:66:9a:d0:94:bb:00:44:ca:08:e5:3f:a8:
9b:26:1b:d1:e8:1a:27:a4:e3:48:e1:f4:ae:e7:af:67:ba:a6:
4d:fb:7c:16:dc:3b:9a:9a:6b:c7:9a:38:6c:97:8d:71:45:61:
b0:85:74:82:4e:e3:6c:6f:c0:c0:5c:8b:84:4a:7c:51:b6:2a:
10:73:79:cf:9f:5e:8c:8d:d8:fd:b7:35:e0:97:28:56:18:85:
83:31:44:65:b9:48:14:55:3f:b4:04:29:82:2c:5a:1b:e0:02:
03:6e:6f:44:e7:ac:a7:8b:ab:24:74:eb:e9:1e:04:ba:2b:64:
71:76:05:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:12 2024 by rpki-client on console-fra.rpki-client.org