Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9181827/2EDDCAE279D511EBA8C6EA4EC4F9AE02/621A8D087A3B11EB9815F812C4F9AE02.roa
File: 621A8D087A3B11EB9815F812C4F9AE02.roa (raw, json)
Hash identifier: veozGgMqXzkv6hZ+d8Siyvujpd8hkPJ+cddUxXRqkNA=
Subject key identifier: 23:07:E9:CE:BA:8C:EC:4C:71:D8:A0:19:74:B9:6E:54:48:4F:96:33
Certificate issuer: /CN=A9181827/serialNumber=86AA2F1213141C3BC085D849203811859B7194F4
Certificate serial: 04E8
Authority key identifier: 86:AA:2F:12:13:14:1C:3B:C0:85:D8:49:20:38:11:85:9B:71:94:F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hqovEhMUHDvAhdhJIDgRhZtxlPQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9181827/2EDDCAE279D511EBA8C6EA4EC4F9AE02/621A8D087A3B11EB9815F812C4F9AE02.roa
Signing time: Fri 03 Mar 2023 01:32:26 +0000
ROA not before: Fri 03 Mar 2023 01:32:26 +0000
ROA not after: Wed 29 May 2024 00:00:00 +0000
asID: 137443
IP address blocks: 103.110.80.0/24 maxlen: 24
103.110.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1256 (0x4e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9181827/serialNumber=86AA2F1213141C3BC085D849203811859B7194F4
Validity
Not Before: Mar 3 01:32:26 2023 GMT
Not After : May 29 00:00:00 2024 GMT
Subject: CN=64014e2a-2232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2b:47:11:bc:40:09:61:44:41:df:2a:b1:08:
8a:f9:50:4d:13:d9:10:67:ac:93:35:de:79:e7:06:
79:4d:07:0e:eb:0d:ae:51:2b:91:df:b6:a2:cf:eb:
e2:75:ca:0f:44:3c:79:e0:2c:dd:71:1f:f2:39:00:
c6:e6:a3:a7:ab:6c:0a:90:3b:01:a8:8c:72:cc:25:
78:b8:cc:ab:57:32:bf:31:dd:1d:c9:c3:ba:ee:7c:
d3:fb:88:73:68:fc:5d:ef:4d:77:93:41:85:2e:23:
37:62:30:e9:9d:99:0a:2a:eb:c1:07:2a:0d:be:fc:
ef:d0:48:05:b9:4a:62:a8:54:a8:1a:2a:dc:46:bb:
30:e5:ee:b6:df:c7:e3:a5:0b:89:06:f7:0a:d4:3b:
2d:4a:9b:23:c5:3a:bf:e6:ae:68:a6:55:7b:1c:fa:
36:95:b8:bd:48:4d:bf:84:55:81:2c:6b:28:b0:da:
c6:04:45:07:11:35:f0:d3:b8:ac:2f:68:52:e5:f4:
40:b5:c1:5e:bf:99:43:83:8b:66:94:9f:c9:f8:2a:
50:ab:28:f8:83:48:c3:c7:94:61:be:46:e4:20:de:
ef:8b:2d:23:37:d7:d3:49:4e:7f:ac:24:f7:86:cf:
93:30:20:75:b1:df:6b:5e:aa:56:88:cb:41:77:e9:
bb:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:07:E9:CE:BA:8C:EC:4C:71:D8:A0:19:74:B9:6E:54:48:4F:96:33
X509v3 Authority Key Identifier:
keyid:86:AA:2F:12:13:14:1C:3B:C0:85:D8:49:20:38:11:85:9B:71:94:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9181827/2EDDCAE279D511EBA8C6EA4EC4F9AE02/hqovEhMUHDvAhdhJIDgRhZtxlPQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hqovEhMUHDvAhdhJIDgRhZtxlPQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181827/2EDDCAE279D511EBA8C6EA4EC4F9AE02/621A8D087A3B11EB9815F812C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.110.80.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:01:66:25:6a:dc:d3:7a:f4:f8:4f:64:d5:cb:2d:8d:70:c8:
74:47:7d:b1:30:a1:4b:12:cd:7b:b9:56:77:f2:2d:69:9c:6b:
12:2e:2f:18:2f:2c:9a:35:ff:33:bd:11:9c:4b:ee:34:6c:84:
e1:f7:07:1e:42:c5:0f:39:8f:2d:74:b8:f0:66:6a:c5:6f:c9:
ea:79:c7:e8:d8:77:41:b0:a0:7e:94:c9:1c:c4:a2:a0:06:a5:
52:ac:06:00:b3:bc:74:a1:52:0b:af:6d:16:36:00:50:2b:1d:
03:4e:8a:fe:2e:3a:c7:0a:79:2a:e1:63:e0:1d:49:67:98:81:
e5:0b:c9:61:a0:e5:06:27:8a:14:90:2a:2a:a4:24:9c:eb:4f:
9b:43:f5:5b:f0:bd:33:69:7c:09:3d:d6:e0:12:28:f1:7d:0f:
5b:6b:20:95:85:7b:ec:23:2a:0d:ae:11:76:4f:8d:72:9f:9a:
89:02:97:33:ff:82:7e:12:de:41:06:fe:d0:65:ce:e8:0a:b8:
66:ac:b0:83:97:09:e7:7a:32:8e:bc:43:86:57:3c:fb:81:a4:
ee:7d:f0:d4:c7:1c:e3:88:b1:a9:39:98:fd:81:b7:dd:5b:89:
22:cd:16:73:47:ba:98:b2:db:9b:d5:35:9a:8c:53:60:5c:98:
d8:5b:81:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-ams.rpki-client.org