Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185EFE/1E42DE001D7811EDB5585E1EC4F9AE02/4755215C1D7A11ED8483001FC4F9AE02.roa
File: 4755215C1D7A11ED8483001FC4F9AE02.roa (raw, json)
Hash identifier: wZFRdks3ykjwzzKSX9mTRKBh0Yn6H2GKqqwlr8od1O0=
Subject key identifier: E7:5F:CD:CD:D5:CB:99:F2:15:6D:DC:9B:3E:00:D1:6E:C1:B4:E5:1A
Certificate issuer: /CN=A9185EFE/serialNumber=7EE8CE64A7B4005121460AA3BA59443C956E35D0
Certificate serial: 02
Authority key identifier: 7E:E8:CE:64:A7:B4:00:51:21:46:0A:A3:BA:59:44:3C:95:6E:35:D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fujOZKe0AFEhRgqjullEPJVuNdA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185EFE/1E42DE001D7811EDB5585E1EC4F9AE02/4755215C1D7A11ED8483001FC4F9AE02.roa
Signing time: Tue 16 Aug 2022 15:44:14 +0000
ROA not before: Tue 16 Aug 2022 15:44:14 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 140682
IP address blocks: 103.141.36.0/23 maxlen: 24
2001:df1:2340::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185EFE/serialNumber=7EE8CE64A7B4005121460AA3BA59443C956E35D0
Validity
Not Before: Aug 16 15:44:14 2022 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=62fbbb4e-1702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:06:62:02:a2:02:b6:50:61:ff:d7:ff:8b:24:
4c:e5:89:81:dc:e1:be:a4:50:60:54:5d:93:23:99:
8b:97:ac:94:e1:99:99:f1:b6:32:fb:9d:91:fd:4a:
73:58:5a:6f:8e:c8:6a:f5:4f:c1:cf:d5:c8:17:ba:
9e:c9:42:99:86:f7:01:a1:da:98:df:e1:e3:28:2d:
8c:00:04:87:0c:ab:a5:a6:ce:0c:77:23:67:9b:af:
28:a9:82:b4:df:4d:93:97:24:31:58:88:da:76:74:
bb:66:af:40:99:67:0c:eb:92:c8:0c:4a:c6:36:f9:
1d:74:a3:49:b5:94:c5:17:5e:e8:21:5f:8c:66:d0:
4b:1d:58:7c:49:f0:23:d8:9a:78:62:5d:6f:65:be:
74:5f:9d:bb:b0:77:35:12:de:07:bb:a4:95:bd:91:
cf:10:e8:89:ba:87:72:08:88:4d:e4:b5:99:dd:c5:
ab:5f:74:49:9d:e1:e7:d4:ba:73:71:b2:a2:b4:5f:
24:1b:a9:da:fd:bf:01:2d:ea:4b:6c:1e:0b:55:5b:
22:f2:74:c3:9f:03:29:72:d1:b6:2b:84:98:b8:8c:
66:f5:65:fc:9d:24:2f:78:c2:bd:0f:d8:19:ee:36:
c6:72:f1:fb:a1:4d:09:41:4c:ca:b7:a3:42:e4:75:
02:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:5F:CD:CD:D5:CB:99:F2:15:6D:DC:9B:3E:00:D1:6E:C1:B4:E5:1A
X509v3 Authority Key Identifier:
keyid:7E:E8:CE:64:A7:B4:00:51:21:46:0A:A3:BA:59:44:3C:95:6E:35:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185EFE/1E42DE001D7811EDB5585E1EC4F9AE02/fujOZKe0AFEhRgqjullEPJVuNdA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fujOZKe0AFEhRgqjullEPJVuNdA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185EFE/1E42DE001D7811EDB5585E1EC4F9AE02/4755215C1D7A11ED8483001FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.141.36.0/23
IPv6:
2001:df1:2340::/48
Signature Algorithm: sha256WithRSAEncryption
78:39:cd:c5:3c:b1:e5:bb:64:4f:dd:22:ef:6d:d5:3f:08:d7:
9b:20:bb:26:fd:aa:f0:91:82:e8:f1:ec:3f:6a:e8:86:f9:dd:
e6:3b:a8:7f:8a:c5:47:30:7b:a6:9c:56:62:20:25:7f:dc:b4:
d9:d9:65:73:ca:83:1c:31:77:b0:a7:1b:fe:6b:d4:a5:97:cc:
d2:2a:ce:ea:88:6e:4c:33:d2:60:0e:ad:80:f0:57:5d:3f:d5:
61:cf:c8:f8:74:d3:4c:75:1d:bb:bd:b2:3d:ec:df:14:f4:00:
c3:24:59:bc:4d:d4:9a:a5:f4:e8:1b:d2:e8:7a:a8:00:1b:53:
26:44:b1:5b:4f:02:0c:f6:32:49:87:2f:e9:55:90:ef:1a:7b:
04:5a:9e:ac:20:9d:5d:48:1b:11:2d:6c:92:c5:d2:62:91:55:
0a:40:a1:40:ca:99:58:a0:56:25:34:4f:c4:1a:1c:fc:4d:0d:
c8:f8:93:0d:aa:3e:54:b9:a9:63:84:40:77:b2:91:da:f9:1e:
e3:ee:c0:03:1c:56:e3:3e:d4:9b:eb:62:8b:6c:dd:29:e2:fc:
91:0e:04:8c:91:b1:7b:64:11:fa:22:c2:34:73:a4:62:d4:a2:
ac:e7:cb:17:2f:28:5f:22:7b:ae:51:48:1b:5f:69:fa:c9:6d:
69:71:cb:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:14 2024 by rpki-client on console-fra.rpki-client.org