Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A4F9/806DA2D07BE511EBA1DB0D5EC4F9AE02/C7D34F347BE611EB8B67A45EC4F9AE02.roa
File: C7D34F347BE611EB8B67A45EC4F9AE02.roa (raw, json)
Hash identifier: 0ZY8O10EEi/pB7LkjlXxdtmNizW6fzcQGDCFYO/02CE=
Subject key identifier: 52:D0:52:BD:D3:C3:B6:4B:CF:14:F4:D8:BF:91:A2:57:A3:F1:15:EC
Certificate issuer: /CN=A918A4F9/serialNumber=40BD7960EE04C0BC2B7520BAE928750BB090FB87
Certificate serial: 0195
Authority key identifier: 40:BD:79:60:EE:04:C0:BC:2B:75:20:BA:E9:28:75:0B:B0:90:FB:87
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QL15YO4EwLwrdSC66Sh1C7CQ-4c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A4F9/806DA2D07BE511EBA1DB0D5EC4F9AE02/C7D34F347BE611EB8B67A45EC4F9AE02.roa
Signing time: Wed 22 Sep 2021 14:14:44 +0000
ROA not before: Wed 22 Sep 2021 14:14:44 +0000
ROA not after: Thu 01 Dec 2022 00:00:00 +0000
asID: 133617
IP address blocks: 43.240.92.0/22 maxlen: 24
103.36.88.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 405 (0x195)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A4F9/serialNumber=40BD7960EE04C0BC2B7520BAE928750BB090FB87
Validity
Not Before: Sep 22 14:14:44 2021 GMT
Not After : Dec 1 00:00:00 2022 GMT
Subject: CN=614b3a54-246d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:aa:d5:30:7d:3c:5e:bd:fe:5b:b1:ea:94:8c:
a0:d2:cd:1e:25:21:b9:1b:a4:74:57:67:8f:f7:18:
1f:a1:06:45:88:4b:3b:54:9f:31:48:24:4f:53:5d:
35:00:d9:14:af:0d:c2:58:db:8a:41:0a:8a:1b:90:
4d:e1:5d:3b:12:96:90:eb:a7:e3:1a:96:84:b4:30:
df:b7:c2:4a:74:17:1c:9a:9d:b7:18:a1:b2:4e:04:
1f:85:70:cc:d3:55:2b:17:b5:6a:c6:09:83:4b:09:
a1:15:f4:45:16:37:74:c2:f1:a0:aa:8e:12:d1:67:
7c:e7:d2:2b:47:42:a3:04:86:6f:7f:8a:e6:d7:e2:
f4:db:a2:95:b5:8f:19:b7:1c:ea:0f:f5:94:32:21:
97:0f:a0:86:1d:4a:f4:dd:44:88:3d:57:3a:07:c3:
c1:db:6c:bf:b8:31:56:dc:a5:c6:80:2b:c7:b6:2b:
07:44:bb:a9:d6:b7:a0:0e:15:e0:da:5c:69:a2:05:
fa:5a:21:12:55:68:39:83:d5:56:4f:8f:b0:e0:64:
61:2e:7f:f0:0d:e1:27:3a:12:bd:a8:52:a6:e8:04:
41:91:69:b7:ec:5c:c7:75:20:fd:cb:51:79:a9:67:
64:3f:fd:0d:49:dc:b2:06:db:7a:6a:5a:46:19:32:
87:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D0:52:BD:D3:C3:B6:4B:CF:14:F4:D8:BF:91:A2:57:A3:F1:15:EC
X509v3 Authority Key Identifier:
keyid:40:BD:79:60:EE:04:C0:BC:2B:75:20:BA:E9:28:75:0B:B0:90:FB:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A4F9/806DA2D07BE511EBA1DB0D5EC4F9AE02/QL15YO4EwLwrdSC66Sh1C7CQ-4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QL15YO4EwLwrdSC66Sh1C7CQ-4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A4F9/806DA2D07BE511EBA1DB0D5EC4F9AE02/C7D34F347BE611EB8B67A45EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.240.92.0/22
103.36.88.0/22
Signature Algorithm: sha256WithRSAEncryption
83:8a:d5:43:eb:c7:07:bb:c6:1c:f0:45:1a:de:79:f1:e5:af:
8f:5a:a3:56:93:db:d9:14:28:06:b8:44:4a:13:41:dc:3b:e8:
ab:37:f1:32:af:93:1d:ee:e7:41:4e:d0:24:32:de:fc:62:2c:
93:5b:50:d5:af:df:84:3f:0c:81:a9:5c:48:d8:37:99:dd:95:
de:fb:d4:ea:7a:90:3d:0c:12:1c:bf:99:0f:ed:aa:90:90:33:
90:a2:f6:13:02:a4:df:b7:77:88:2b:ff:68:9b:87:ed:d6:35:
a8:c4:dd:34:2e:32:ef:61:93:ab:4f:d9:a0:47:5c:e1:44:64:
19:d8:6c:72:3b:1a:c1:a8:1d:64:5a:4e:24:9e:f4:56:c2:d7:
31:60:2b:6e:82:60:c7:da:bb:13:ce:07:18:1a:69:47:cb:35:
8f:ce:cb:8a:d9:52:32:62:08:9b:28:83:37:1a:d2:59:7b:1b:
43:f4:46:e1:de:55:ad:b5:91:78:49:08:48:c1:75:81:52:fb:
74:7d:63:f0:f4:80:14:2f:e2:d6:e2:69:cf:37:1e:9a:3b:47:
59:33:73:66:ac:cf:03:4c:5d:64:03:fc:93:42:6e:35:48:9f:
6c:09:f3:ab:a4:63:57:9b:0f:8e:ff:17:91:f0:3d:4c:d2:34:
35:6e:75:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:14 2024 by rpki-client on console-fra.rpki-client.org