Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91946AB/8534E9AE737411ECACAFE832C4F9AE02/658641B2737811ECA44A8086C4F9AE02.roa
File: 658641B2737811ECA44A8086C4F9AE02.roa (raw, json)
Hash identifier: KdswJZsl5ssLdSB67JGJSYw12g9SB278aufG1dd7yfI=
Subject key identifier: 30:3D:E1:34:15:7A:9D:AF:D9:74:5E:A3:D2:B3:C7:54:7D:56:84:B6
Certificate issuer: /CN=A91946AB/serialNumber=0B198D3B8D1CD2AF5BFCE4BC36D0868D6740B491
Certificate serial: 01B8
Authority key identifier: 0B:19:8D:3B:8D:1C:D2:AF:5B:FC:E4:BC:36:D0:86:8D:67:40:B4:91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CxmNO40c0q9b_OS8NtCGjWdAtJE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91946AB/8534E9AE737411ECACAFE832C4F9AE02/658641B2737811ECA44A8086C4F9AE02.roa
Signing time: Tue 16 Aug 2022 16:22:49 +0000
ROA not before: Tue 16 Aug 2022 16:22:49 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 147002
IP address blocks: 43.255.38.0/24 maxlen: 24
103.239.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 440 (0x1b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91946AB/serialNumber=0B198D3B8D1CD2AF5BFCE4BC36D0868D6740B491
Validity
Not Before: Aug 16 16:22:49 2022 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=62fbc459-55df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:e4:15:f1:3d:04:bb:a8:5c:45:f4:26:98:b6:
66:3d:a7:dc:ab:37:3a:ea:73:ad:4f:50:23:58:94:
01:92:7d:42:59:9c:fd:fb:6e:94:63:d1:32:ef:7b:
0e:88:29:51:83:cb:75:c1:de:49:89:06:ce:3f:c0:
8a:58:a7:7e:03:39:24:55:94:98:47:3a:30:65:08:
bc:5b:d5:77:8a:49:e7:69:48:a6:53:52:14:6c:24:
f2:a3:6a:b4:8a:9c:26:cf:d5:d3:18:aa:9f:b2:f8:
e3:30:5c:ac:82:f1:38:41:b2:c9:ab:f0:48:0c:cc:
c5:4d:ac:8f:aa:9b:68:17:00:91:85:39:57:7e:55:
ac:62:11:5e:fd:77:41:df:48:00:2b:84:55:27:66:
c5:c1:f7:fd:b9:e1:ee:2f:87:a1:77:15:32:9e:2e:
f2:5b:54:41:7f:e4:ba:48:eb:42:24:d6:ab:6c:a0:
89:e5:f6:30:71:6c:4c:ca:c2:f9:37:c6:b2:d7:d2:
fd:3c:69:f1:ea:ae:ca:67:b4:ac:fa:74:1d:89:8a:
3a:c8:85:24:bc:4a:83:c2:ce:00:10:be:a8:ba:16:
fb:8d:3c:3b:da:9e:8e:80:f0:a5:0b:b9:71:fb:81:
06:19:a5:1c:4a:9b:48:4e:1d:7c:55:cf:0c:0a:07:
e4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:3D:E1:34:15:7A:9D:AF:D9:74:5E:A3:D2:B3:C7:54:7D:56:84:B6
X509v3 Authority Key Identifier:
keyid:0B:19:8D:3B:8D:1C:D2:AF:5B:FC:E4:BC:36:D0:86:8D:67:40:B4:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91946AB/8534E9AE737411ECACAFE832C4F9AE02/CxmNO40c0q9b_OS8NtCGjWdAtJE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CxmNO40c0q9b_OS8NtCGjWdAtJE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91946AB/8534E9AE737411ECACAFE832C4F9AE02/658641B2737811ECA44A8086C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.255.38.0/24
103.239.30.0/24
Signature Algorithm: sha256WithRSAEncryption
25:0d:cc:7c:55:a5:67:cf:d9:58:e1:52:a8:a0:0a:0f:72:55:
56:c3:c2:6c:1f:a2:ff:1a:c0:25:17:63:f7:20:4c:fa:e4:9d:
21:fe:76:49:dc:6b:3f:cf:4c:07:74:a2:33:16:25:c8:6a:43:
b0:57:ce:93:7f:86:8e:b8:e5:a8:a4:da:e6:5a:21:ab:e1:0e:
27:0a:32:dd:cd:93:3a:35:fc:8c:aa:2c:e1:d3:b4:40:11:b0:
22:30:ad:05:ac:84:93:52:19:1b:77:44:d7:32:4a:8b:d4:d3:
0e:1e:de:f5:54:8b:2e:ef:07:38:70:44:ec:5c:4f:d2:d2:8d:
a3:9d:24:af:2f:8d:ed:f3:74:f6:d6:55:c5:64:21:dd:3e:c3:
be:28:c0:44:c5:79:85:bd:33:08:fe:e7:bd:1f:62:25:7d:15:
63:79:48:28:ad:a8:92:35:30:b6:47:20:f0:dc:86:32:39:9d:
4e:f3:17:a9:53:e8:ea:a4:09:9d:03:56:b5:73:a0:6d:e3:17:
26:ba:ac:92:3f:27:ed:a0:c0:7b:bc:73:62:8b:e9:11:f7:bb:
15:40:57:6e:5a:98:41:ae:80:28:40:c9:72:6f:91:36:f7:18:
45:8e:9a:d4:0f:87:27:0b:b9:93:3a:e9:8b:c4:3b:82:cc:84:
38:0f:6f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:47 2024 by rpki-client on console-ams.rpki-client.org