Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197DC3/E65118A284A611EAAC51421FC4F9AE02/1C4F90903D1711EBA898FF41C4F9AE02.roa
File: 1C4F90903D1711EBA898FF41C4F9AE02.roa (raw, json)
Hash identifier: Dj1cqxQJpZ3Lti92PZn9rg6vBUeG6QZOJhp3W9Ugz70=
Subject key identifier: 89:B3:CF:8B:DD:CC:79:16:2B:86:A5:BC:96:99:5A:99:5E:53:EA:F6
Certificate issuer: /CN=A9197DC3/serialNumber=1DC5E710297C5231C7B2A565A146055118E65264
Certificate serial: 07DD
Authority key identifier: 1D:C5:E7:10:29:7C:52:31:C7:B2:A5:65:A1:46:05:51:18:E6:52:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HcXnECl8UjHHsqVloUYFURjmUmQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197DC3/E65118A284A611EAAC51421FC4F9AE02/1C4F90903D1711EBA898FF41C4F9AE02.roa
Signing time: Mon 31 Oct 2022 22:27:59 +0000
ROA not before: Mon 31 Oct 2022 22:27:59 +0000
ROA not after: Wed 01 Mar 2023 00:00:00 +0000
asID: 141223
IP address blocks: 103.73.253.0/24 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2013 (0x7dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197DC3/serialNumber=1DC5E710297C5231C7B2A565A146055118E65264
Validity
Not Before: Oct 31 22:27:59 2022 GMT
Not After : Mar 1 00:00:00 2023 GMT
Subject: CN=63604bee-a2c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4c:cc:03:9a:8e:fc:bf:32:c8:3f:c4:bb:e5:
16:36:5c:0d:4b:e1:b8:94:3e:64:a9:8f:a6:26:5a:
40:29:af:53:5e:bd:70:25:c2:ff:00:e8:66:2d:80:
ef:7f:3d:5a:86:6a:9b:05:b7:50:eb:10:b5:69:9c:
6a:23:29:a3:3f:ba:4b:9a:95:26:55:a0:ad:f7:84:
ed:9f:ee:8e:fa:47:a7:89:c6:5f:4f:58:22:6b:2c:
d9:ba:13:3c:45:19:09:3c:9d:bc:f8:98:2f:23:d9:
28:b6:ad:b4:a2:ef:cd:e0:28:42:2a:69:b0:d0:43:
91:fa:b6:95:8d:9a:7d:f3:49:18:3d:41:d6:ff:bb:
6d:61:cd:6f:8e:85:68:8a:4a:9b:45:0d:68:65:77:
e6:96:fa:4c:54:4c:c6:86:19:1b:8f:d0:1a:eb:6e:
1b:5e:89:71:b6:c1:e4:33:15:f5:72:3d:4b:9a:42:
6a:82:f3:39:06:18:3c:6f:72:d5:87:8e:73:d1:7a:
f3:62:8d:b9:5d:7a:e6:89:e2:22:e6:2f:73:c9:df:
72:2f:b4:e6:21:b1:51:7d:fd:04:f8:78:7a:70:bc:
f3:f0:d5:81:69:e2:fa:c0:d4:1d:7d:92:cf:52:ef:
28:e8:99:9c:cf:d3:7f:2a:5f:e1:0d:87:bd:1f:d4:
5b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B3:CF:8B:DD:CC:79:16:2B:86:A5:BC:96:99:5A:99:5E:53:EA:F6
X509v3 Authority Key Identifier:
keyid:1D:C5:E7:10:29:7C:52:31:C7:B2:A5:65:A1:46:05:51:18:E6:52:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197DC3/E65118A284A611EAAC51421FC4F9AE02/HcXnECl8UjHHsqVloUYFURjmUmQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HcXnECl8UjHHsqVloUYFURjmUmQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197DC3/E65118A284A611EAAC51421FC4F9AE02/1C4F90903D1711EBA898FF41C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.73.253.0/24
Signature Algorithm: sha256WithRSAEncryption
40:78:df:7f:f2:b3:eb:55:ca:50:22:e8:9f:cb:12:28:28:1e:
b0:95:e2:34:15:49:cc:de:42:a2:37:ae:9c:61:54:5f:38:5d:
cc:3a:34:38:2b:36:dd:99:8e:34:65:e7:5d:c6:54:6b:6b:dc:
6d:de:4a:57:56:aa:ee:77:a2:c9:c7:10:e8:a6:e7:16:33:79:
20:d0:c6:6a:80:39:99:f0:e2:5d:5c:ef:30:be:7d:13:87:20:
e3:71:21:28:ec:60:5a:88:fe:94:83:40:56:e0:a0:51:20:5c:
b1:e0:25:a7:06:39:33:29:c5:07:84:88:64:69:c5:c0:86:c9:
7d:70:7a:8e:14:c5:68:7e:12:81:27:53:a8:33:94:f5:5c:c6:
09:5d:9d:a9:76:c4:60:4d:a2:37:9e:33:ff:82:fc:d2:9d:35:
29:40:49:d3:86:cc:6d:30:2d:e1:6e:bd:c8:b3:f3:3a:45:c0:
b1:1c:c8:ec:d9:ff:85:38:70:61:36:f8:34:c5:75:78:05:dd:
77:6d:2a:07:e8:13:99:98:fd:4b:9b:0d:a4:6c:c6:35:3f:88:
9f:cc:3a:6a:be:67:b1:02:a1:e5:3f:d4:26:b8:8f:a0:88:c2:
dc:bc:2c:18:4d:58:79:93:66:c5:89:d5:51:c8:0b:45:58:9f:
b2:60:c0:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:48 2024 by rpki-client on console-ams.rpki-client.org