Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197DC3/E65118A284A611EAAC51421FC4F9AE02/4DBDF5F0440511EB9A50082DC4F9AE02.roa
File: 4DBDF5F0440511EB9A50082DC4F9AE02.roa (raw, json)
Hash identifier: LKMcwRWh70AbbJHV0h2PdrwGn9Yv/CZ6m822bC4yFGc=
Subject key identifier: E6:53:DD:C9:35:A6:33:65:05:85:88:05:C5:73:95:35:54:32:41:47
Certificate issuer: /CN=A9197DC3/serialNumber=1DC5E710297C5231C7B2A565A146055118E65264
Certificate serial: 07DE
Authority key identifier: 1D:C5:E7:10:29:7C:52:31:C7:B2:A5:65:A1:46:05:51:18:E6:52:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HcXnECl8UjHHsqVloUYFURjmUmQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197DC3/E65118A284A611EAAC51421FC4F9AE02/4DBDF5F0440511EB9A50082DC4F9AE02.roa
Signing time: Mon 31 Oct 2022 22:28:00 +0000
ROA not before: Mon 31 Oct 2022 22:28:00 +0000
ROA not after: Wed 01 Mar 2023 00:00:00 +0000
asID: 213347
IP address blocks: 103.73.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2014 (0x7de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197DC3/serialNumber=1DC5E710297C5231C7B2A565A146055118E65264
Validity
Not Before: Oct 31 22:28:00 2022 GMT
Not After : Mar 1 00:00:00 2023 GMT
Subject: CN=63604bef-f61f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:83:7b:f7:cb:0b:25:71:ae:bc:08:8b:48:14:
f6:3f:02:59:8d:7a:41:47:1c:5d:9d:72:b1:c9:db:
e4:0c:e1:be:6b:fb:ee:ac:4d:ab:be:5a:3d:44:4c:
4c:12:f5:e3:35:7d:a4:90:cc:b2:fa:86:0b:a4:03:
c2:02:c5:3f:f8:c3:ff:28:fc:bf:a2:bb:ea:50:1f:
cf:7a:ee:0a:28:12:d6:1a:64:bc:fd:5c:d1:bd:57:
41:bf:b8:5c:89:9b:8b:7c:7a:d2:ea:b5:16:bf:f7:
e1:1e:71:20:2c:76:8f:ae:0d:9d:e2:1b:e2:c3:35:
2e:5f:3e:0a:9b:10:ea:01:e6:d7:7b:f1:4e:dc:4a:
94:2f:d8:79:28:fb:18:37:11:35:cc:62:30:27:57:
5d:74:03:40:66:03:ed:e6:ab:3e:a6:03:4f:a6:4e:
38:f8:cf:8c:61:b6:f8:f6:01:0d:c9:3c:09:51:a1:
7f:39:64:ad:3c:98:b6:b3:cb:fd:55:d8:c6:f6:91:
77:16:d9:ed:7f:7a:52:04:ba:40:84:ed:99:7e:8e:
47:4a:58:87:31:d9:0f:15:d3:f8:33:83:ad:7e:4d:
d5:a0:b5:88:9e:92:b1:20:c0:47:63:a3:91:80:b1:
36:1c:41:5f:ab:eb:37:53:d5:09:6a:80:c3:1a:27:
6d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:53:DD:C9:35:A6:33:65:05:85:88:05:C5:73:95:35:54:32:41:47
X509v3 Authority Key Identifier:
keyid:1D:C5:E7:10:29:7C:52:31:C7:B2:A5:65:A1:46:05:51:18:E6:52:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197DC3/E65118A284A611EAAC51421FC4F9AE02/HcXnECl8UjHHsqVloUYFURjmUmQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HcXnECl8UjHHsqVloUYFURjmUmQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197DC3/E65118A284A611EAAC51421FC4F9AE02/4DBDF5F0440511EB9A50082DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.73.253.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:e7:fb:ca:c2:0e:31:80:0b:5e:46:e1:6d:d9:fe:17:d7:9e:
89:82:2c:89:2e:f2:2b:73:de:c4:1f:4e:4f:87:be:c7:dd:67:
8d:a7:46:eb:b2:77:49:00:dd:91:35:49:c1:45:9a:d3:db:7c:
77:e7:04:05:0c:eb:3b:5f:18:1a:33:10:a6:9c:ba:86:1b:96:
e2:68:fe:1a:42:3f:3a:9d:1e:f8:03:ba:24:89:71:ea:aa:8b:
24:76:17:da:87:50:85:1f:10:69:75:36:e8:7d:98:98:ef:28:
ab:5d:74:f3:f2:7d:80:de:7f:6c:07:eb:25:2d:01:80:b3:fa:
02:7e:1f:6f:bb:42:4d:39:0a:df:ce:eb:d5:85:0b:0c:b8:bc:
00:d3:54:6a:d8:d8:64:44:10:1f:8a:b0:de:c1:8f:96:38:60:
21:71:42:c3:05:71:32:cb:d9:f2:8f:ad:d7:27:d4:81:cd:b9:
99:45:e9:de:16:57:80:2b:47:dc:bd:dc:da:25:d0:63:29:ea:
6e:b6:40:36:03:e0:f8:71:c0:1d:db:1f:ec:35:0f:36:e4:98:
f1:8a:9e:28:6a:77:da:24:3b:63:2f:1e:82:ad:e1:4d:16:98:
c0:ea:17:28:c3:cf:31:e4:b5:d7:bc:84:9c:07:cf:eb:b2:2d:
69:86:4f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:48 2024 by rpki-client on console-ams.rpki-client.org