Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919AD89/535B4312CF3211E9B4D5AD1EC4F9AE02/7B0290D43AEA11EC84E6634EC4F9AE02.roa
File: 7B0290D43AEA11EC84E6634EC4F9AE02.roa (raw, json)
Hash identifier: 3CTv3pO8Tof5tbT7wZleueSE5k625hcwnogtSuDM/so=
Subject key identifier: D2:6E:DC:36:5B:9B:CB:11:0B:4E:3B:30:9B:B1:E2:AF:C0:85:FF:7D
Certificate issuer: /CN=A919AD89/serialNumber=9C415BFE1EAF6E68D8EB6879EA457385F2549146
Certificate serial: 0C3F
Authority key identifier: 9C:41:5B:FE:1E:AF:6E:68:D8:EB:68:79:EA:45:73:85:F2:54:91:46
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nEFb_h6vbmjY62h56kVzhfJUkUY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919AD89/535B4312CF3211E9B4D5AD1EC4F9AE02/7B0290D43AEA11EC84E6634EC4F9AE02.roa
Signing time: Tue 31 Oct 2023 19:06:45 +0000
ROA not before: Tue 31 Oct 2023 19:06:45 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 136739
IP address blocks: 103.142.196.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3135 (0xc3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919AD89/serialNumber=9C415BFE1EAF6E68D8EB6879EA457385F2549146
Validity
Not Before: Oct 31 19:06:45 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=65415045-9060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7d:72:20:bf:70:04:df:b1:6b:69:9a:2e:93:
5a:02:2f:a0:a7:fa:19:f9:52:c2:4b:72:23:ad:b2:
b2:d1:bc:04:26:a6:ef:d9:a9:b8:c5:ed:49:cd:35:
22:3d:34:50:2b:72:8e:32:98:a6:9b:fd:0f:e5:d9:
d0:9d:45:80:a9:a2:75:d4:7a:25:71:a9:a0:b9:cc:
79:a9:ec:55:d0:bd:40:48:f9:6a:59:14:ff:93:c6:
ec:31:6d:d5:03:19:ce:4a:4b:9f:3a:6f:7f:5f:8d:
5d:9f:69:dd:4f:0b:28:98:e1:b4:a2:82:97:de:83:
de:ca:da:e3:80:0e:62:a0:9f:8c:5f:33:bc:93:72:
ce:5c:79:e9:22:54:83:a3:25:25:3d:f1:53:65:c3:
2d:2f:5d:f9:8a:12:19:ac:83:e2:a2:60:d0:97:4c:
10:ef:4d:8c:71:84:2a:69:5d:f1:c1:25:23:2f:c1:
6e:93:42:4a:50:ca:aa:a7:c1:86:8d:20:a7:a2:d6:
9a:47:ea:b6:98:67:56:b5:12:7c:64:ee:6f:b6:57:
a7:7d:4f:65:53:48:c9:a3:a5:ab:07:a1:53:30:e3:
a1:20:9e:7e:d0:05:9b:66:36:3f:a1:e7:b4:76:94:
d7:6b:b2:8a:4f:03:e3:ad:a8:80:c9:4b:bc:3c:54:
37:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:6E:DC:36:5B:9B:CB:11:0B:4E:3B:30:9B:B1:E2:AF:C0:85:FF:7D
X509v3 Authority Key Identifier:
keyid:9C:41:5B:FE:1E:AF:6E:68:D8:EB:68:79:EA:45:73:85:F2:54:91:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919AD89/535B4312CF3211E9B4D5AD1EC4F9AE02/nEFb_h6vbmjY62h56kVzhfJUkUY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nEFb_h6vbmjY62h56kVzhfJUkUY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AD89/535B4312CF3211E9B4D5AD1EC4F9AE02/7B0290D43AEA11EC84E6634EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.142.196.0/23
Signature Algorithm: sha256WithRSAEncryption
27:f8:a9:fd:a3:cd:76:73:43:13:94:3f:91:d9:f6:30:a5:f9:
ee:58:ef:42:c8:58:b7:f2:48:84:09:8e:74:ad:ca:7d:6e:1a:
f2:8e:7a:78:76:99:cd:1f:c5:d2:bc:92:c7:66:4f:64:e9:c5:
e9:a9:27:be:a4:4a:df:1d:02:49:9c:40:e9:5e:52:5a:7c:f7:
c0:d1:76:f6:ca:8a:3c:96:2b:3f:95:de:5b:7c:e4:f3:f3:28:
99:bd:6a:ea:e1:4c:43:9f:64:bb:62:df:bf:53:87:f8:3b:52:
ee:aa:15:2d:e9:b3:25:87:4f:64:06:3e:51:c8:c5:c1:83:61:
66:05:1a:cc:75:57:e8:d6:d4:11:54:b0:94:b0:3c:f6:fe:77:
d8:65:1a:85:b7:0e:bb:b5:7a:a7:ce:36:06:d8:19:df:51:59:
26:e8:62:0a:c4:41:8f:34:eb:ed:cb:0a:f3:f7:a2:0e:23:ef:
c0:cb:7c:73:cc:e8:8e:a6:4f:14:4d:2a:26:be:1e:a3:a9:53:
01:90:27:f5:c0:30:97:36:3f:b4:6b:f5:f9:62:6a:ca:3a:c8:
68:ee:2b:f9:2a:67:b4:03:8e:39:e6:b7:3f:9c:e3:7e:c4:75:
1a:02:c0:87:ed:4f:a0:06:cd:33:5a:78:f5:0e:43:78:aa:62:
a6:31:38:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:48 2024 by rpki-client on console-ams.rpki-client.org