Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7AF1/FEE5C48CE99C11ECB92FF629C4F9AE02/31092DD8E9A111EC80D11C2EC4F9AE02.roa
File: 31092DD8E9A111EC80D11C2EC4F9AE02.roa (raw, json)
Hash identifier: pLYK3Mlkd2/ytaBmaVGSke55zCxDJzwcd8DlMzVaZh8=
Subject key identifier: 16:BB:57:74:80:23:26:9A:4D:C6:79:F0:D5:6A:2C:63:3A:90:27:21
Certificate issuer: /CN=A91A7AF1/serialNumber=3A5649501338B1F0BF7C06221A3AC97DC0B114C4
Certificate serial: 02
Authority key identifier: 3A:56:49:50:13:38:B1:F0:BF:7C:06:22:1A:3A:C9:7D:C0:B1:14:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlZJUBM4sfC_fAYiGjrJfcCxFMQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7AF1/FEE5C48CE99C11ECB92FF629C4F9AE02/31092DD8E9A111EC80D11C2EC4F9AE02.roa
Signing time: Sat 11 Jun 2022 16:11:47 +0000
ROA not before: Sat 11 Jun 2022 16:11:47 +0000
ROA not after: Thu 01 Dec 2022 00:00:00 +0000
asID: 132721
IP address blocks: 45.125.216.0/24 maxlen: 24
45.125.217.0/24 maxlen: 24
45.125.218.0/24 maxlen: 24
45.125.219.0/24 maxlen: 24
103.194.104.0/24 maxlen: 24
103.194.105.0/24 maxlen: 24
103.194.106.0/24 maxlen: 24
103.194.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7AF1/serialNumber=3A5649501338B1F0BF7C06221A3AC97DC0B114C4
Validity
Not Before: Jun 11 16:11:47 2022 GMT
Not After : Dec 1 00:00:00 2022 GMT
Subject: CN=62a4bec2-249e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:36:ed:bb:60:f0:ca:e1:c6:50:31:e1:eb:bd:
5d:a6:c2:fc:fd:3f:a1:64:36:e2:49:a6:f6:f3:b7:
fa:25:d2:d0:95:e9:c7:30:c7:31:9d:99:35:b9:f2:
f1:15:41:99:28:ab:95:91:2b:6e:4b:b1:b5:8d:cc:
64:b0:64:85:85:a8:2a:e2:10:8f:7c:97:42:9d:07:
76:52:70:33:26:1d:18:38:29:33:c1:ee:19:7b:b3:
42:50:cc:7d:fa:04:03:56:18:c7:f5:ad:3d:5e:1b:
4f:96:1c:f6:6a:e8:f3:9d:4c:5b:30:1d:26:72:89:
2b:a2:12:69:8d:e9:18:30:e4:37:b3:d7:05:01:9c:
7b:12:c8:7e:f8:8f:d0:83:42:8e:83:85:d0:63:1b:
57:dc:ba:01:e4:c6:7f:c2:d4:5a:66:fb:79:a4:b8:
82:08:14:e7:7c:cf:24:5e:71:13:cf:c4:55:8e:ed:
db:e3:27:90:ce:73:fd:b1:a9:bb:87:2c:1e:a4:eb:
2b:30:e4:e0:7e:37:65:70:19:67:ae:22:f4:c7:5c:
ab:ff:3a:0b:3d:e3:b7:65:22:93:57:71:22:62:06:
9b:e3:ee:ab:f2:44:5f:92:e6:fe:11:39:19:08:df:
86:4f:64:fd:eb:6b:80:04:8d:03:37:34:8b:21:7e:
11:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:BB:57:74:80:23:26:9A:4D:C6:79:F0:D5:6A:2C:63:3A:90:27:21
X509v3 Authority Key Identifier:
keyid:3A:56:49:50:13:38:B1:F0:BF:7C:06:22:1A:3A:C9:7D:C0:B1:14:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7AF1/FEE5C48CE99C11ECB92FF629C4F9AE02/OlZJUBM4sfC_fAYiGjrJfcCxFMQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlZJUBM4sfC_fAYiGjrJfcCxFMQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7AF1/FEE5C48CE99C11ECB92FF629C4F9AE02/31092DD8E9A111EC80D11C2EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.125.216.0/22
103.194.104.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:e7:93:72:99:78:0b:b3:cc:f2:62:30:21:79:a3:9e:00:ae:
6f:4e:ea:70:f1:e9:da:94:eb:fd:20:da:91:42:5b:88:ac:d9:
2b:3d:c8:60:23:09:b8:14:82:ee:3a:b8:df:88:23:89:ed:8d:
87:ba:9b:33:db:65:ba:02:f0:5e:d4:c0:b5:75:cc:65:da:ee:
2a:d1:45:a2:7b:1c:c9:73:dc:66:5b:99:3e:6f:4f:71:08:e8:
d5:20:bf:2f:43:94:61:b7:ee:06:8e:ab:12:aa:81:2b:50:90:
e5:f6:09:44:bb:11:c3:56:17:16:b4:e6:ff:bb:ec:b2:66:31:
4f:15:19:2e:c8:19:e5:52:92:a6:1d:68:ae:46:fd:5a:89:1b:
68:3b:7e:b0:0c:6c:b9:d1:64:25:44:d9:71:5c:87:c2:ae:c4:
24:7d:96:21:d7:4b:02:82:a9:fb:37:8f:b6:50:18:38:98:b9:
dc:e9:ae:cc:3b:1c:69:6a:82:90:07:77:d8:8e:4b:63:fd:55:
12:b2:a2:c0:a5:9f:63:c0:a5:9f:29:d1:6e:5f:ae:13:7a:60:
a2:15:22:22:a8:d9:de:8f:46:d2:aa:a4:52:fb:ef:23:02:25:
71:0d:de:3c:3e:b4:36:da:92:ab:45:5a:2a:14:f6:f7:ce:cc:
55:98:0c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:54 2024 by rpki-client on console-ams.rpki-client.org