Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB475/6E7424AA207011EEA9901416C4F9AE02/3FC52A82C0CF11EE97AF6E47C4F9AE02.roa
File: 3FC52A82C0CF11EE97AF6E47C4F9AE02.roa (raw, json)
Hash identifier: q9GJAH9dFVyFPkHHj75M0lei+hUmrGzQlf9+0F2y+EU=
Subject key identifier: 43:9F:4F:4A:D6:09:1E:D4:03:E6:E6:11:A7:56:C9:6C:A5:6F:7C:8C
Certificate issuer: /CN=A91CB475/serialNumber=DB94BD08C2DEFD39C74FC403935773A490D19B98
Certificate serial: 74
Authority key identifier: DB:94:BD:08:C2:DE:FD:39:C7:4F:C4:03:93:57:73:A4:90:D1:9B:98
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25S9CMLe_TnHT8QDk1dzpJDRm5g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB475/6E7424AA207011EEA9901416C4F9AE02/3FC52A82C0CF11EE97AF6E47C4F9AE02.roa
Signing time: Sat 03 Feb 2024 06:18:37 +0000
ROA not before: Sat 03 Feb 2024 06:18:37 +0000
ROA not after: Sat 01 Jun 2024 00:00:00 +0000
asID: 149024
IP address blocks: 103.176.224.0/23 maxlen: 23
103.176.224.0/24 maxlen: 24
103.176.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116 (0x74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB475/serialNumber=DB94BD08C2DEFD39C74FC403935773A490D19B98
Validity
Not Before: Feb 3 06:18:37 2024 GMT
Not After : Jun 1 00:00:00 2024 GMT
Subject: CN=65bddabc-cd3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f2:59:68:b4:3c:1c:ae:d0:7a:b8:75:5c:fa:
b5:6f:fb:23:55:31:7e:d3:0c:58:ab:de:84:7c:42:
12:51:f1:95:27:73:d2:79:b3:49:a4:3e:c8:4d:aa:
0e:cf:62:99:41:a9:17:12:d3:dd:12:1e:c3:43:9b:
ba:de:ec:ab:eb:95:45:19:f7:bc:c3:45:7d:58:bc:
c6:34:98:ea:97:af:89:5d:91:0a:15:8c:cd:b0:e8:
74:ac:ac:d8:3b:b7:38:3d:92:af:e8:9b:de:e4:d6:
4a:c2:93:80:44:ee:ef:ba:7f:85:c9:b2:6f:90:1d:
59:b0:de:be:69:c3:f3:0f:8c:5e:3a:4d:e8:1a:9a:
25:06:c7:f4:4c:5f:a6:fa:5c:24:87:bb:6f:99:3b:
c6:97:85:b6:fd:cd:0f:0a:55:a1:38:6b:3a:a3:d8:
55:ea:48:b7:b8:d9:70:8c:09:c9:79:3e:6f:1c:e1:
ba:55:55:5a:97:b9:c5:b4:48:ea:96:1d:06:92:d9:
78:e5:13:37:6a:7f:db:64:43:fa:be:e2:18:20:5e:
9e:be:32:1f:f4:4f:dc:a0:87:3e:45:9d:e5:7f:f9:
96:35:1f:74:03:d8:22:38:5a:59:28:8f:3f:51:3d:
48:8d:1e:b2:ca:e1:58:17:ac:7d:dd:bd:ee:ba:b0:
c1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:9F:4F:4A:D6:09:1E:D4:03:E6:E6:11:A7:56:C9:6C:A5:6F:7C:8C
X509v3 Authority Key Identifier:
keyid:DB:94:BD:08:C2:DE:FD:39:C7:4F:C4:03:93:57:73:A4:90:D1:9B:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB475/6E7424AA207011EEA9901416C4F9AE02/25S9CMLe_TnHT8QDk1dzpJDRm5g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25S9CMLe_TnHT8QDk1dzpJDRm5g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB475/6E7424AA207011EEA9901416C4F9AE02/3FC52A82C0CF11EE97AF6E47C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.176.224.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:1f:f2:e5:8b:d7:82:36:d4:5d:ac:73:73:1d:b2:8f:c7:89:
00:cd:81:6f:09:97:9c:7d:9c:c5:36:a1:de:cb:72:0d:5a:b9:
c3:57:93:29:a3:87:4e:c5:b2:eb:d8:99:c3:c7:8b:5d:d8:0a:
52:1b:bf:a3:4e:e5:11:8e:1b:75:68:ae:d4:4b:87:02:ec:c6:
8f:eb:a7:09:6a:e4:fa:99:3e:3b:ae:45:5b:de:6b:94:b8:74:
43:12:b5:4f:15:b9:71:73:0b:db:99:a1:8e:10:d9:4c:18:c1:
68:c0:b7:a4:3f:d9:fe:6e:ba:a0:ac:9e:15:0c:24:d7:30:7d:
7e:4d:8c:02:eb:6f:95:42:5c:7d:be:b9:fb:ea:f2:08:65:91:
9b:7a:9c:56:a3:4b:1a:2c:2a:66:a8:44:bc:54:0e:d6:06:72:
02:26:db:60:dc:6e:0a:9f:32:66:78:92:f0:50:01:01:0a:17:
75:47:37:3f:ea:bb:46:8a:46:1a:69:e9:d9:cb:10:e6:03:98:
12:cd:02:8c:8d:9d:c0:fd:32:74:a1:61:e7:9d:53:a6:f5:bc:
06:ea:05:a5:5b:f9:40:52:54:8b:9a:47:5e:38:bb:05:a2:7c:
f1:d0:35:9c:e6:d0:8d:4f:f1:0d:53:5d:8e:c1:ae:06:17:75:
6d:2a:5f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:41 2024 by rpki-client on console-fra.rpki-client.org