Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5675/27DFF290861C11EAA1EBC46DC4F9AE02/3ECEC40406CA11EEAF47D95BC4F9AE02.roa
File: 3ECEC40406CA11EEAF47D95BC4F9AE02.roa (raw, json)
Hash identifier: MH9jphRnbHY/wYMF7uMVvDvnVQN3yiL9CWcqpQs+inU=
Subject key identifier: 99:76:77:C1:88:34:DF:F4:F7:47:C1:26:96:BA:0F:03:54:74:A1:F7
Certificate issuer: /CN=A91F5675/serialNumber=15D0E35EB6D70F3EF30C6ADCE2D02B7B5AF9703F
Certificate serial: 0855
Authority key identifier: 15:D0:E3:5E:B6:D7:0F:3E:F3:0C:6A:DC:E2:D0:2B:7B:5A:F9:70:3F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FdDjXrbXDz7zDGrc4tAre1r5cD8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F5675/27DFF290861C11EAA1EBC46DC4F9AE02/3ECEC40406CA11EEAF47D95BC4F9AE02.roa
Signing time: Fri 09 Jun 2023 13:33:40 +0000
ROA not before: Fri 09 Jun 2023 13:33:40 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 4842
IP address blocks: 103.150.172.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2133 (0x855)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F5675/serialNumber=15D0E35EB6D70F3EF30C6ADCE2D02B7B5AF9703F
Validity
Not Before: Jun 9 13:33:40 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=64832a34-3863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:32:ed:25:b6:86:d9:fe:e5:f7:2a:64:03:39:
ab:87:f5:77:37:f0:40:f4:35:d0:44:ba:62:81:e7:
53:7d:98:14:2f:a6:50:8b:9b:dc:49:8e:d2:fd:83:
44:14:f4:c7:43:77:f0:bf:50:0b:40:f1:51:e3:6c:
c2:9e:5d:95:bf:c4:3a:6c:fa:5a:03:a6:1f:1a:43:
b1:14:0c:2d:5a:5a:8a:ed:d1:e6:83:14:fd:c7:05:
e6:3e:5e:b9:48:2b:a4:b5:9b:98:e7:d9:47:03:41:
6d:60:85:75:5f:05:3a:13:de:f1:ab:58:9b:f9:61:
c4:f8:44:68:f9:48:91:41:03:68:dc:5c:64:f6:c3:
9f:95:e8:38:63:d3:21:21:2d:64:72:86:4d:20:f8:
a4:9a:2d:ea:a9:04:37:4e:72:8d:37:c0:04:bf:db:
8b:ef:ec:2c:fa:bf:99:10:3e:1e:d3:bf:f6:2b:e4:
f4:84:06:89:a2:ad:1d:d3:9e:ae:7c:61:79:4f:ee:
a0:b6:5d:5b:c1:dc:0c:f6:5e:d5:f3:9a:c9:48:ec:
ac:97:36:3b:91:22:76:4d:c7:75:f4:f3:30:87:b6:
30:b0:1c:e5:76:90:2c:db:d2:25:15:fa:6c:38:57:
31:c7:5f:ab:c1:4d:2f:ec:ee:9c:e0:9a:3a:10:f5:
0b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:76:77:C1:88:34:DF:F4:F7:47:C1:26:96:BA:0F:03:54:74:A1:F7
X509v3 Authority Key Identifier:
keyid:15:D0:E3:5E:B6:D7:0F:3E:F3:0C:6A:DC:E2:D0:2B:7B:5A:F9:70:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F5675/27DFF290861C11EAA1EBC46DC4F9AE02/FdDjXrbXDz7zDGrc4tAre1r5cD8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FdDjXrbXDz7zDGrc4tAre1r5cD8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5675/27DFF290861C11EAA1EBC46DC4F9AE02/3ECEC40406CA11EEAF47D95BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.150.172.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:f4:c2:4e:0f:19:32:a8:18:27:12:e7:da:1a:f6:87:8d:d8:
25:c7:24:25:91:5b:71:83:30:1c:a7:d9:10:4f:11:97:7a:1b:
31:fc:17:08:e4:91:3a:69:4a:14:48:7c:35:d0:85:15:07:5d:
ce:94:89:41:be:cd:cd:dd:ba:8b:66:05:b2:71:e9:9f:a5:7a:
a8:44:5b:cf:c5:1c:59:2e:63:ab:21:92:ff:5c:0c:5e:e2:21:
9b:6b:d6:23:38:30:7b:d8:b1:d1:4c:b2:9c:d4:f0:8b:df:c6:
c4:7a:ad:3c:9d:5a:a2:f4:c4:2c:5b:79:a9:5c:98:59:81:e6:
6b:6f:e3:38:3c:05:2d:10:d8:e2:f1:b1:09:32:01:75:cc:be:
b8:c3:31:94:f9:e7:ae:78:a5:7c:15:b0:59:49:54:c2:38:4e:
32:3a:5c:71:9c:87:aa:c2:0b:21:e7:91:06:55:4c:81:18:2e:
7f:70:53:fb:f4:67:65:60:c6:11:b1:50:fa:5c:f7:47:4f:6c:
57:50:87:83:d7:db:bf:8e:a6:aa:ec:8c:dd:9b:86:6e:41:19:
99:fd:42:83:5a:99:fc:6b:8b:23:3c:e2:29:a8:c1:e2:38:99:
c0:cc:8a:af:ae:af:8d:ee:2f:be:7e:d0:6f:2e:c4:cc:70:64:
9c:c5:39:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:38 2024 by rpki-client on console-ams.rpki-client.org