Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91191EB/ECF0F7FEC53111E785E4C147C4F9AE02/E911DB4AC2ED11EBB454D45BC4F9AE02.roa
File: E911DB4AC2ED11EBB454D45BC4F9AE02.roa (raw, json)
Hash identifier: Q/kwh9F9yHC7bse1FhBIO9W2lzNgs6POOwWXKnAMKxM=
Subject key identifier: E5:DF:07:18:CD:7B:6E:5E:B0:5E:21:2E:E5:CA:B7:BA:0A:04:E9:43
Certificate issuer: /CN=A91191EB/serialNumber=94A3D34E187564DC73C9F83196A38312EC822308
Certificate serial: 128E
Authority key identifier: 94:A3:D3:4E:18:75:64:DC:73:C9:F8:31:96:A3:83:12:EC:82:23:08
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKPTThh1ZNxzyfgxlqODEuyCIwg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91191EB/ECF0F7FEC53111E785E4C147C4F9AE02/E911DB4AC2ED11EBB454D45BC4F9AE02.roa
Signing time: Tue 03 Aug 2021 05:34:57 +0000
ROA not before: Tue 03 Aug 2021 05:34:57 +0000
ROA not after: Mon 31 Oct 2022 00:00:00 +0000
asID: 4842
IP address blocks: 103.96.148.0/23 maxlen: 23
103.96.150.0/24 maxlen: 24
103.96.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4750 (0x128e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91191EB/serialNumber=94A3D34E187564DC73C9F83196A38312EC822308
Validity
Not Before: Aug 3 05:34:57 2021 GMT
Not After : Oct 31 00:00:00 2022 GMT
Subject: CN=6108d581-61bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1c:c0:d6:0a:a1:32:ff:1f:03:d5:8a:06:b6:
09:62:dd:8e:1f:7d:e8:39:e7:83:72:0a:7e:98:dd:
0c:8b:72:dc:f7:7b:16:d3:f4:53:46:f9:2e:78:ce:
4b:b4:24:83:2d:5e:e7:34:87:89:d6:be:c6:42:f3:
09:59:41:c5:42:51:53:43:28:7a:40:3e:52:ff:51:
78:06:39:bf:9a:14:7b:b7:37:15:ab:0b:02:d6:84:
e5:c5:10:ad:55:24:19:4e:6d:02:d1:8a:ff:9b:1a:
05:b9:2d:12:3c:3d:79:44:0a:41:bf:da:a0:9e:bb:
bd:97:b6:7d:da:f0:ed:34:3a:65:fa:76:0d:3c:95:
e9:6a:d0:3a:bd:c7:a6:02:79:60:cb:0f:80:3e:82:
01:ae:37:9c:52:fb:bd:26:39:5f:be:31:41:78:a6:
d0:28:0c:f7:e0:05:ae:b8:5d:9a:d2:8e:8f:60:b5:
be:82:7b:1a:1d:a7:82:59:9e:25:cf:d5:2c:b1:d3:
a6:9c:fb:85:eb:d3:1f:fa:13:14:75:bc:55:4b:6a:
9b:e1:47:e8:0f:c5:be:57:19:6b:7c:61:b9:38:77:
65:04:ab:07:48:33:52:a5:20:68:4d:11:95:ab:23:
65:1d:e5:f9:07:0b:d9:11:29:27:d2:34:7c:30:a2:
44:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:DF:07:18:CD:7B:6E:5E:B0:5E:21:2E:E5:CA:B7:BA:0A:04:E9:43
X509v3 Authority Key Identifier:
keyid:94:A3:D3:4E:18:75:64:DC:73:C9:F8:31:96:A3:83:12:EC:82:23:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91191EB/ECF0F7FEC53111E785E4C147C4F9AE02/lKPTThh1ZNxzyfgxlqODEuyCIwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKPTThh1ZNxzyfgxlqODEuyCIwg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91191EB/ECF0F7FEC53111E785E4C147C4F9AE02/E911DB4AC2ED11EBB454D45BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.96.148.0/22
Signature Algorithm: sha256WithRSAEncryption
54:93:29:de:51:e5:6d:ab:96:d5:04:46:1f:53:6b:45:77:dd:
07:6e:b1:69:0c:8b:00:e5:32:cf:2c:af:5b:22:5e:8b:f4:03:
a5:ae:61:5a:51:33:95:71:71:4e:68:dc:25:3e:f1:11:7f:87:
76:94:a2:64:c9:f9:d6:89:30:0b:0c:9a:fa:36:6b:36:a0:96:
df:ab:d4:65:6e:f9:a6:9e:30:25:ed:7d:b1:81:a1:a6:96:3a:
c7:cd:7e:f0:c9:94:07:02:95:b2:21:0d:f0:8e:74:1e:f9:7d:
11:74:55:5e:c2:00:d6:5b:6a:7b:17:95:d3:6e:dc:2c:74:96:
64:f8:33:bb:a1:85:a3:1f:70:8e:5f:b2:d9:80:55:dd:c2:4f:
e2:a5:ce:b3:e6:d9:eb:dd:44:3d:dd:6e:6e:48:63:28:97:8f:
90:26:aa:0e:94:e6:58:ec:f0:6d:30:61:bd:a5:e2:b3:f4:f5:
29:71:ae:88:63:b1:85:fa:14:0a:1b:06:ab:2d:8c:27:79:94:
fd:81:84:9c:ea:02:20:3c:3c:e4:33:16:d3:20:9d:47:32:21:
a7:f6:80:be:62:88:50:04:8f:b9:18:38:c7:a9:55:fe:66:c0:
8f:11:81:e0:a5:c9:59:a2:eb:9e:75:a4:57:30:a3:49:65:9e:
4e:62:98:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:36 2023 by rpki-client on console-fra.rpki-client.org