Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91479C6/421CBC4606D411EA873A5E4BC4F9AE02/FBD1343E031511EC8290F10DC4F9AE02.roa
File: FBD1343E031511EC8290F10DC4F9AE02.roa (raw, json)
Hash identifier: P/Ttl/z/G6lD5Jg43LgKLngf/zESdNzBCk/dJnyoXCY=
Subject key identifier: C0:2C:F5:2D:7F:D5:39:DA:CD:C5:59:1C:A6:7F:5C:2B:2C:9B:BD:24
Certificate issuer: /CN=A91479C6/serialNumber=51D22384627D29026FB440B21C408D5653C8A724
Certificate serial: 0796
Authority key identifier: 51:D2:23:84:62:7D:29:02:6F:B4:40:B2:1C:40:8D:56:53:C8:A7:24
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdIjhGJ9KQJvtECyHECNVlPIpyQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91479C6/421CBC4606D411EA873A5E4BC4F9AE02/FBD1343E031511EC8290F10DC4F9AE02.roa
Signing time: Thu 09 Sep 2021 08:07:40 +0000
ROA not before: Thu 09 Sep 2021 08:07:40 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 134572
IP address blocks: 103.89.246.0/23 maxlen: 23
103.89.246.0/24 maxlen: 24
103.89.247.0/24 maxlen: 24
160.238.33.0/24 maxlen: 24
202.53.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1942 (0x796)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91479C6/serialNumber=51D22384627D29026FB440B21C408D5653C8A724
Validity
Not Before: Sep 9 08:07:40 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=6139c0cc-be99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:1a:dc:39:ac:d1:e4:3c:c4:c1:26:0d:22:f9:
aa:bf:90:70:26:82:f8:c3:f3:fe:7c:29:fb:50:94:
b5:a3:11:e9:99:60:5a:83:5d:59:4a:fc:ab:fd:04:
c3:51:32:4b:f7:f7:ed:73:00:f6:e2:d3:ba:b6:af:
15:d9:fe:a4:c2:37:d6:17:56:01:b7:52:38:48:4c:
5d:fd:37:c1:b4:cf:39:6f:54:d8:60:bc:8f:81:ce:
f7:bd:0a:59:5d:c1:8f:89:8f:f4:4f:71:cc:03:84:
72:bf:dc:59:05:9e:f3:fe:e2:cd:6b:91:fd:8f:a0:
92:81:f1:f4:27:e7:ef:8d:24:50:94:fe:14:ec:29:
83:6b:1c:d2:04:8e:b8:79:fa:fe:0c:5f:6a:5c:64:
55:b7:80:e4:ed:2f:f9:77:28:13:a3:32:ec:f5:9b:
73:df:da:73:2e:3b:6c:79:4f:6a:99:3a:58:d3:12:
da:05:fc:75:1c:1f:9b:cf:0b:a2:da:5f:bb:5f:a1:
b1:4f:c4:93:4a:fd:06:ff:e1:fd:ae:25:37:76:ec:
1e:53:9e:b1:45:91:f8:6e:ca:3e:ca:33:d0:09:86:
ac:6e:38:af:92:ff:ad:b8:6a:a9:03:41:23:2f:0d:
56:4a:75:40:18:64:e0:2f:c4:0e:c6:68:eb:23:4e:
67:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:2C:F5:2D:7F:D5:39:DA:CD:C5:59:1C:A6:7F:5C:2B:2C:9B:BD:24
X509v3 Authority Key Identifier:
keyid:51:D2:23:84:62:7D:29:02:6F:B4:40:B2:1C:40:8D:56:53:C8:A7:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91479C6/421CBC4606D411EA873A5E4BC4F9AE02/UdIjhGJ9KQJvtECyHECNVlPIpyQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdIjhGJ9KQJvtECyHECNVlPIpyQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91479C6/421CBC4606D411EA873A5E4BC4F9AE02/FBD1343E031511EC8290F10DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.89.246.0/23
160.238.33.0/24
202.53.131.0/24
Signature Algorithm: sha256WithRSAEncryption
28:09:d0:6b:68:27:29:b8:0d:c8:e5:87:59:c2:53:62:71:00:
c8:f6:ce:2f:97:90:cb:ec:62:4a:a8:0d:d2:52:25:8c:81:e0:
90:e1:c8:dd:11:12:7e:ce:08:85:29:ab:56:69:03:23:dd:67:
2e:80:d2:85:ca:7d:db:5c:43:d4:4c:7b:be:8e:ac:db:93:13:
03:b5:ed:c5:e1:0e:b5:9a:cb:22:99:e9:97:7a:10:83:b9:94:
75:ae:5e:cc:10:a6:c9:3a:57:cd:fd:06:ab:1d:57:d4:50:b8:
25:ba:f4:f6:49:8b:63:44:38:f3:a2:59:55:62:77:a2:e4:37:
0d:41:bb:5a:6d:66:47:29:89:c4:5d:5d:3a:4d:7d:b2:3c:36:
33:5e:7a:07:2c:93:0e:4e:a7:ab:55:08:46:9b:4b:6f:2a:5d:
26:3c:cb:ce:aa:e6:82:e1:19:30:da:40:ea:35:6e:63:59:f5:
af:9a:0c:f0:63:0f:9e:6f:43:db:62:f6:b9:d2:40:e9:48:81:
2c:f2:b2:e1:25:f5:ad:93:20:2d:9a:86:cf:e2:bd:21:87:b5:
99:48:29:06:e6:7b:fa:9d:07:8b:68:dd:57:80:ee:b6:42:d0:
26:43:87:e0:50:ac:35:1d:a3:9b:63:8a:3c:05:ee:82:86:86:
cc:73:d9:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:38 2023 by rpki-client on console-ams.rpki-client.org