Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91479C6/421CBC4606D411EA873A5E4BC4F9AE02/FCD23806031511EC8290F10DC4F9AE02.roa
File: FCD23806031511EC8290F10DC4F9AE02.roa (raw, json)
Hash identifier: 2sXbreqNqkbXXNu1b9L0kVgl2hxwYO98zOYExfUdZnA=
Subject key identifier: 43:84:23:B8:FC:4C:0F:76:1A:24:B7:52:B4:A3:11:9F:D3:DF:DF:2B
Certificate issuer: /CN=A91479C6/serialNumber=51D22384627D29026FB440B21C408D5653C8A724
Certificate serial: 076F
Authority key identifier: 51:D2:23:84:62:7D:29:02:6F:B4:40:B2:1C:40:8D:56:53:C8:A7:24
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdIjhGJ9KQJvtECyHECNVlPIpyQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91479C6/421CBC4606D411EA873A5E4BC4F9AE02/FCD23806031511EC8290F10DC4F9AE02.roa
Signing time: Sun 22 Aug 2021 06:55:51 +0000
ROA not before: Sun 22 Aug 2021 06:55:51 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 136482
IP address blocks: 103.89.244.0/23 maxlen: 23
103.89.244.0/24 maxlen: 24
103.89.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1903 (0x76f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91479C6/serialNumber=51D22384627D29026FB440B21C408D5653C8A724
Validity
Not Before: Aug 22 06:55:51 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=6121f4f7-b6d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d9:b6:3c:4e:6b:0a:fa:84:c7:04:61:24:b9:
21:9f:6e:2d:42:52:14:13:74:96:93:97:8b:a5:d0:
dc:f9:27:3b:f9:5d:1a:c9:39:0d:56:af:17:77:76:
1c:90:ba:d0:fa:66:4a:e6:4a:5b:76:f8:b4:81:15:
95:a1:39:04:2c:b2:c7:2e:da:ba:6e:e2:1c:cb:63:
42:86:d6:66:c3:42:c8:b8:33:c1:b2:98:78:4a:47:
7c:15:7b:e2:90:dd:26:27:f2:9c:9a:f6:4e:50:14:
16:34:e5:dd:2f:73:57:f2:e8:ee:52:f3:64:17:89:
e6:1c:90:97:7c:11:01:10:21:d4:0e:ad:58:2d:b6:
0d:25:11:96:d1:63:74:a5:26:14:3c:c1:87:0c:88:
43:33:14:e5:94:c4:cf:2d:9b:f5:ff:19:df:56:77:
7e:99:d5:97:07:73:ba:62:25:54:03:97:24:a8:d3:
53:06:ec:f8:77:f5:cc:a5:ee:72:33:99:f0:ee:b0:
b3:b8:41:f7:a3:ac:10:a4:6d:ae:2e:0c:06:87:b3:
de:00:65:b8:83:6d:52:f8:bd:b9:c5:e0:9b:8b:d0:
f6:a5:87:bf:2e:b2:72:bc:45:90:e2:46:8d:d6:f4:
5b:ba:a0:fb:e3:38:6e:61:c1:7b:e9:c7:cc:94:24:
c9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:84:23:B8:FC:4C:0F:76:1A:24:B7:52:B4:A3:11:9F:D3:DF:DF:2B
X509v3 Authority Key Identifier:
keyid:51:D2:23:84:62:7D:29:02:6F:B4:40:B2:1C:40:8D:56:53:C8:A7:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91479C6/421CBC4606D411EA873A5E4BC4F9AE02/UdIjhGJ9KQJvtECyHECNVlPIpyQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdIjhGJ9KQJvtECyHECNVlPIpyQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91479C6/421CBC4606D411EA873A5E4BC4F9AE02/FCD23806031511EC8290F10DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.89.244.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:95:8f:f8:9c:e6:bd:56:f3:e8:da:cf:12:62:96:67:58:86:
25:75:d0:f0:0a:f0:78:dc:38:1d:fa:6f:5f:b5:8f:e5:43:39:
39:91:6b:a2:e2:4e:ec:a6:ba:8c:df:4b:78:16:b2:75:28:f9:
a7:ac:4e:61:a7:fa:1f:75:a0:3d:bd:84:24:a3:c6:b1:9d:75:
1d:e0:c0:82:5d:68:c5:a5:83:9d:4d:56:4d:23:78:0e:f0:cb:
4f:49:ac:ba:98:d7:a9:e2:38:2a:1e:1a:14:8a:66:09:68:33:
c0:02:f3:46:70:24:10:ca:4c:b0:bf:aa:dc:06:07:cf:d0:b1:
35:55:7c:99:30:01:32:1c:3c:81:ff:5c:dc:76:3d:de:f6:16:
dc:8c:20:00:7d:bf:97:20:d8:77:24:8a:9d:6d:a0:67:d0:60:
4c:3b:4a:d8:5f:e3:c2:5c:d9:d3:3f:44:b5:19:d8:46:25:6e:
7a:0a:19:ad:e3:0a:8d:14:63:82:82:92:9a:d9:ae:bf:6e:2a:
ca:7c:fb:e3:02:59:29:0f:51:be:f0:e9:9d:f0:ea:37:7d:00:
46:ef:5f:dc:61:90:66:20:80:b1:e3:b0:82:b9:e3:79:c7:fb:
fe:bf:ba:5d:ea:49:a3:21:c2:6f:52:83:24:14:c9:69:b9:42:
c1:10:8e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:40 2023 by rpki-client on console-fra.rpki-client.org