Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147DD1/0ADE96D8D06311EA897C0513C4F9AE02/58C54052C08C11EC93F0B454C4F9AE02.roa
File: 58C54052C08C11EC93F0B454C4F9AE02.roa (raw, json)
Hash identifier: tAhEvorI7w1DH/Xm3GhqMPMCoqYSp25tuJISM3pR32Q=
Subject key identifier: D5:65:2F:26:F6:51:50:A3:87:97:99:8E:57:85:B1:3A:29:4E:9B:8D
Certificate issuer: /CN=A9147DD1/serialNumber=FE2AF30D7AE2BDC160E61B77F0B6522E9B268CB9
Certificate serial: 06BB
Authority key identifier: FE:2A:F3:0D:7A:E2:BD:C1:60:E6:1B:77:F0:B6:52:2E:9B:26:8C:B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_irzDXrivcFg5ht38LZSLpsmjLk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147DD1/0ADE96D8D06311EA897C0513C4F9AE02/58C54052C08C11EC93F0B454C4F9AE02.roa
Signing time: Thu 04 May 2023 23:40:14 +0000
ROA not before: Thu 04 May 2023 23:40:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 133736
IP address blocks: 103.61.128.0/24 maxlen: 24
103.61.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1723 (0x6bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147DD1/serialNumber=FE2AF30D7AE2BDC160E61B77F0B6522E9B268CB9
Validity
Not Before: May 4 23:40:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6454425d-367b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:91:b1:ac:ae:5a:28:38:fc:0a:b6:94:75:5f:
26:a5:ee:ea:94:d4:02:f2:3d:60:ce:0f:e5:5f:a7:
e0:7e:67:f2:9f:99:d8:75:cf:32:a4:1c:7d:dd:d0:
8a:64:d4:fb:e6:38:14:5c:c1:e5:cd:48:37:ac:b5:
8b:0c:e9:28:ab:84:2b:f7:9d:23:a8:51:6a:4d:1c:
01:2c:ea:79:f8:91:38:d6:d0:bf:80:10:0c:7f:ca:
0d:07:48:03:74:19:2f:d9:fc:21:00:64:bd:ed:0a:
84:d1:b2:63:5a:cf:89:83:a8:44:bb:13:a6:82:de:
b9:5f:5d:d0:5a:ca:e1:f4:15:fb:b2:f2:1e:bb:9f:
cd:6f:1b:d6:37:28:e2:07:2b:ab:b2:89:7c:d3:02:
7f:eb:a5:4c:44:be:ca:28:93:d5:d6:6a:32:b3:b7:
48:b8:9d:63:7e:20:fd:42:10:ed:0c:4a:94:5d:b3:
19:7e:1d:c1:03:45:21:c7:37:5a:ae:59:1e:55:73:
b3:1d:83:fc:5e:24:32:fd:9a:fd:c2:45:02:2d:38:
ca:42:2d:83:34:fc:34:2c:82:dd:12:e9:e3:74:64:
5e:8e:4d:d8:61:90:4c:e0:37:34:a4:6f:72:61:b2:
02:e5:cb:45:c0:be:8c:47:a4:2f:ea:da:a3:e6:b7:
ff:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:65:2F:26:F6:51:50:A3:87:97:99:8E:57:85:B1:3A:29:4E:9B:8D
X509v3 Authority Key Identifier:
keyid:FE:2A:F3:0D:7A:E2:BD:C1:60:E6:1B:77:F0:B6:52:2E:9B:26:8C:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147DD1/0ADE96D8D06311EA897C0513C4F9AE02/_irzDXrivcFg5ht38LZSLpsmjLk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_irzDXrivcFg5ht38LZSLpsmjLk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147DD1/0ADE96D8D06311EA897C0513C4F9AE02/58C54052C08C11EC93F0B454C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.61.128.0/24
103.61.130.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:2f:86:66:54:95:72:48:a5:f1:0c:a0:fb:74:51:70:44:dd:
6f:35:b1:dc:c9:9f:f7:9e:67:99:04:cc:23:a3:21:8f:43:50:
8d:66:ea:0d:ae:24:bc:7d:af:6e:d5:d9:66:57:ea:6c:36:73:
83:ca:f6:aa:11:3c:31:df:71:8e:fe:0a:2c:83:72:df:d4:4b:
48:f7:2f:7e:55:16:d5:ab:d8:89:53:75:f3:7e:c2:a2:81:6b:
f2:a2:89:30:9d:22:ca:6f:28:42:fb:8c:21:bb:8d:1b:98:e7:
e0:75:5f:46:4d:37:c3:e3:0f:f2:9d:07:0f:d7:b5:50:e7:8c:
f3:8e:df:12:5e:11:1c:25:c2:57:79:b0:fb:ee:47:59:d5:00:
a3:63:76:0c:75:67:85:4d:ce:0c:b1:c2:3f:1e:df:36:a9:81:
3e:a0:d2:f3:99:70:18:41:b9:45:c6:1e:1b:f1:5f:66:f3:b5:
27:7f:43:d4:a8:56:5b:0e:e7:bb:2c:af:12:aa:ac:cb:8c:8d:
52:d5:4c:7e:da:f1:8c:91:8d:d9:0e:26:22:64:67:cb:78:ad:
84:ee:31:a3:eb:c9:59:1e:07:1f:04:c5:bf:02:a7:77:72:c6:
30:64:f8:7d:49:cd:3b:a5:6f:4d:4a:da:c2:d9:f2:99:85:dc:
b9:e1:23:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 22 14:40:43 2023 by rpki-client on console-fra.rpki-client.org