Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154B30/EE394F4A1CFD11EBB38D8279C4F9AE02/8959C5A81CFF11EB9E46DD7DC4F9AE02.roa
File: 8959C5A81CFF11EB9E46DD7DC4F9AE02.roa (raw, json)
Hash identifier: HJ4f7Z9UQTkbCaQnxhc5m0nC3voQmUSnoJNiYlPjXvk=
Subject key identifier: 1C:BA:9C:7E:3C:D4:BC:3B:5E:AF:77:97:5B:23:98:6B:91:1D:34:96
Certificate issuer: /CN=A9154B30/serialNumber=1D6F1CCC8A585FD1D01DC2FFBDB1B62D8A3B5976
Certificate serial: 87
Authority key identifier: 1D:6F:1C:CC:8A:58:5F:D1:D0:1D:C2:FF:BD:B1:B6:2D:8A:3B:59:76
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HW8czIpYX9HQHcL_vbG2LYo7WXY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154B30/EE394F4A1CFD11EBB38D8279C4F9AE02/8959C5A81CFF11EB9E46DD7DC4F9AE02.roa
Signing time: Wed 06 Jan 2021 00:46:55 +0000
ROA not before: Wed 06 Jan 2021 00:46:55 +0000
ROA not after: Thu 31 Mar 2022 00:00:00 +0000
asID: 138512
IP address blocks: 103.127.116.0/24 maxlen: 24
103.127.117.0/24 maxlen: 24
103.127.118.0/24 maxlen: 24
103.127.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135 (0x87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154B30/serialNumber=1D6F1CCC8A585FD1D01DC2FFBDB1B62D8A3B5976
Validity
Not Before: Jan 6 00:46:55 2021 GMT
Not After : Mar 31 00:00:00 2022 GMT
Subject: CN=5ff5087f-91c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:62:4b:cc:0d:c2:c3:24:43:90:bc:3e:f5:1e:
34:aa:30:3e:f4:c3:7e:b7:c7:13:cc:48:a2:93:03:
31:a7:59:91:fc:0f:57:e7:06:b5:a5:8c:3d:f7:0e:
23:b4:35:46:71:5b:6f:83:b6:40:69:11:88:d2:6c:
a2:91:be:0e:09:0b:1a:2c:92:67:17:8a:63:55:76:
7c:3e:e4:f0:fa:6e:d3:1a:42:c6:ec:f8:a9:23:86:
fe:99:ae:5d:4f:74:78:2d:a9:7a:95:e7:d4:60:f1:
d3:32:b0:07:28:47:15:58:2f:a9:73:b4:69:b1:5a:
71:dd:15:1d:d6:1e:b4:83:91:bf:b7:b8:f9:c0:49:
37:07:38:73:81:5e:f9:5d:ba:07:b9:c6:18:e6:4b:
2b:d5:0e:b7:da:81:c9:06:84:2f:fb:67:71:42:b5:
61:13:1f:4e:dd:87:77:56:37:20:3b:b2:de:a6:fb:
09:79:c5:55:6b:a2:5e:c9:a6:5a:df:f8:4d:e3:c3:
93:bd:b3:be:ea:5b:ba:74:ea:86:bd:94:c1:0b:2b:
9e:38:1f:8d:fb:f7:6b:a7:05:70:a1:78:dd:b1:fa:
92:f8:fb:ba:6c:8b:59:e4:7a:10:cc:ca:00:b8:89:
1b:17:ec:11:1d:89:c1:01:a8:3d:6d:5f:f1:f2:de:
2d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:BA:9C:7E:3C:D4:BC:3B:5E:AF:77:97:5B:23:98:6B:91:1D:34:96
X509v3 Authority Key Identifier:
keyid:1D:6F:1C:CC:8A:58:5F:D1:D0:1D:C2:FF:BD:B1:B6:2D:8A:3B:59:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154B30/EE394F4A1CFD11EBB38D8279C4F9AE02/HW8czIpYX9HQHcL_vbG2LYo7WXY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HW8czIpYX9HQHcL_vbG2LYo7WXY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154B30/EE394F4A1CFD11EBB38D8279C4F9AE02/8959C5A81CFF11EB9E46DD7DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.127.116.0/22
Signature Algorithm: sha256WithRSAEncryption
99:f5:8d:9b:e5:de:b8:c0:a8:57:ac:8b:4c:93:7e:ec:fa:70:
d2:65:66:da:9b:79:c9:88:fb:f6:05:4e:19:d9:ae:a0:1b:61:
bb:d6:1c:49:7c:a5:14:10:44:db:56:f8:cc:e5:f9:6a:40:b1:
59:45:ce:18:dc:eb:e2:d0:9f:20:08:24:e3:5e:8e:34:e6:50:
60:0d:5d:dd:2b:8d:bb:d1:7c:a3:60:20:6e:18:b3:81:05:8c:
de:4a:68:c6:29:ce:4b:2d:9e:74:51:65:23:61:ad:97:04:07:
81:2c:ae:bd:55:06:95:4f:0a:b6:2a:e0:29:70:47:65:cc:32:
e1:34:29:8c:1d:8e:9e:2a:16:b1:43:b5:1b:ce:eb:ea:38:4a:
ba:4e:46:b7:3b:56:2e:24:47:be:c8:16:ce:29:c8:63:ac:c3:
8e:c9:16:40:b1:75:48:0c:6e:9b:05:80:39:ae:13:60:84:11:
d1:6d:4b:2b:b0:96:dc:d3:b2:bd:79:f6:2c:e9:c2:9b:ce:4f:
97:ce:d4:70:7f:ed:a3:a8:b4:33:58:1b:81:ed:34:ea:6a:e4:
d5:1b:87:25:6c:2f:be:7c:e9:b2:8b:a1:de:79:96:2c:6a:9f:
ef:e3:63:50:bd:91:b5:50:89:e3:8d:24:67:2c:71:21:56:fa:
f1:cc:f0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:07 2024 by rpki-client on console-fra.rpki-client.org