Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91953C5/B20CA31EEEBC11EBBD8DF829C4F9AE02/623992B2F37011EB90C40A66C4F9AE02.roa
File: 623992B2F37011EB90C40A66C4F9AE02.roa (raw, json)
Hash identifier: 2pKnpHHMwBoS0HnU4rATwa62Cx0FI7wbFXqnp21ghOI=
Subject key identifier: 2C:45:46:A2:FC:25:EE:06:2D:6B:F6:BA:30:0D:CE:6C:A2:42:57:DF
Certificate issuer: /CN=A91953C5/serialNumber=4EE8E8AB72BD6B9F28D9BA39EAC289482DF08E2B
Certificate serial: 11
Authority key identifier: 4E:E8:E8:AB:72:BD:6B:9F:28:D9:BA:39:EA:C2:89:48:2D:F0:8E:2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tujoq3K9a58o2bo56sKJSC3wjis.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91953C5/B20CA31EEEBC11EBBD8DF829C4F9AE02/623992B2F37011EB90C40A66C4F9AE02.roa
Signing time: Mon 02 Aug 2021 09:02:38 +0000
ROA not before: Mon 02 Aug 2021 09:02:38 +0000
ROA not after: Thu 31 Mar 2022 00:00:00 +0000
asID: 19905
IP address blocks: 103.254.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17 (0x11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91953C5/serialNumber=4EE8E8AB72BD6B9F28D9BA39EAC289482DF08E2B
Validity
Not Before: Aug 2 09:02:38 2021 GMT
Not After : Mar 31 00:00:00 2022 GMT
Subject: CN=6107b4ad-e86b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:28:4b:93:22:37:51:d0:02:bd:8b:b8:bd:b4:
30:49:b7:e0:02:36:99:5a:e7:8a:a8:35:0a:16:4f:
0c:74:74:33:24:0a:03:b0:91:36:c3:f9:1c:6f:ec:
bd:ea:51:12:12:0f:fd:02:de:bf:b9:04:77:ec:70:
0c:b8:b6:de:1f:6a:f2:9d:9b:44:a1:42:a4:d2:b9:
16:94:81:fe:1e:20:6f:ef:87:d6:74:f9:82:70:e8:
d4:0f:c5:4e:9d:de:bd:5b:26:7b:40:3e:3a:d5:af:
65:80:5a:bc:db:b1:84:cb:dd:47:fc:d5:64:5a:74:
64:cf:19:16:bf:22:ef:91:c6:e8:62:eb:7f:75:42:
fb:0c:4d:92:b0:91:ad:4f:21:22:11:f1:0b:c8:55:
c5:c5:3b:69:c8:37:59:e1:e7:28:c1:43:44:85:59:
90:57:28:c8:bc:c1:7a:df:0b:22:0b:e2:c6:5c:8a:
26:86:6c:a1:d5:7f:ab:71:69:14:d7:a1:03:35:5c:
ee:06:fe:92:05:d5:14:1e:5a:4e:0c:1a:a5:40:f8:
6b:94:91:1d:49:48:53:b0:7c:b0:72:41:8e:e2:e1:
8a:50:53:8e:c8:00:a4:9e:97:0f:42:d7:17:2a:d0:
91:9d:02:83:eb:c8:7a:44:7f:bc:0a:0d:c1:b9:9b:
dc:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:45:46:A2:FC:25:EE:06:2D:6B:F6:BA:30:0D:CE:6C:A2:42:57:DF
X509v3 Authority Key Identifier:
keyid:4E:E8:E8:AB:72:BD:6B:9F:28:D9:BA:39:EA:C2:89:48:2D:F0:8E:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91953C5/B20CA31EEEBC11EBBD8DF829C4F9AE02/Tujoq3K9a58o2bo56sKJSC3wjis.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tujoq3K9a58o2bo56sKJSC3wjis.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91953C5/B20CA31EEEBC11EBBD8DF829C4F9AE02/623992B2F37011EB90C40A66C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.254.231.0/24
Signature Algorithm: sha256WithRSAEncryption
01:d8:0d:fe:03:fa:cb:47:60:5b:96:97:61:90:2e:05:a8:14:
9b:35:b7:c8:17:db:06:28:e3:e5:a2:08:29:c6:6c:ab:d7:48:
ae:6b:b4:17:cb:6d:ff:c0:de:fc:e5:d8:07:e8:0f:b0:e4:50:
1b:5f:b7:8a:b1:ff:93:3e:23:0c:f5:aa:c1:1c:b1:c8:ad:51:
5e:5c:2f:77:3a:50:96:86:a4:21:61:1f:9c:85:66:51:4d:75:
33:fa:48:d6:ac:01:eb:e3:c0:2d:14:a5:42:06:38:7b:58:88:
b4:c3:7d:e1:ed:20:f9:ee:62:c2:8b:2c:6d:d3:06:af:28:44:
9d:a6:2d:57:02:0b:f1:c3:ca:af:02:3a:9c:9c:97:0c:53:46:
06:f9:ea:2b:73:6e:c3:fc:8b:db:19:11:31:fc:a8:a4:91:78:
b8:5a:ed:98:95:25:1c:3e:2e:14:81:8c:98:72:f6:96:a9:e3:
1f:4d:0a:45:e4:56:b6:48:99:39:54:7f:08:83:06:62:25:db:
5e:36:1f:8e:47:3b:95:dc:69:e2:06:51:1d:ba:4a:c1:b6:53:
5c:ca:e5:75:2e:d0:78:ae:8d:1d:11:6a:f4:98:25:a3:f7:43:
42:03:67:9b:47:bf:98:1a:93:d5:ef:7d:01:b3:ce:3f:87:b7:
1a:55:9a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:34 2024 by rpki-client on console-fra.rpki-client.org