Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/D380BC782CEE11EB91841C7EC4F9AE02.roa
File: D380BC782CEE11EB91841C7EC4F9AE02.roa (raw, json)
Hash identifier: dgTc6yWPoJPEzfasril40SdYwzch0rH4S4W7N9JrLxU=
Subject key identifier: EA:67:F5:27:B2:EB:ED:C2:86:1E:F0:16:B7:B7:2B:AD:7F:1B:07:98
Certificate issuer: /CN=A91A6131/serialNumber=7B059CCC60BAAAFCF6F141216EFDD68E870C2551
Certificate serial: 0676
Authority key identifier: 7B:05:9C:CC:60:BA:AA:FC:F6:F1:41:21:6E:FD:D6:8E:87:0C:25:51
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewWczGC6qvz28UEhbv3WjocMJVE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/D380BC782CEE11EB91841C7EC4F9AE02.roa
Signing time: Fri 28 Jul 2023 22:59:23 +0000
ROA not before: Fri 28 Jul 2023 22:59:23 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 60781
IP address blocks: 103.238.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1654 (0x676)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6131/serialNumber=7B059CCC60BAAAFCF6F141216EFDD68E870C2551
Validity
Not Before: Jul 28 22:59:23 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=64c4484b-b0c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cd:db:1b:ab:a0:7d:a2:75:de:54:eb:d8:8c:
33:a0:b2:e9:19:c7:2e:6b:58:e7:ff:b0:25:bd:62:
f7:f2:5c:63:07:60:ba:81:82:ce:c3:4b:09:8b:2e:
e7:16:32:4c:b4:56:bf:77:f3:6b:b4:bb:b7:7a:3c:
a3:37:a3:2b:96:00:24:99:fc:c8:bc:cb:78:1f:8e:
e8:0f:36:c1:37:ac:dc:09:8d:9e:14:ad:eb:7a:8c:
5a:6a:c7:3c:ed:f7:87:7a:82:eb:66:dd:02:aa:b5:
19:7e:d0:fe:ea:81:14:d4:7a:c7:9b:20:9e:92:95:
32:ed:66:7b:f8:4a:cd:96:fb:92:bd:88:0f:81:da:
2a:85:cb:0b:fa:16:d1:9f:d0:20:6b:16:b8:0e:05:
04:a0:33:95:a4:8b:0f:0f:51:fc:4d:8e:e1:3a:e2:
65:a9:e9:e8:19:d3:f7:3b:78:de:1f:f8:29:cb:e9:
4c:ca:44:da:9f:17:39:ea:f5:17:3a:eb:6d:a2:60:
59:77:a7:15:21:c6:66:3a:3b:02:bf:8f:88:fb:6b:
1d:7c:e7:64:71:90:44:8f:ba:7f:7a:b5:20:c1:ba:
a3:27:74:85:ea:7a:09:f4:9b:49:5b:8f:b7:be:94:
90:df:c9:16:dd:4b:c0:34:bb:09:ba:8a:0b:fd:23:
ab:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:67:F5:27:B2:EB:ED:C2:86:1E:F0:16:B7:B7:2B:AD:7F:1B:07:98
X509v3 Authority Key Identifier:
keyid:7B:05:9C:CC:60:BA:AA:FC:F6:F1:41:21:6E:FD:D6:8E:87:0C:25:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/ewWczGC6qvz28UEhbv3WjocMJVE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewWczGC6qvz28UEhbv3WjocMJVE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/D380BC782CEE11EB91841C7EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.238.128.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:20:7b:93:b2:7a:7a:e1:89:3a:38:31:96:33:d0:b1:00:3f:
54:c3:ea:0d:d7:6d:e6:54:ba:cf:06:47:2c:25:bd:df:da:67:
da:d2:bd:e6:df:9d:ba:b5:02:87:a3:d2:45:83:8b:c8:81:09:
f8:4a:53:7f:d6:80:3c:3d:82:d4:9e:e9:8d:88:d3:bd:ed:1b:
d1:90:e2:06:f2:8c:93:b9:8b:7f:2c:0e:e2:62:ae:2e:6e:50:
65:47:6e:44:fa:5e:91:d2:86:6e:f5:3f:54:d5:1c:f3:8f:1f:
31:39:91:29:db:28:12:33:32:be:ce:36:2c:06:1a:b4:dc:ca:
25:3e:3f:2e:e4:a2:1a:1d:20:37:1a:21:c1:8e:d5:5f:85:ce:
6f:44:88:bb:51:ed:eb:8f:44:aa:15:fc:cf:d5:9c:68:5d:1b:
40:bd:e9:8a:c2:2b:9e:90:ad:d1:91:4e:58:df:a9:8d:de:8a:
2b:63:f8:bd:c4:40:f8:29:4f:8d:70:3f:71:f0:e0:f8:b7:2c:
0f:93:3f:96:95:6e:a3:63:4d:a4:c3:4d:69:ef:e7:31:72:84:
c4:04:cc:d1:38:79:9e:72:fa:1c:dc:d3:df:05:7d:2b:f0:4d:
48:91:3d:fd:4c:a6:94:c7:e7:b4:01:01:4d:5a:02:b9:41:fc:
20:8c:4b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 17 23:38:31 2023 by rpki-client on console-fra.rpki-client.org