Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8D77/FAEB98A858F511ECA901D422C4F9AE02/9172D7F858F811EC96924425C4F9AE02.roa
File: 9172D7F858F811EC96924425C4F9AE02.roa (raw, json)
Hash identifier: AMevcq0eFsAfofS5vVYc+Bj6JMP72JS634hIYE4GP0I=
Subject key identifier: A0:28:06:31:B2:39:AC:61:8A:71:B9:5F:6F:3B:4F:07:0C:B6:59:11
Certificate issuer: /CN=A91A8D77/serialNumber=F83DB437A9D99943646183A2A0DFEC81A23D3A09
Certificate serial: 39
Authority key identifier: F8:3D:B4:37:A9:D9:99:43:64:61:83:A2:A0:DF:EC:81:A2:3D:3A:09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-D20N6nZmUNkYYOioN_sgaI9Ogk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8D77/FAEB98A858F511ECA901D422C4F9AE02/9172D7F858F811EC96924425C4F9AE02.roa
Signing time: Mon 03 Jan 2022 16:22:32 +0000
ROA not before: Mon 03 Jan 2022 16:22:32 +0000
ROA not after: Fri 31 Mar 2023 00:00:00 +0000
asID: 136800
IP address blocks: 103.146.88.0/23 maxlen: 23
103.146.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57 (0x39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8D77/serialNumber=F83DB437A9D99943646183A2A0DFEC81A23D3A09
Validity
Not Before: Jan 3 16:22:32 2022 GMT
Not After : Mar 31 00:00:00 2023 GMT
Subject: CN=61d322c7-9b55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b7:de:66:87:f7:93:75:62:96:48:d4:56:16:
7f:c7:b3:bd:4a:38:16:c1:e9:ef:27:ba:1a:c1:7b:
4f:21:db:3f:f1:1d:f0:55:35:36:b4:00:90:e5:43:
19:46:ba:a7:59:89:60:99:84:a4:5f:ff:91:18:00:
3a:dc:7f:f9:eb:36:eb:50:b6:e7:1c:3d:ed:f1:c4:
cf:30:de:cc:7c:ab:7a:2b:34:e8:82:99:89:15:5c:
be:53:05:da:19:ef:4d:be:d0:71:3d:de:3a:c5:d8:
a0:7d:58:f3:be:88:c9:24:51:11:ca:76:67:be:28:
c7:6a:4a:ff:2c:92:52:41:78:02:b3:cc:7d:49:1b:
68:8c:34:16:8e:18:e4:dd:8c:04:93:b1:f5:60:91:
f0:bb:5f:a5:56:df:eb:07:3e:16:ae:db:66:64:c3:
f1:2f:9d:fe:b7:02:33:82:52:3f:c8:21:5f:f9:00:
43:28:e3:b5:fa:f0:08:75:29:f7:9c:0c:d1:05:25:
4c:0a:3a:46:78:f4:92:22:39:e0:2f:5d:95:9f:71:
d8:c1:af:c5:49:ad:93:0a:66:6d:cd:e2:eb:03:4f:
af:ac:68:81:61:86:86:d6:3e:2f:bd:1f:d8:54:9e:
e7:a5:d1:84:c5:e9:8c:11:f2:6e:78:41:9b:63:fb:
a6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:28:06:31:B2:39:AC:61:8A:71:B9:5F:6F:3B:4F:07:0C:B6:59:11
X509v3 Authority Key Identifier:
keyid:F8:3D:B4:37:A9:D9:99:43:64:61:83:A2:A0:DF:EC:81:A2:3D:3A:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8D77/FAEB98A858F511ECA901D422C4F9AE02/-D20N6nZmUNkYYOioN_sgaI9Ogk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-D20N6nZmUNkYYOioN_sgaI9Ogk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8D77/FAEB98A858F511ECA901D422C4F9AE02/9172D7F858F811EC96924425C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.146.88.0/23
Signature Algorithm: sha256WithRSAEncryption
98:2d:e9:15:aa:46:f2:b6:b4:2c:e8:c2:38:1c:4c:ff:d6:7e:
b4:96:19:31:40:2f:6f:65:e9:e8:2b:47:d7:c6:59:cf:b8:4d:
29:f0:d0:19:28:35:b9:9b:19:c7:3c:ff:1a:41:56:ae:46:93:
4c:d5:03:35:cf:88:6b:0e:1a:09:40:18:58:7a:e5:e4:19:cd:
88:36:b2:88:d7:7d:48:3b:4f:5b:0e:29:ce:04:ef:78:2f:c8:
25:90:0f:a3:77:51:c2:ee:81:b7:58:6f:2d:0a:95:d2:65:bf:
ee:9a:d1:63:03:67:0c:3e:3f:4c:1e:89:f6:43:44:36:eb:cf:
4e:9c:4c:08:26:a0:6f:f4:7a:0d:7b:46:49:5f:bd:86:e7:19:
a8:15:78:36:bc:0e:a4:70:4f:0e:dc:21:92:0c:5a:f1:28:b9:
25:64:48:0b:d5:4d:4e:fb:fa:74:6e:7e:67:72:68:da:01:61:
86:b8:45:02:16:95:28:18:60:c4:28:fc:8f:f0:60:39:bb:d8:
c2:57:f0:4b:d3:47:72:83:6b:b1:6e:29:7d:78:83:7e:80:4a:
76:1d:93:32:00:19:3c:54:c6:a5:c8:f7:56:ad:83:73:65:5b:
eb:cf:d2:5e:cd:d0:f0:0b:6a:ab:5b:0a:df:6c:46:87:92:3e:
69:46:17:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:55 2024 by rpki-client on console-ams.rpki-client.org