Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8EE0/1FF1D850779D11EBA66F8078C4F9AE02/9C56EFDC779F11EBAF5DF00DC4F9AE02.roa
File: 9C56EFDC779F11EBAF5DF00DC4F9AE02.roa (raw, json)
Hash identifier: B1BHPscXqAzPGOhK3Pu2hMSAhNR4R2hHZ8ubg4K1LOc=
Subject key identifier: 1F:AF:C6:34:D1:2A:A6:80:62:45:1A:41:4E:17:AC:7D:FE:58:45:E6
Certificate issuer: /CN=A91B8EE0/serialNumber=0CC1AC8C7FC39DBDEF9C1839F42C634BE30DD64F
Certificate serial: 0255
Authority key identifier: 0C:C1:AC:8C:7F:C3:9D:BD:EF:9C:18:39:F4:2C:63:4B:E3:0D:D6:4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DMGsjH_Dnb3vnBg59CxjS-MN1k8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8EE0/1FF1D850779D11EBA66F8078C4F9AE02/9C56EFDC779F11EBAF5DF00DC4F9AE02.roa
Signing time: Fri 24 Dec 2021 01:39:55 +0000
ROA not before: Fri 24 Dec 2021 01:39:55 +0000
ROA not after: Thu 02 Mar 2023 00:00:00 +0000
asID: 135889
IP address blocks: 103.79.23.0/24 maxlen: 24
103.102.50.0/23 maxlen: 24
103.102.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 597 (0x255)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8EE0/serialNumber=0CC1AC8C7FC39DBDEF9C1839F42C634BE30DD64F
Validity
Not Before: Dec 24 01:39:55 2021 GMT
Not After : Mar 2 00:00:00 2023 GMT
Subject: CN=61c524eb-a449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9b:ae:8c:c4:f3:28:cd:ec:59:40:2c:d3:e2:
20:7f:ca:d9:fa:f6:f2:48:23:ae:e6:93:a8:b1:ea:
c8:6b:47:70:a1:f3:21:77:7a:a6:bb:80:06:eb:36:
d5:05:30:07:78:09:65:35:14:8a:52:9f:38:98:59:
f6:50:af:60:28:61:d6:d1:f8:cb:9c:d9:5f:13:12:
6a:fe:aa:30:81:f6:bd:4b:42:99:8e:8d:55:e3:c7:
1b:52:28:94:e1:7c:ee:71:10:69:35:5a:a1:f2:73:
bf:95:88:80:07:6e:ab:7a:0a:47:24:36:09:fa:62:
3d:bf:84:2d:a3:64:e3:b6:50:05:a8:9c:87:1e:93:
9b:37:a6:ae:b1:86:c8:01:43:df:3a:d1:5a:72:e0:
54:3d:09:48:c4:fe:2c:14:59:51:72:91:ff:57:57:
db:23:25:d8:ae:c3:ab:2d:6f:4d:26:7c:dc:84:58:
28:b1:90:49:56:13:e6:27:af:6f:4a:24:f4:c6:9e:
18:82:86:a5:22:3c:27:c2:a9:0a:32:f7:95:63:f6:
ec:99:31:ee:3a:f6:e2:1c:a9:cc:c7:53:79:19:b4:
a8:ba:df:76:bc:04:fe:c7:7c:24:2e:86:53:5c:18:
42:9a:2d:de:2f:18:d8:0f:a9:fd:9b:f8:0d:9d:a7:
e2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:AF:C6:34:D1:2A:A6:80:62:45:1A:41:4E:17:AC:7D:FE:58:45:E6
X509v3 Authority Key Identifier:
keyid:0C:C1:AC:8C:7F:C3:9D:BD:EF:9C:18:39:F4:2C:63:4B:E3:0D:D6:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8EE0/1FF1D850779D11EBA66F8078C4F9AE02/DMGsjH_Dnb3vnBg59CxjS-MN1k8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DMGsjH_Dnb3vnBg59CxjS-MN1k8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8EE0/1FF1D850779D11EBA66F8078C4F9AE02/9C56EFDC779F11EBAF5DF00DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.79.23.0/24
103.102.50.0-103.102.52.255
Signature Algorithm: sha256WithRSAEncryption
d0:bf:e6:69:44:f3:0b:7f:8d:21:f6:1c:5a:0e:3b:67:c1:63:
09:83:e6:1d:31:80:f0:b6:ff:d6:c4:a3:62:72:39:76:e1:58:
c9:ff:05:9b:e7:59:ca:ad:0f:8f:49:83:14:6f:6c:1a:44:f3:
77:b3:7c:34:15:c1:2d:4c:fa:dd:ed:88:32:c8:56:de:2b:9f:
af:d2:9d:76:9f:c0:42:d1:85:57:18:6c:33:49:55:b9:99:a0:
21:f4:f7:62:5c:2e:19:00:88:6d:c5:29:16:50:5b:92:15:18:
16:df:db:0e:e8:f2:48:4b:1b:0b:42:ca:52:37:49:01:bc:b3:
11:b0:3f:81:10:cd:54:bb:cb:6c:f0:37:45:46:28:20:63:4a:
8a:a9:40:71:4a:8f:9a:38:cc:a4:27:05:9f:58:f8:a4:ab:59:
25:1f:48:d8:35:d6:02:b4:6e:e6:e0:92:3f:72:f8:98:e1:ee:
27:00:3a:58:e8:f8:6c:9a:03:48:5e:48:cf:93:29:e7:a3:80:
8e:fa:53:c7:02:c2:62:41:e7:cc:aa:c9:59:ef:d3:24:fe:91:
3e:f5:ea:fd:f7:56:dd:33:f1:6c:2c:07:c2:f6:a3:e9:37:ef:
cc:63:13:07:f9:14:f7:17:ae:d3:97:6b:6b:13:e1:ea:5c:ba:
82:0e:a1:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:02 2023 by rpki-client on console-ams.rpki-client.org