Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE6D7/5D7E6E1019E311EDB3816581C4F9AE02/7902FEB21A5111ED8C14AF79C4F9AE02.roa
File: 7902FEB21A5111ED8C14AF79C4F9AE02.roa (raw, json)
Hash identifier: MVxrge/8s67Vb4fqh7k2EahaXDQIMdgmI2SAadpkcPQ=
Subject key identifier: 5E:F7:EB:E1:30:AA:C8:01:55:82:05:D7:1A:DF:1C:1E:25:88:93:BA
Certificate issuer: /CN=A91BE6D7/serialNumber=9F7CD8B931FD07FDF127A8D55A9BCB8F0D91DA6B
Certificate serial: 04
Authority key identifier: 9F:7C:D8:B9:31:FD:07:FD:F1:27:A8:D5:5A:9B:CB:8F:0D:91:DA:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n3zYuTH9B_3xJ6jVWpvLjw2R2ms.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BE6D7/5D7E6E1019E311EDB3816581C4F9AE02/7902FEB21A5111ED8C14AF79C4F9AE02.roa
Signing time: Fri 12 Aug 2022 15:14:36 +0000
ROA not before: Fri 12 Aug 2022 15:14:35 +0000
ROA not after: Tue 31 Jan 2023 00:00:00 +0000
asID: 834
IP address blocks: 103.175.26.0/24 maxlen: 24
103.175.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BE6D7/serialNumber=9F7CD8B931FD07FDF127A8D55A9BCB8F0D91DA6B
Validity
Not Before: Aug 12 15:14:35 2022 GMT
Not After : Jan 31 00:00:00 2023 GMT
Subject: CN=62f66e5a-bf42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:78:3b:fd:5d:78:a0:c2:f7:50:5f:0d:86:d7:
6b:29:fd:5d:e4:53:72:fb:fd:3b:a7:d8:2a:20:a7:
94:2f:72:b6:d6:15:d3:eb:49:66:5d:bf:fe:9f:d2:
56:a7:a6:27:4c:88:b4:d8:43:55:11:6b:e3:20:0f:
52:b0:7b:68:d5:e6:c6:cf:2c:5e:40:cf:09:1e:0d:
75:f7:7a:77:ca:c6:54:ef:73:40:d2:30:16:12:b5:
48:75:0b:e2:9f:4c:45:5e:98:d8:fe:75:e6:7e:8d:
7e:b7:c6:30:64:4a:23:d6:59:e2:e7:73:4d:5a:d3:
0c:75:2d:2e:1a:33:b0:98:02:5f:3a:12:b2:f3:0b:
3d:b7:24:91:dc:6a:85:07:ca:16:78:c6:d1:44:b7:
b8:98:9e:11:54:0b:6e:a8:ce:26:d8:64:d0:30:ef:
66:f6:c5:81:f4:cf:aa:3a:a3:56:a7:83:b3:b0:49:
35:7a:18:9e:bb:86:18:e3:d6:b6:4f:65:81:b1:4d:
a0:39:8a:c2:b6:82:4d:84:44:2b:b5:59:83:e5:5a:
bd:d2:a7:99:ea:5d:f6:20:3c:b0:4a:3b:c8:06:c8:
ea:32:14:5f:99:d1:82:18:ec:e3:16:67:98:3e:f0:
7a:51:6f:a8:3c:98:a3:54:d2:27:d4:e7:fa:3e:26:
41:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:F7:EB:E1:30:AA:C8:01:55:82:05:D7:1A:DF:1C:1E:25:88:93:BA
X509v3 Authority Key Identifier:
keyid:9F:7C:D8:B9:31:FD:07:FD:F1:27:A8:D5:5A:9B:CB:8F:0D:91:DA:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BE6D7/5D7E6E1019E311EDB3816581C4F9AE02/n3zYuTH9B_3xJ6jVWpvLjw2R2ms.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n3zYuTH9B_3xJ6jVWpvLjw2R2ms.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE6D7/5D7E6E1019E311EDB3816581C4F9AE02/7902FEB21A5111ED8C14AF79C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.175.26.0/23
Signature Algorithm: sha256WithRSAEncryption
46:1b:10:30:ad:2a:42:7e:33:cf:5c:e0:f5:ad:6d:3a:3e:0c:
f9:38:cc:9f:dd:06:15:ec:99:df:86:9b:e2:8f:b4:59:8c:3f:
bf:56:74:e1:a4:6f:d2:8f:a0:82:61:c9:fa:c4:42:83:73:26:
88:20:e7:d9:2a:18:b7:57:1d:10:e7:a9:20:9f:f0:23:49:89:
3a:12:3c:f5:ea:06:82:e9:af:9b:60:02:24:74:9f:df:ea:a2:
48:89:4c:0e:43:82:34:91:96:25:27:01:31:b7:7b:26:26:2c:
35:a3:93:38:57:81:25:5e:bc:11:e1:b1:ce:09:c0:d7:c8:07:
4c:b5:3c:f5:c9:9f:9d:bc:8d:05:8a:c9:78:b7:bd:b6:07:9c:
1f:5a:00:b7:29:15:80:e1:d9:b6:5a:4c:15:12:a5:33:e8:5d:
b6:a2:b0:42:c2:7b:08:0b:e4:49:bd:2f:fa:3b:be:6b:08:86:
9e:07:71:fa:a1:2a:02:b4:95:55:dc:3e:03:7c:d8:2c:60:60:
67:86:17:66:9b:de:c1:fb:53:87:51:a9:0b:20:8b:22:be:8d:
66:47:c0:21:30:9e:ba:76:47:a1:a3:5d:51:c7:5d:6e:9a:0d:
76:3c:01:1b:df:2d:b4:af:08:97:b3:38:61:53:23:6b:1a:b6:
4f:87:f8:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:03 2023 by rpki-client on console-ams.rpki-client.org