Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE6D7/5D7E6E1019E311EDB3816581C4F9AE02/D0A4F9DE40C811ED92179732C4F9AE02.roa
File: D0A4F9DE40C811ED92179732C4F9AE02.roa (raw, json)
Hash identifier: PEQz07XwrDOvW+mNFZ/9GuQhqiuUtCBDKEJt7JLNAsA=
Subject key identifier: 4F:34:82:A4:9E:C3:C5:BC:CB:2A:D9:6A:43:B9:C3:E1:17:8B:A4:C6
Certificate issuer: /CN=A91BE6D7/serialNumber=9F7CD8B931FD07FDF127A8D55A9BCB8F0D91DA6B
Certificate serial: 6D
Authority key identifier: 9F:7C:D8:B9:31:FD:07:FD:F1:27:A8:D5:5A:9B:CB:8F:0D:91:DA:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n3zYuTH9B_3xJ6jVWpvLjw2R2ms.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BE6D7/5D7E6E1019E311EDB3816581C4F9AE02/D0A4F9DE40C811ED92179732C4F9AE02.roa
Signing time: Fri 30 Sep 2022 14:04:36 +0000
ROA not before: Fri 30 Sep 2022 14:04:36 +0000
ROA not after: Tue 31 Jan 2023 00:00:00 +0000
asID: 212238
IP address blocks: 103.175.26.0/24 maxlen: 24
103.175.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109 (0x6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BE6D7/serialNumber=9F7CD8B931FD07FDF127A8D55A9BCB8F0D91DA6B
Validity
Not Before: Sep 30 14:04:36 2022 GMT
Not After : Jan 31 00:00:00 2023 GMT
Subject: CN=6336f773-a964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:0d:3c:77:2f:a9:16:6f:61:9d:d2:39:87:b0:
d6:fd:bf:14:75:a7:59:fd:32:ec:f1:43:be:e4:44:
0c:8e:ae:d3:d2:f4:ff:7b:48:88:a3:fa:c7:f0:4b:
6c:6a:11:5c:20:d3:39:8a:05:4e:c8:86:bd:d6:14:
9b:3d:58:1e:0d:19:d2:2c:cd:45:44:01:b1:a6:31:
0f:7c:55:0b:0a:b4:e0:c3:fb:a2:7c:69:cf:1a:81:
65:15:bb:bd:cd:4f:1d:2c:88:cd:b3:c0:cf:d7:3c:
63:04:63:37:89:f6:29:3d:09:69:20:fd:74:ce:52:
c6:9b:32:38:bb:25:97:70:0f:a3:67:d7:29:56:3d:
3e:4a:92:07:d3:68:3f:b7:b0:a8:95:28:c4:db:d2:
f1:be:6a:80:4b:83:73:e0:0c:64:77:e6:81:f3:81:
66:b0:f0:bf:fe:6c:37:70:38:c4:ac:81:37:78:b4:
86:f5:e3:59:f2:f6:96:fa:56:28:2d:dc:1d:a8:6a:
0d:17:13:e8:f1:dc:7b:e5:83:64:48:60:33:07:b9:
93:dc:93:9e:9c:6d:c4:01:20:45:f0:09:1f:6d:6b:
24:43:29:6b:50:1a:1f:aa:ac:d6:b8:a2:4b:50:80:
f3:ba:7f:1f:ac:d9:94:1d:1e:6c:3c:a1:93:91:31:
6f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:34:82:A4:9E:C3:C5:BC:CB:2A:D9:6A:43:B9:C3:E1:17:8B:A4:C6
X509v3 Authority Key Identifier:
keyid:9F:7C:D8:B9:31:FD:07:FD:F1:27:A8:D5:5A:9B:CB:8F:0D:91:DA:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BE6D7/5D7E6E1019E311EDB3816581C4F9AE02/n3zYuTH9B_3xJ6jVWpvLjw2R2ms.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n3zYuTH9B_3xJ6jVWpvLjw2R2ms.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE6D7/5D7E6E1019E311EDB3816581C4F9AE02/D0A4F9DE40C811ED92179732C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.175.26.0/23
Signature Algorithm: sha256WithRSAEncryption
be:d2:6b:fd:5a:b7:5e:d8:da:41:10:11:d9:12:d2:4e:d9:d9:
4e:b2:4b:6e:25:f0:42:ca:15:f2:f0:d3:c3:a3:31:22:ab:39:
c5:1d:b2:7b:5c:bb:59:ea:01:5e:fd:c7:a5:12:5c:ae:9a:6b:
32:2f:4e:1f:f6:de:b2:4f:9d:d2:60:b1:fc:b4:3d:4a:12:56:
2d:de:2d:58:85:b0:2d:56:a9:e1:2d:ad:86:da:b2:bc:71:e8:
fd:af:48:f9:9e:1c:a3:3b:2f:d8:a8:15:0d:06:eb:f2:92:f3:
80:55:28:f0:e6:df:7d:da:a9:35:2a:b7:ba:af:84:1f:50:44:
dc:7c:27:14:ee:a0:7f:a3:40:7d:3d:d9:e3:48:d6:a6:20:08:
d0:05:ff:40:14:ea:73:40:a0:2f:90:dd:60:b1:47:ce:48:eb:
00:6c:68:6a:05:76:16:ac:6e:78:08:99:99:76:69:d7:e3:66:
93:fc:bf:26:f3:9e:03:81:66:9b:d8:5f:77:08:be:c4:a8:0d:
60:3e:b1:97:6f:2c:2a:b1:c8:a3:2e:8c:55:3e:5a:c7:79:55:
4c:05:c5:40:dd:51:fe:90:f7:62:6c:89:57:d0:1d:50:ec:61:
7d:ad:71:1f:97:73:db:22:6a:ab:23:b9:9f:f6:24:da:1a:42:
71:0a:e7:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:03 2023 by rpki-client on console-ams.rpki-client.org