Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE74A/FEB3AA9CDA2F11EB9F0FE94CC4F9AE02/CD2599FCDA3111EB9325624DC4F9AE02.roa
File: CD2599FCDA3111EB9325624DC4F9AE02.roa (raw, json)
Hash identifier: 6XfGgC9QdOHtc29ve+4yXsyX+rprGcBULuE0Amq3p1o=
Subject key identifier: D8:6B:29:95:59:74:68:BC:0B:62:FB:38:55:EC:8B:01:22:B6:C8:D5
Certificate issuer: /CN=A91CE74A/serialNumber=BC4AF2947BF54D0B126183470EACDA180FC352B8
Certificate serial: 012F
Authority key identifier: BC:4A:F2:94:7B:F5:4D:0B:12:61:83:47:0E:AC:DA:18:0F:C3:52:B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vErylHv1TQsSYYNHDqzaGA_DUrg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE74A/FEB3AA9CDA2F11EB9F0FE94CC4F9AE02/CD2599FCDA3111EB9325624DC4F9AE02.roa
Signing time: Wed 01 Dec 2021 03:00:55 +0000
ROA not before: Wed 01 Dec 2021 03:00:55 +0000
ROA not after: Tue 31 Jan 2023 00:00:00 +0000
asID: 131111
IP address blocks: 103.78.80.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 303 (0x12f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE74A/serialNumber=BC4AF2947BF54D0B126183470EACDA180FC352B8
Validity
Not Before: Dec 1 03:00:55 2021 GMT
Not After : Jan 31 00:00:00 2023 GMT
Subject: CN=61a6e567-6d34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:a4:81:7e:69:e6:1f:d8:96:c4:39:b1:8d:ae:
06:61:e9:93:43:9a:17:e8:dd:f1:4c:ab:48:a1:a9:
63:af:aa:8b:16:21:05:8f:f5:58:25:77:21:e2:9b:
d7:e4:bd:6e:d2:90:57:e0:19:a3:ba:1a:39:c7:45:
e7:0f:b7:63:b0:83:82:17:8f:fa:24:4e:41:b3:71:
07:bc:91:f2:dd:94:88:6b:af:ce:9f:28:7e:0d:07:
17:42:7e:4f:9d:20:be:04:c6:72:f1:51:6f:60:08:
0f:3e:30:c2:41:7c:0a:fa:e6:b7:cf:06:37:d4:78:
0f:93:62:a3:f2:a5:b3:24:e5:07:ee:54:b0:a1:ef:
d4:ec:b5:68:97:64:46:00:3e:ee:f6:48:50:78:3d:
16:08:30:40:43:bd:ec:02:dd:44:aa:a5:c6:b4:7a:
58:27:39:2c:1c:c5:bc:f7:ad:0c:24:65:49:f3:e5:
a1:fc:71:64:51:4c:b1:ae:7b:32:ef:fa:8d:4e:b5:
ad:a6:f5:da:ac:71:24:e3:a2:92:eb:c5:76:05:9b:
ba:99:e6:28:5a:38:99:fc:8c:27:cc:a2:36:89:d5:
e6:24:65:e5:4b:a7:ec:99:72:1f:3f:f9:93:9c:e6:
05:9c:b6:d8:18:34:62:e7:1a:b9:8a:6d:b3:6e:dd:
9b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:6B:29:95:59:74:68:BC:0B:62:FB:38:55:EC:8B:01:22:B6:C8:D5
X509v3 Authority Key Identifier:
keyid:BC:4A:F2:94:7B:F5:4D:0B:12:61:83:47:0E:AC:DA:18:0F:C3:52:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE74A/FEB3AA9CDA2F11EB9F0FE94CC4F9AE02/vErylHv1TQsSYYNHDqzaGA_DUrg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vErylHv1TQsSYYNHDqzaGA_DUrg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE74A/FEB3AA9CDA2F11EB9F0FE94CC4F9AE02/CD2599FCDA3111EB9325624DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.78.80.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:60:75:cc:49:70:d3:6e:cd:83:12:68:ef:d0:8d:08:26:a0:
69:95:fa:ae:a5:82:74:37:29:dd:9b:30:f5:1e:30:df:28:e9:
b8:7e:6b:85:0b:62:c7:f2:81:87:03:59:a6:ae:6c:94:78:da:
94:d8:98:ce:a0:2a:c4:77:63:a4:6a:83:30:68:0c:96:22:38:
13:9e:70:41:b1:db:ac:54:59:f0:21:f2:6d:fb:03:0f:a9:6c:
34:d1:b0:6a:5f:38:e0:c5:a5:67:53:7a:f5:46:36:2e:d4:0b:
d4:3d:1f:59:e5:ac:f9:2c:e5:8c:a7:e0:41:91:58:e3:93:01:
dc:3c:76:79:14:fa:3e:6d:56:02:b8:8a:7a:51:c0:be:e7:15:
ed:78:7e:3c:32:7b:89:d3:73:7f:75:55:c6:1f:71:92:81:3f:
f4:cc:60:e8:01:ee:bc:68:c8:43:dd:63:0c:8a:d1:f7:64:94:
99:29:d4:d4:81:d0:5b:60:db:46:85:cb:ff:fc:aa:4c:2f:6d:
83:27:54:f2:ef:2c:65:a3:b6:a3:f6:be:61:97:94:96:89:26:
96:e5:ca:e4:e9:4b:c4:15:c3:b2:1a:d7:0d:cd:d2:8d:ed:b2:
8b:7d:1f:50:27:29:62:55:a9:30:38:f9:83:82:61:b1:f8:71:
bf:ed:c1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:06 2023 by rpki-client on console-ams.rpki-client.org