Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D91BF/02688B56AD3E11E9801EF62CC4F9AE02/701AAAC211EB11EBA58CA43AC4F9AE02.roa
File: 701AAAC211EB11EBA58CA43AC4F9AE02.roa (raw, json)
Hash identifier: 3Vcz4sjoOe8tLhOVgZqPESVtqWFuUurgheYBXxWX738=
Subject key identifier: 97:DC:8B:12:EF:E5:66:7F:46:EC:A0:70:EC:F2:09:87:6C:D5:F8:F3
Certificate issuer: /CN=A91D91BF/serialNumber=C719EC9FBE5BD9383C789341F5E55BEA8C9B38A5
Certificate serial: 0C93
Authority key identifier: C7:19:EC:9F:BE:5B:D9:38:3C:78:93:41:F5:E5:5B:EA:8C:9B:38:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xxnsn75b2Tg8eJNB9eVb6oybOKU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D91BF/02688B56AD3E11E9801EF62CC4F9AE02/701AAAC211EB11EBA58CA43AC4F9AE02.roa
Signing time: Fri 28 Apr 2023 19:36:29 +0000
ROA not before: Fri 28 Apr 2023 19:36:29 +0000
ROA not after: Mon 28 Aug 2023 00:00:00 +0000
asID: 137458
IP address blocks: 103.109.68.0/22 maxlen: 22
103.109.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3219 (0xc93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D91BF/serialNumber=C719EC9FBE5BD9383C789341F5E55BEA8C9B38A5
Validity
Not Before: Apr 28 19:36:29 2023 GMT
Not After : Aug 28 00:00:00 2023 GMT
Subject: CN=644c203d-caa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:98:eb:13:a1:3e:e0:f3:86:7b:8e:a6:cd:b4:
aa:1c:5e:bc:ff:e5:06:33:48:2f:e9:d4:8b:79:83:
89:5e:3b:fd:59:9c:a5:05:5c:c3:31:53:fb:64:2c:
b5:15:f2:24:2f:3e:ed:2f:da:4d:66:58:2a:c7:35:
5d:09:5b:ab:1b:84:6f:f5:26:12:7c:ac:2d:a1:6a:
3c:5a:88:7c:5c:45:97:1b:b7:22:51:51:b1:ea:7a:
09:ec:b8:9a:f0:7e:b0:7a:71:fc:be:04:08:25:15:
3f:b3:e4:f8:af:cc:f9:18:81:0b:b6:75:29:1d:2c:
84:11:e2:b2:cc:35:3b:d6:47:47:d1:79:1d:f0:48:
7a:63:7a:7c:62:f4:e7:82:36:56:5b:4d:68:1d:24:
02:62:08:aa:cc:17:72:9c:63:c0:7f:fa:b6:f9:52:
fe:be:17:99:b9:cc:dd:50:eb:62:72:7b:32:3d:da:
d1:a5:92:f2:a6:9e:74:11:27:55:ba:16:ec:06:a9:
9d:4e:ea:d3:ce:0a:12:86:0c:d7:ee:a2:00:e2:bf:
b2:65:9e:ad:d0:5d:d2:b0:a9:e5:f2:1e:4b:98:f3:
9c:68:70:96:4c:fe:21:cf:81:d9:29:4f:c0:45:c7:
f9:03:92:ee:73:3a:6d:70:74:0c:9b:d0:5d:8b:a0:
fb:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:DC:8B:12:EF:E5:66:7F:46:EC:A0:70:EC:F2:09:87:6C:D5:F8:F3
X509v3 Authority Key Identifier:
keyid:C7:19:EC:9F:BE:5B:D9:38:3C:78:93:41:F5:E5:5B:EA:8C:9B:38:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D91BF/02688B56AD3E11E9801EF62CC4F9AE02/xxnsn75b2Tg8eJNB9eVb6oybOKU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xxnsn75b2Tg8eJNB9eVb6oybOKU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D91BF/02688B56AD3E11E9801EF62CC4F9AE02/701AAAC211EB11EBA58CA43AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.109.68.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:81:61:0b:8a:56:d7:64:49:0e:c0:7c:98:70:36:d9:e1:23:
64:8c:2c:7b:e0:d3:a9:b8:52:bc:3f:5c:70:d4:83:8f:02:df:
c4:72:0b:99:1e:66:49:45:5f:ee:b3:2a:0d:2f:99:c9:ec:3a:
15:ae:d4:d9:95:8b:34:40:c7:74:45:a4:77:f9:00:ea:83:7e:
ea:13:6a:f9:b6:08:fe:d2:4b:ca:42:0f:26:b2:5f:5d:3b:e5:
8a:a9:f1:7d:53:8b:b5:aa:1a:52:10:58:0c:fe:46:25:b5:0e:
13:2f:56:ae:c0:0b:9f:18:68:ad:bb:ab:d0:0e:a4:a8:4e:41:
2c:e3:0a:53:9f:9a:66:13:10:92:43:19:dd:d3:09:3f:d8:cf:
f5:1c:6c:f6:86:b4:ec:00:3f:f3:6a:c7:55:05:8a:9f:93:be:
5e:f5:59:24:25:f8:7c:b8:76:4a:79:f5:5f:74:94:b1:3b:c6:
60:07:46:15:d5:64:54:63:72:77:a9:1f:79:2e:d1:55:54:87:
ba:04:22:dc:e5:af:ed:ed:23:59:e5:49:27:08:a9:2a:df:41:
36:26:b9:77:81:f3:da:04:54:37:84:ef:1b:ea:7e:0e:86:d1:
21:dc:3d:b8:ba:ee:3d:94:b8:34:fa:a7:5f:a2:5b:55:aa:8c:
52:d9:6c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:30 2024 by rpki-client on console-ams.rpki-client.org