Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DAA9E/DC1254BC584511ED8E1F4B7DC4F9AE02/98C9DBC2584911ED8FB26217C4F9AE02.roa
File: 98C9DBC2584911ED8FB26217C4F9AE02.roa (raw, json)
Hash identifier: tYaHhJ459tvK4oNLEAZjllUXvJL2Z0uEIZiLUpdVfXM=
Subject key identifier: 6B:F9:17:A0:0C:52:F2:4A:78:C0:02:1A:9B:D3:F7:37:EF:A1:3B:E0
Certificate issuer: /CN=A91DAA9E/serialNumber=ED4FA6963ECB818DB7ADB17254370AD0F78ED5DD
Certificate serial: 02
Authority key identifier: ED:4F:A6:96:3E:CB:81:8D:B7:AD:B1:72:54:37:0A:D0:F7:8E:D5:DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7U-mlj7LgY23rbFyVDcK0PeO1d0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DAA9E/DC1254BC584511ED8E1F4B7DC4F9AE02/98C9DBC2584911ED8FB26217C4F9AE02.roa
Signing time: Sun 30 Oct 2022 11:54:24 +0000
ROA not before: Sun 30 Oct 2022 11:54:24 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 137983
IP address blocks: 103.119.96.0/24 maxlen: 24
103.119.97.0/24 maxlen: 24
103.119.98.0/24 maxlen: 24
103.119.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DAA9E/serialNumber=ED4FA6963ECB818DB7ADB17254370AD0F78ED5DD
Validity
Not Before: Oct 30 11:54:24 2022 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=635e65f0-9715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2b:94:7b:f2:50:64:3f:b6:e4:7d:f5:c1:3e:
d1:70:64:ec:89:12:8f:13:f2:39:1b:0a:61:b7:ed:
c3:0f:99:98:d1:d3:9f:f3:d7:8f:2b:8a:d1:d9:c4:
f6:b4:cd:17:8a:33:99:86:36:d1:bd:8b:94:2c:a0:
31:82:fb:8f:b6:ab:ab:c3:83:bb:d3:72:07:3f:b7:
06:17:73:69:2a:65:6d:fd:e8:be:f5:17:e8:88:1d:
e0:d0:94:5f:f9:95:8b:17:34:12:77:7d:ae:ba:31:
1f:cd:d5:59:61:46:bf:18:64:e7:54:91:8a:07:a0:
0d:cd:7a:cb:f7:e4:ca:d2:cc:2b:b0:23:b7:76:5d:
07:db:ab:aa:6b:12:b7:fd:09:96:88:4d:0c:4d:bf:
a4:d9:5c:4e:47:1b:4f:73:1b:41:78:8e:34:db:06:
b7:5b:6c:72:20:72:0c:3f:0c:fb:b2:34:79:a0:6e:
e5:2a:52:e3:96:3e:cf:96:5d:f7:c7:8e:00:9b:cd:
86:65:a2:35:0d:88:f0:ba:0b:76:07:82:e4:ec:a1:
cc:8e:bb:4d:bf:d8:7d:b5:af:c1:b7:c7:87:30:05:
ac:0c:c2:cb:85:a3:78:a1:d8:8c:78:9b:fd:bc:2c:
6a:40:d8:ad:ee:e0:61:28:36:66:47:74:82:ae:5c:
1e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F9:17:A0:0C:52:F2:4A:78:C0:02:1A:9B:D3:F7:37:EF:A1:3B:E0
X509v3 Authority Key Identifier:
keyid:ED:4F:A6:96:3E:CB:81:8D:B7:AD:B1:72:54:37:0A:D0:F7:8E:D5:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DAA9E/DC1254BC584511ED8E1F4B7DC4F9AE02/7U-mlj7LgY23rbFyVDcK0PeO1d0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7U-mlj7LgY23rbFyVDcK0PeO1d0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DAA9E/DC1254BC584511ED8E1F4B7DC4F9AE02/98C9DBC2584911ED8FB26217C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.119.96.0/22
Signature Algorithm: sha256WithRSAEncryption
52:05:ee:4f:92:ae:9e:e9:df:7e:8f:6f:2c:0c:c5:23:65:4d:
b9:4e:25:46:90:08:9e:87:61:1e:fc:09:6e:8c:c7:7a:95:42:
e7:b1:7d:49:2b:cd:67:a3:2a:59:8b:53:80:a3:ee:b0:74:b8:
dc:29:d1:b7:7c:f3:77:3e:9d:52:65:2a:aa:48:c5:e2:74:25:
c5:33:e4:77:66:2a:c6:2a:da:4b:0a:50:29:08:49:f0:bf:97:
24:44:1a:a1:52:a1:af:a1:e6:ea:05:52:fa:db:4e:93:22:ed:
c4:a7:f2:63:7c:59:e6:31:b7:9a:40:3c:d8:7d:da:99:43:69:
46:e5:0b:69:79:18:e8:21:54:42:e8:20:ee:58:ad:7c:10:ed:
b2:c4:6a:73:5b:af:e5:fa:bd:20:7a:fe:30:23:10:89:b7:9d:
19:81:bb:18:ec:0d:39:b3:57:e2:c8:d8:31:e4:6e:15:5d:bb:
48:07:08:41:19:83:88:fd:72:7e:0f:39:e0:50:24:8e:4b:25:
27:56:7a:3b:06:51:8d:79:d1:98:77:11:57:a7:e5:d1:66:13:
fa:d5:68:fe:45:ba:4e:52:52:99:2e:3f:87:13:8d:4a:37:8d:
52:71:46:81:72:a4:ca:e9:38:f1:a5:95:a8:6f:33:f9:b8:98:
4b:6e:cf:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:30 2024 by rpki-client on console-ams.rpki-client.org