Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE14F/13E39B081E7711E7A02AD840C4F9AE02/7F913C1E1E7911E79FF1C943C4F9AE02.roa
File: 7F913C1E1E7911E79FF1C943C4F9AE02.roa (raw, json)
Hash identifier: DwPXY0qE4nOIW93OXQ3cx+EWoTDtBBhuwUxzCcHVtRs=
Subject key identifier: 08:F3:17:37:33:17:3C:0E:A8:11:78:C4:D3:0C:94:FD:00:A7:A3:55
Certificate issuer: /CN=A91DE14F/serialNumber=B605060F0F0CDC580E4182C270078F71048F0E39
Certificate serial: 16FC
Authority key identifier: B6:05:06:0F:0F:0C:DC:58:0E:41:82:C2:70:07:8F:71:04:8F:0E:39
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgUGDw8M3FgOQYLCcAePcQSPDjk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE14F/13E39B081E7711E7A02AD840C4F9AE02/7F913C1E1E7911E79FF1C943C4F9AE02.roa
Signing time: Fri 31 Dec 2021 17:13:15 +0000
ROA not before: Fri 31 Dec 2021 17:13:15 +0000
ROA not after: Sun 01 May 2022 00:00:00 +0000
asID: 3356
IP address blocks: 103.17.12.0/22 maxlen: 22
139.5.32.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5884 (0x16fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE14F/serialNumber=B605060F0F0CDC580E4182C270078F71048F0E39
Validity
Not Before: Dec 31 17:13:15 2021 GMT
Not After : May 1 00:00:00 2022 GMT
Subject: CN=61cf3a2b-2004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4a:74:f8:14:52:1d:a0:96:5f:bb:88:dd:e1:
5c:f1:38:65:b5:3f:95:02:46:14:4b:10:20:2e:65:
02:0c:3d:b4:cb:2f:23:53:53:96:dd:ad:47:65:48:
35:f3:c2:17:f1:27:d9:f7:c5:f2:88:3e:32:5a:eb:
ec:94:0a:9a:fd:00:16:f6:dc:f1:6e:ff:b2:14:49:
9b:cd:dd:e2:26:b6:c4:cf:c1:b3:11:17:a0:f3:63:
40:c1:dc:c2:20:6e:65:36:38:30:69:73:91:e3:7d:
cc:e8:32:3d:69:f8:de:9d:f2:56:6a:a6:6e:6c:7b:
f2:2f:65:e6:48:39:f9:58:fe:88:d2:8a:a2:74:d4:
2e:16:ea:18:91:b6:c7:f3:45:47:ed:3e:c6:c0:c7:
f9:b3:73:9d:70:6b:ff:b5:7a:1c:d8:33:69:30:9a:
85:4d:ad:2a:01:4f:07:eb:7d:3f:74:91:f8:29:46:
ed:3c:ea:a0:d9:cb:a6:68:42:af:b0:ce:27:5a:d4:
e7:2d:04:0f:71:c8:ce:30:5b:ab:09:28:fb:80:5f:
df:f7:4f:4a:5b:c9:cc:48:47:dc:33:df:b4:b6:46:
cc:1b:b3:ee:92:72:79:16:3a:30:c5:07:f4:8c:b4:
cd:c4:4b:69:06:1c:f9:18:71:8b:50:dc:6e:da:32:
39:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:F3:17:37:33:17:3C:0E:A8:11:78:C4:D3:0C:94:FD:00:A7:A3:55
X509v3 Authority Key Identifier:
keyid:B6:05:06:0F:0F:0C:DC:58:0E:41:82:C2:70:07:8F:71:04:8F:0E:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE14F/13E39B081E7711E7A02AD840C4F9AE02/tgUGDw8M3FgOQYLCcAePcQSPDjk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgUGDw8M3FgOQYLCcAePcQSPDjk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE14F/13E39B081E7711E7A02AD840C4F9AE02/7F913C1E1E7911E79FF1C943C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.17.12.0/22
139.5.32.0/22
Signature Algorithm: sha256WithRSAEncryption
90:9e:12:81:a0:9c:6c:24:99:8b:02:c4:f6:63:36:44:63:cc:
16:8e:01:7c:db:95:4a:5e:86:78:8a:a5:d4:92:22:eb:47:36:
33:48:78:db:63:56:20:ed:c5:96:88:05:88:aa:81:ff:5c:af:
eb:d8:13:98:7e:82:c4:73:1a:81:3d:e0:9d:c6:97:15:4f:a9:
53:35:bc:c5:9c:2c:a0:b5:3f:d1:25:00:7c:ff:85:91:1f:07:
ea:c2:19:30:83:e9:81:59:14:ff:72:10:8c:52:15:97:e2:36:
65:e2:af:5e:81:b7:33:a0:d6:f5:85:94:4e:ba:4f:78:86:0f:
b5:be:d9:80:87:d6:c6:c8:1e:26:20:d8:78:3b:24:71:c3:8c:
f1:be:ea:cb:ed:60:87:5e:f6:4e:c9:e1:f4:82:58:b3:09:18:
cb:69:f6:98:69:a5:4f:36:23:65:96:f3:46:e4:3d:bc:01:5c:
6f:8a:89:08:ad:8e:54:a5:59:54:c5:74:97:2e:b2:7a:35:b3:
0b:48:ec:3d:0a:a3:a4:dd:dc:a6:6a:f5:4c:85:48:0d:98:d6:
43:71:38:fd:dd:1f:1d:9c:aa:18:c2:31:f0:fd:11:2a:d9:8a:
fe:36:76:2d:bc:a9:cb:c0:9d:a4:a1:09:99:4e:ce:1f:ab:23:
d0:94:bf:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:10 2023 by rpki-client on console-fra.rpki-client.org