Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2337/4F48F8F81B3311EAAD922842C4F9AE02/0EAB54100B9811ECBC109C3DC4F9AE02.roa
File: 0EAB54100B9811ECBC109C3DC4F9AE02.roa (raw, json)
Hash identifier: lN9dbM6cQPKQUuzi8SNBRjIci2+oIB2zltwJnx0SYTo=
Subject key identifier: C6:6B:7B:57:E9:7D:98:34:AD:7C:43:3D:07:AF:2C:6F:CF:0C:2F:3D
Certificate issuer: /CN=A91E2337/serialNumber=351CEF945094D37A44471E1C0A7B7AB73AEBB99C
Certificate serial: 083E
Authority key identifier: 35:1C:EF:94:50:94:D3:7A:44:47:1E:1C:0A:7B:7A:B7:3A:EB:B9:9C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NRzvlFCU03pERx4cCnt6tzrruZw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2337/4F48F8F81B3311EAAD922842C4F9AE02/0EAB54100B9811ECBC109C3DC4F9AE02.roa
Signing time: Sat 26 Feb 2022 20:46:38 +0000
ROA not before: Sat 26 Feb 2022 20:46:38 +0000
ROA not after: Mon 01 May 2023 00:00:00 +0000
asID: 138527
IP address blocks: 103.84.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2110 (0x83e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2337/serialNumber=351CEF945094D37A44471E1C0A7B7AB73AEBB99C
Validity
Not Before: Feb 26 20:46:38 2022 GMT
Not After : May 1 00:00:00 2023 GMT
Subject: CN=621a91ad-f99d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:31:64:5b:cb:39:51:34:88:8f:58:d9:69:26:
b4:11:37:90:50:c2:f0:87:0c:3f:cc:24:4a:4d:3e:
bc:ff:e5:37:0f:ce:d2:7c:55:e0:3c:ca:2f:23:f1:
d7:62:18:6d:f2:da:28:65:7c:51:8d:13:f4:8d:36:
5c:42:f9:be:21:fa:75:fe:ce:3c:cf:6d:cd:7c:0d:
c5:c9:fc:44:5f:92:02:57:9c:91:00:2d:98:2b:6e:
51:52:a1:6c:2a:c2:57:23:5d:a2:30:7d:af:fc:83:
72:d0:74:9c:80:b6:02:4e:a9:9f:5e:b6:6f:c5:63:
7d:59:01:51:d2:bd:08:5a:66:72:94:e9:5d:06:25:
85:9d:8b:5a:c3:58:d1:31:c5:f3:98:c8:7d:f6:b6:
03:f0:8c:42:93:a5:f7:49:df:74:2b:12:45:b2:7d:
4f:80:77:2f:33:52:3e:ea:71:de:e3:f0:ee:a7:52:
95:95:26:16:cf:4b:5b:43:ee:ab:ca:11:8e:48:fe:
e4:58:09:bf:e4:9e:f9:4c:f7:1e:82:b9:e3:21:14:
15:26:27:a2:10:30:8d:ee:d6:46:3e:ce:27:14:5b:
86:1a:f1:fa:fd:4e:64:cf:f6:fb:15:5e:0b:ab:61:
e0:0d:f8:8e:34:2e:d2:40:5f:fa:37:3f:d2:3e:56:
57:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:6B:7B:57:E9:7D:98:34:AD:7C:43:3D:07:AF:2C:6F:CF:0C:2F:3D
X509v3 Authority Key Identifier:
keyid:35:1C:EF:94:50:94:D3:7A:44:47:1E:1C:0A:7B:7A:B7:3A:EB:B9:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2337/4F48F8F81B3311EAAD922842C4F9AE02/NRzvlFCU03pERx4cCnt6tzrruZw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NRzvlFCU03pERx4cCnt6tzrruZw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2337/4F48F8F81B3311EAAD922842C4F9AE02/0EAB54100B9811ECBC109C3DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.84.95.0/24
Signature Algorithm: sha256WithRSAEncryption
56:77:65:5c:32:a1:0b:08:83:f5:12:19:9b:2e:cb:f9:67:3a:
3b:1c:bf:2e:fa:7d:e1:46:ef:17:38:42:88:e8:6f:76:9d:bc:
22:ac:98:c7:96:c8:af:dd:0e:a3:d6:ea:49:15:d7:03:43:af:
7e:d2:9e:df:f8:47:e1:ef:af:b5:9d:ba:09:57:46:ef:5e:97:
91:6c:9f:ee:d7:9d:b7:12:27:05:7e:c4:75:16:66:9e:f8:42:
1c:f8:3a:44:74:72:24:10:39:62:22:97:59:ae:0d:4f:89:d3:
c6:4f:d0:7f:f6:d6:21:33:4a:d6:48:15:dc:34:cc:e9:8d:2c:
b2:97:62:79:47:76:d0:d4:4f:82:4e:13:6d:1d:7c:9c:83:a9:
cd:cd:c1:f0:48:6a:5e:a2:03:ee:bb:d3:19:d9:f4:ca:31:52:
4f:72:3c:90:2b:f7:e8:e3:99:cf:a4:50:fc:bd:43:18:49:cb:
a9:f5:a9:8d:3d:fc:b2:fa:7e:a4:d9:1e:c8:93:f0:d3:f5:aa:
f6:5a:1f:c5:38:f1:2f:3f:48:88:bf:d5:f8:3d:4b:0b:a7:0a:
e3:6b:00:23:68:a6:89:18:73:0f:9e:f8:af:93:cb:92:34:9f:
88:d2:ca:05:2b:07:f1:46:f8:9f:08:cb:3c:00:b1:6c:72:a9:
45:59:ff:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:10 2023 by rpki-client on console-fra.rpki-client.org