Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2337/4F48F8F81B3311EAAD922842C4F9AE02/0FAEC2E80B9811ECBC109C3DC4F9AE02.roa
File: 0FAEC2E80B9811ECBC109C3DC4F9AE02.roa (raw, json)
Hash identifier: zzqEabQR70IrpuHs/5/uGX+TuS88Of7v3U8rIcoCFTw=
Subject key identifier: FD:AA:0E:35:F0:BE:51:D2:E5:03:DC:1A:CC:EF:73:7E:E6:65:0C:1C
Certificate issuer: /CN=A91E2337/serialNumber=351CEF945094D37A44471E1C0A7B7AB73AEBB99C
Certificate serial: 083F
Authority key identifier: 35:1C:EF:94:50:94:D3:7A:44:47:1E:1C:0A:7B:7A:B7:3A:EB:B9:9C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NRzvlFCU03pERx4cCnt6tzrruZw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2337/4F48F8F81B3311EAAD922842C4F9AE02/0FAEC2E80B9811ECBC109C3DC4F9AE02.roa
Signing time: Sat 26 Feb 2022 20:46:39 +0000
ROA not before: Sat 26 Feb 2022 20:46:39 +0000
ROA not after: Mon 01 May 2023 00:00:00 +0000
asID: 21859
IP address blocks: 103.84.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2111 (0x83f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2337/serialNumber=351CEF945094D37A44471E1C0A7B7AB73AEBB99C
Validity
Not Before: Feb 26 20:46:39 2022 GMT
Not After : May 1 00:00:00 2023 GMT
Subject: CN=621a91ae-d1d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2f:e1:75:33:53:4d:2b:dd:f5:7b:99:2a:79:
6b:db:d2:9a:e4:f3:3a:ca:a5:29:bd:1b:4c:7d:31:
a4:15:0e:59:22:f4:42:9e:ca:82:0c:ff:e6:dc:31:
84:6b:4b:75:8d:f4:77:fa:1a:4d:63:77:a7:aa:74:
0d:82:66:e8:fd:26:d9:7c:d3:1d:10:5a:42:8a:82:
a6:b7:00:70:00:7f:e7:a0:38:5c:48:e9:9d:0d:9a:
8d:50:00:19:63:fc:06:df:0f:b4:7f:52:ba:81:11:
95:c8:8f:bd:03:32:df:04:b1:22:5e:3f:a5:9e:91:
ae:7c:78:08:c3:f5:b3:4d:35:60:a8:59:4e:24:64:
85:c4:ca:36:84:80:c1:bb:4b:08:28:fa:4f:87:d1:
46:0d:ad:f1:ba:ce:fb:d7:c8:70:15:e2:0d:89:22:
b2:99:39:58:47:8c:5c:42:70:aa:0f:9d:a3:2e:79:
20:ba:c9:09:40:cb:b7:dd:e1:9f:b9:e6:cf:d4:52:
5a:5c:e1:e1:79:c6:30:09:fc:70:9c:ec:11:1e:31:
cd:69:fa:8d:36:34:59:78:9a:ca:cb:58:1a:c4:f3:
ba:df:a5:bc:d4:fe:f1:1b:b4:fe:e3:02:30:06:3d:
af:19:44:ef:db:3f:f2:89:cd:65:e9:90:e3:ed:35:
86:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:AA:0E:35:F0:BE:51:D2:E5:03:DC:1A:CC:EF:73:7E:E6:65:0C:1C
X509v3 Authority Key Identifier:
keyid:35:1C:EF:94:50:94:D3:7A:44:47:1E:1C:0A:7B:7A:B7:3A:EB:B9:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2337/4F48F8F81B3311EAAD922842C4F9AE02/NRzvlFCU03pERx4cCnt6tzrruZw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NRzvlFCU03pERx4cCnt6tzrruZw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2337/4F48F8F81B3311EAAD922842C4F9AE02/0FAEC2E80B9811ECBC109C3DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.84.94.0/24
Signature Algorithm: sha256WithRSAEncryption
97:15:5c:01:dc:c9:70:96:ca:de:66:d0:2d:0d:2f:68:88:92:
e9:49:e1:54:30:73:9d:31:51:50:49:a3:48:f1:8f:37:b3:22:
5d:6e:dd:25:01:5c:d7:a3:90:43:c8:98:98:7c:eb:f9:d0:a8:
52:cb:ad:d9:f7:f5:8f:8e:82:f8:3a:9e:ce:98:7a:1a:b3:3e:
a7:cd:8c:ff:a0:41:65:24:32:a4:fc:bf:55:f1:15:72:df:4e:
f5:c7:36:11:da:3a:06:96:a8:4a:dc:19:40:1c:d5:f9:29:b9:
0f:64:d5:0f:c5:09:98:42:19:5a:b1:42:0c:07:0d:4b:d2:56:
f4:fd:77:ac:38:89:bc:35:de:d4:ae:e5:3f:5b:ea:ce:8b:22:
66:d8:b1:e5:cb:a1:7f:c4:01:61:c7:69:b6:75:b4:7e:44:48:
ab:d8:28:76:84:e6:d4:3e:97:03:7b:22:a8:89:10:4b:7b:64:
0c:ec:89:87:6e:af:30:76:f5:f5:9f:14:f0:fd:46:ac:8f:f7:
a4:27:0f:cc:a9:c8:b6:01:ea:5d:c6:2e:ba:fa:ac:24:d3:b7:
9a:1a:5d:09:a7:91:83:aa:b4:42:f2:54:ff:dc:22:4a:74:78:
8a:9a:3e:9e:c0:ea:12:48:4e:f6:02:4f:ee:f0:5d:5c:5e:aa:
c6:a1:65:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:08 2023 by rpki-client on console-ams.rpki-client.org