Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2337/4F48F8F81B3311EAAD922842C4F9AE02/398D7FDA0B9511EC9B44492AC4F9AE02.roa
File: 398D7FDA0B9511EC9B44492AC4F9AE02.roa (raw, json)
Hash identifier: IKEo3mGZli0ir7t1DgRXdWIHXz+RkKLwOVR1vPc3HUs=
Subject key identifier: 02:C9:9A:86:13:2E:AB:A3:26:9F:5C:D8:12:2B:F1:66:04:BD:51:0A
Certificate issuer: /CN=A91E2337/serialNumber=351CEF945094D37A44471E1C0A7B7AB73AEBB99C
Certificate serial: 083D
Authority key identifier: 35:1C:EF:94:50:94:D3:7A:44:47:1E:1C:0A:7B:7A:B7:3A:EB:B9:9C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NRzvlFCU03pERx4cCnt6tzrruZw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2337/4F48F8F81B3311EAAD922842C4F9AE02/398D7FDA0B9511EC9B44492AC4F9AE02.roa
Signing time: Sat 26 Feb 2022 20:46:37 +0000
ROA not before: Sat 26 Feb 2022 20:46:37 +0000
ROA not after: Mon 01 May 2023 00:00:00 +0000
asID: 135386
IP address blocks: 103.84.92.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2109 (0x83d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2337/serialNumber=351CEF945094D37A44471E1C0A7B7AB73AEBB99C
Validity
Not Before: Feb 26 20:46:37 2022 GMT
Not After : May 1 00:00:00 2023 GMT
Subject: CN=621a91ac-61a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:18:9c:c6:f6:94:ae:91:50:22:18:38:7c:a0:
be:bb:5d:c9:01:5d:6b:dc:f5:a7:5a:a8:9a:05:68:
27:eb:44:75:77:c8:f8:0f:c8:e4:2a:82:1b:5e:91:
18:62:aa:83:e8:0a:75:1d:56:25:91:f7:34:e9:28:
e2:65:fa:ee:05:22:13:f2:23:f3:91:4a:56:28:14:
5e:7a:32:62:2e:35:a2:83:a1:fd:8c:09:2c:b3:60:
03:dc:37:7f:09:3f:da:60:fa:c4:e8:dc:1f:b7:f7:
b9:39:17:ed:5d:af:c1:ab:4a:20:50:ec:8d:9c:8f:
e3:c6:31:2e:db:99:45:b5:73:33:71:71:ba:34:d0:
08:22:d4:f7:b7:94:3e:bc:da:f1:e0:1f:9a:a9:5e:
89:fc:b5:08:39:77:52:b9:28:3d:5e:31:d7:22:d8:
aa:8d:4a:b3:f0:73:df:f0:fa:58:c7:a9:27:aa:75:
1e:6c:0f:0a:bb:14:f6:a2:58:1b:95:02:20:0e:9d:
df:10:79:1e:c1:cb:51:75:a6:63:b0:06:69:e1:66:
c3:53:92:ed:ad:2b:4f:d6:e5:06:cb:cb:67:e1:c2:
43:bf:e0:01:6d:7b:77:c4:28:14:22:d0:d8:42:f1:
64:80:d7:01:ee:b1:1e:20:db:84:13:53:d4:84:69:
54:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C9:9A:86:13:2E:AB:A3:26:9F:5C:D8:12:2B:F1:66:04:BD:51:0A
X509v3 Authority Key Identifier:
keyid:35:1C:EF:94:50:94:D3:7A:44:47:1E:1C:0A:7B:7A:B7:3A:EB:B9:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2337/4F48F8F81B3311EAAD922842C4F9AE02/NRzvlFCU03pERx4cCnt6tzrruZw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NRzvlFCU03pERx4cCnt6tzrruZw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2337/4F48F8F81B3311EAAD922842C4F9AE02/398D7FDA0B9511EC9B44492AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.84.92.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:ea:6b:da:6e:68:68:55:62:d3:f7:c1:dd:25:f8:e7:65:32:
70:3d:e4:8e:18:d2:4e:65:32:32:5b:20:43:db:d9:66:bc:eb:
5b:aa:38:da:46:be:98:62:ba:1e:ed:87:20:db:00:4c:d7:8c:
b5:72:51:c7:72:53:df:d5:fb:8b:92:2c:9d:72:ce:35:02:7e:
d7:60:bb:e3:11:7c:2e:9f:f1:27:06:d2:d8:ac:21:28:73:d7:
05:e5:7d:25:b8:32:c2:42:7e:d0:47:97:2a:e4:e8:50:cb:d2:
d2:97:5c:6e:29:79:fa:fa:44:b8:22:23:32:59:10:30:13:22:
c9:7c:61:62:f1:f3:de:8f:94:2b:3e:ec:ce:74:77:f5:e5:ba:
b9:c9:ae:de:12:3e:c8:6d:e2:c8:e0:be:4b:5e:c6:29:22:0b:
bd:56:9e:c4:25:53:2b:31:7f:e8:2b:26:70:ef:b3:9b:29:89:
a8:84:d5:e4:78:75:e8:70:bc:3a:23:29:f5:d9:46:01:53:6b:
79:90:7c:ae:b7:72:ef:a2:a1:93:3a:d4:e2:5f:7e:74:82:47:
b7:2d:59:40:04:50:e4:c1:ac:92:23:56:6a:6c:b7:dc:21:0b:
f7:6f:c5:69:0c:35:02:ab:8b:29:97:f4:85:f2:ee:32:7f:bc:
86:d9:2e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:32 2024 by rpki-client on console-ams.rpki-client.org