Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2337/4F48F8F81B3311EAAD922842C4F9AE02/B8193C54BDE411EAB947BE63C4F9AE02.roa
File: B8193C54BDE411EAB947BE63C4F9AE02.roa (raw, json)
Hash identifier: yK0BrUDGGpik5/2cVKn8E9qKw5c0TtVaNgYExIBvqFI=
Subject key identifier: B2:FB:C4:5E:93:26:39:D1:24:EA:6E:77:C5:52:3C:34:4B:18:2F:77
Certificate issuer: /CN=A91E2337/serialNumber=351CEF945094D37A44471E1C0A7B7AB73AEBB99C
Certificate serial: 0558
Authority key identifier: 35:1C:EF:94:50:94:D3:7A:44:47:1E:1C:0A:7B:7A:B7:3A:EB:B9:9C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NRzvlFCU03pERx4cCnt6tzrruZw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2337/4F48F8F81B3311EAAD922842C4F9AE02/B8193C54BDE411EAB947BE63C4F9AE02.roa
Signing time: Wed 24 Feb 2021 20:34:44 +0000
ROA not before: Wed 24 Feb 2021 20:34:44 +0000
ROA not after: Sun 01 May 2022 00:00:00 +0000
asID: 24373
IP address blocks: 103.84.94.0/24 maxlen: 24
103.84.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1368 (0x558)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2337/serialNumber=351CEF945094D37A44471E1C0A7B7AB73AEBB99C
Validity
Not Before: Feb 24 20:34:44 2021 GMT
Not After : May 1 00:00:00 2022 GMT
Subject: CN=6036b864-cf04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:74:00:bf:71:f1:e4:0a:09:e3:99:51:5a:e4:
16:d8:c4:18:61:f4:d8:3d:9e:36:ea:b9:be:52:bc:
34:ec:c1:aa:25:0c:1f:76:f2:ed:92:51:03:dd:42:
b9:9d:a0:be:06:4d:73:1f:2e:2b:cb:9d:7b:c3:25:
ee:5f:f5:78:97:1d:ce:43:f1:d4:d0:6e:95:53:b2:
e2:c1:19:d0:01:6d:6f:78:d5:df:63:20:a8:62:39:
d1:a2:85:01:db:28:ce:7c:28:86:49:3b:42:24:af:
40:ca:80:a6:d6:4b:80:99:91:19:3d:02:b8:ab:0a:
1d:20:a3:e2:74:0f:11:9c:fd:2a:26:36:f0:14:13:
5e:8d:44:59:27:33:01:f0:f3:40:49:af:ce:74:36:
c9:95:b0:5e:22:74:0e:ce:b2:98:d8:d3:86:b3:89:
50:26:e1:32:15:8c:e0:67:43:78:3d:a7:f6:6f:56:
05:35:b9:c6:36:98:a0:bc:0e:48:44:1d:b0:50:02:
0b:e8:3e:c1:c5:2d:cd:b1:08:72:06:37:ec:2f:f9:
cc:35:0d:d1:dc:dc:9f:a4:3f:c3:71:b6:fe:3b:64:
3c:d3:99:7c:03:ee:ba:68:b2:3f:9e:40:a7:8f:e2:
45:5c:9b:a8:c5:6e:95:31:6b:e5:c4:d8:16:78:69:
28:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:FB:C4:5E:93:26:39:D1:24:EA:6E:77:C5:52:3C:34:4B:18:2F:77
X509v3 Authority Key Identifier:
keyid:35:1C:EF:94:50:94:D3:7A:44:47:1E:1C:0A:7B:7A:B7:3A:EB:B9:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2337/4F48F8F81B3311EAAD922842C4F9AE02/NRzvlFCU03pERx4cCnt6tzrruZw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NRzvlFCU03pERx4cCnt6tzrruZw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2337/4F48F8F81B3311EAAD922842C4F9AE02/B8193C54BDE411EAB947BE63C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.84.94.0/23
Signature Algorithm: sha256WithRSAEncryption
69:9f:d0:3d:cd:6a:7a:61:1a:31:9f:16:45:86:c3:de:26:73:
55:58:37:af:b7:67:9d:06:40:da:99:c7:ad:f6:35:33:bf:3e:
a4:b1:69:4f:12:f2:cd:51:79:49:9d:13:c0:1d:8e:4f:06:62:
ba:83:8b:61:6c:dc:ad:5c:3d:49:df:55:69:e5:fe:62:6a:05:
61:87:9f:c4:14:03:d3:ed:8a:fa:c8:cf:12:c5:48:35:48:4c:
5a:66:1c:bc:ef:95:fa:56:8c:a8:d5:fa:ca:d4:52:33:80:d7:
ff:f2:db:4a:39:f3:bc:9c:17:68:b7:4c:45:71:66:f3:8d:fe:
19:20:56:b3:c8:e2:00:f6:88:85:d4:f2:83:4d:72:86:49:89:
20:df:e2:7f:34:cf:60:5d:d4:85:07:fb:e5:56:94:46:de:36:
c0:8a:db:0e:11:38:95:6b:49:bf:6d:d6:45:3c:91:df:b0:44:
d2:b1:3b:c1:c1:fc:59:76:a9:b2:80:f9:4f:75:a2:fe:46:b5:
c0:dd:f8:a1:71:1e:37:0e:3b:d0:88:01:66:31:ad:fe:06:87:
da:20:ff:b0:26:5e:90:5d:71:fe:1f:2e:f4:21:24:a7:15:2b:
80:2d:23:83:ed:1a:17:e0:2c:b4:3e:2d:01:aa:fa:f2:43:d2:
00:59:25:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:08 2023 by rpki-client on console-ams.rpki-client.org