Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E89EE/BDDEAD986EBA11E8A126AD3EC4F9AE02/A435ACFC2DA711ECA648CC74C4F9AE02.roa
File: A435ACFC2DA711ECA648CC74C4F9AE02.roa (raw, json)
Hash identifier: EgUr9Ccylq6P5yD1ufY73uGGjNSxpbaKHMI+msOOYrc=
Subject key identifier: 1D:82:F5:C6:82:F8:07:DA:68:B1:7D:37:02:95:08:D6:03:A2:63:C8
Certificate issuer: /CN=A91E89EE/serialNumber=F184C0E439BEFE896451F5ED5CFD007E46A6EF0C
Certificate serial: 1123
Authority key identifier: F1:84:C0:E4:39:BE:FE:89:64:51:F5:ED:5C:FD:00:7E:46:A6:EF:0C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YTA5Dm-_olkUfXtXP0Afkam7ww.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E89EE/BDDEAD986EBA11E8A126AD3EC4F9AE02/A435ACFC2DA711ECA648CC74C4F9AE02.roa
Signing time: Tue 26 Apr 2022 18:04:46 +0000
ROA not before: Tue 26 Apr 2022 18:04:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 55933
IP address blocks: 103.53.216.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4387 (0x1123)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E89EE/serialNumber=F184C0E439BEFE896451F5ED5CFD007E46A6EF0C
Validity
Not Before: Apr 26 18:04:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6268343e-1e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c2:07:ef:d4:a7:04:c0:d2:40:37:d4:de:f5:
f5:52:bf:56:98:50:a2:c0:35:40:11:d1:6b:db:66:
66:d6:43:3f:6a:0f:63:2b:96:48:3b:f3:78:ac:ce:
79:c5:22:05:a1:12:2c:a8:26:9a:40:33:0a:5a:bf:
27:9d:d2:af:33:af:41:f0:93:1f:10:a9:f7:75:aa:
25:b7:c7:59:81:db:82:36:45:92:6d:3e:d9:27:72:
09:0a:ee:3c:bf:7c:29:2a:5f:13:7d:5c:f4:13:b8:
df:e2:b4:5a:60:9e:06:89:02:b0:8b:77:c6:28:88:
f9:54:25:51:24:1a:8d:12:42:b9:1b:83:7e:6a:0a:
7c:fd:ff:03:1f:95:1a:89:7a:0e:ba:6f:0d:ae:c9:
c6:3a:b7:b3:3d:ae:27:45:b8:85:1a:50:5a:b5:5f:
59:ea:fe:01:69:c7:86:13:e4:1b:20:0e:3b:4c:9f:
bb:92:d6:e4:6b:ec:cc:16:9d:7b:7f:2e:82:61:b0:
98:0f:fc:ae:0d:2c:30:47:64:cd:d1:4a:45:a4:c8:
d8:5b:fe:8b:7c:33:1b:2d:32:52:b2:58:07:e6:27:
af:5d:48:fb:87:3d:43:77:ea:4b:79:ff:b9:72:8b:
e4:11:f8:5e:c6:ea:c1:86:48:47:25:28:67:14:d4:
31:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:82:F5:C6:82:F8:07:DA:68:B1:7D:37:02:95:08:D6:03:A2:63:C8
X509v3 Authority Key Identifier:
keyid:F1:84:C0:E4:39:BE:FE:89:64:51:F5:ED:5C:FD:00:7E:46:A6:EF:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E89EE/BDDEAD986EBA11E8A126AD3EC4F9AE02/8YTA5Dm-_olkUfXtXP0Afkam7ww.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YTA5Dm-_olkUfXtXP0Afkam7ww.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E89EE/BDDEAD986EBA11E8A126AD3EC4F9AE02/A435ACFC2DA711ECA648CC74C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.53.216.0/22
Signature Algorithm: sha256WithRSAEncryption
bc:19:b7:2a:80:40:5d:35:74:be:ce:35:86:b2:04:61:8a:25:
3d:d6:dc:5e:c0:a3:bf:f5:2c:e4:a7:4a:88:98:45:c1:d6:27:
ea:cf:f4:72:bd:de:bc:d2:14:c8:14:03:a7:e7:d3:56:93:c3:
f2:01:3e:ae:c0:8a:ca:66:2d:c0:8b:eb:59:b9:ba:dc:ff:c8:
28:e4:b7:5c:6b:e7:a6:e6:c0:62:ad:9f:aa:22:0d:5c:43:ae:
df:d0:3d:0e:1a:f5:2d:ca:06:9a:53:e2:81:b9:c8:f1:05:88:
d5:d1:6f:53:a0:43:ec:00:64:35:84:28:bc:4e:7f:c1:0a:85:
97:16:52:6b:6f:b7:07:ea:40:cc:2d:64:93:38:8b:1f:80:00:
ee:9a:45:de:79:86:43:6b:16:24:5e:06:4a:5f:89:d6:e5:60:
11:b8:9f:c8:63:c1:66:61:31:0e:4c:1e:3a:12:4a:ce:d4:35:
24:8d:73:ad:2c:98:24:f9:2b:2f:e6:4a:20:fc:02:58:06:e1:
9b:b4:1d:5f:3a:a5:20:c7:d2:bb:ba:93:2c:76:96:bc:91:17:
77:9d:c4:75:03:c1:ba:84:9d:7c:7d:5c:92:5a:ff:c7:cc:1e:
ae:92:46:22:46:27:12:f9:85:b1:0d:60:af:8d:48:9e:68:9d:
f7:0f:f0:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:11 2023 by rpki-client on console-ams.rpki-client.org