Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF27E/6FC32460BFD011E898AD6C71C4F9AE02/AD17B87C504311E98761C12FC4F9AE02.roa
File: AD17B87C504311E98761C12FC4F9AE02.roa (raw, json)
Hash identifier: BM+CgUKjP5M9VR491w2Yi0fa+rVE6bTv02+Y2n0PHDk=
Subject key identifier: 79:79:97:A1:75:C8:62:3F:73:E2:94:F7:30:14:A4:4F:05:F0:E9:D4
Certificate issuer: /CN=A91EF27E/serialNumber=D1D95B7E7B0768DB5448AA4BB4C913C5A48598B8
Certificate serial: 0E6B
Authority key identifier: D1:D9:5B:7E:7B:07:68:DB:54:48:AA:4B:B4:C9:13:C5:A4:85:98:B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0dlbfnsHaNtUSKpLtMkTxaSFmLg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF27E/6FC32460BFD011E898AD6C71C4F9AE02/AD17B87C504311E98761C12FC4F9AE02.roa
Signing time: Wed 01 Dec 2021 06:15:43 +0000
ROA not before: Wed 01 Dec 2021 06:15:43 +0000
ROA not after: Tue 31 Jan 2023 00:00:00 +0000
asID: 131111
IP address blocks: 103.78.96.0/22 maxlen: 22
103.78.96.0/23 maxlen: 23
103.78.96.0/24 maxlen: 24
103.78.97.0/24 maxlen: 24
103.78.98.0/23 maxlen: 23
103.78.98.0/24 maxlen: 24
103.78.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3691 (0xe6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF27E/serialNumber=D1D95B7E7B0768DB5448AA4BB4C913C5A48598B8
Validity
Not Before: Dec 1 06:15:43 2021 GMT
Not After : Jan 31 00:00:00 2023 GMT
Subject: CN=61a7130f-a50d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:24:3d:f9:c5:df:8b:e2:a0:74:2c:f8:7b:1d:
14:5a:fb:2b:77:ea:61:a7:59:d7:f4:0b:21:e8:78:
60:5c:b1:c0:e2:74:95:14:b1:7d:8a:7c:79:0d:8a:
b2:6d:cd:f3:ae:fe:16:6a:6a:d9:3f:cb:93:14:a3:
b1:7b:99:af:f0:c1:2e:45:b6:b7:8f:80:f7:ab:d1:
6a:90:e8:f0:c4:39:78:ee:85:13:c9:80:4b:c4:c4:
c9:cf:9b:63:be:8a:29:5b:06:17:f1:3e:29:2c:61:
98:da:97:a5:5f:60:63:45:0b:9a:eb:67:d8:c9:c8:
cc:b2:0d:d2:4d:ca:f5:a7:e6:96:71:08:1c:88:0c:
26:b9:97:20:ba:96:b6:be:c1:48:f3:70:93:6f:58:
3e:c6:13:4d:37:98:88:a2:07:f1:70:51:dd:62:09:
57:ab:7f:ef:07:61:1e:e6:0a:b5:98:40:35:ec:49:
f3:e8:94:e8:f6:92:87:c4:61:60:fb:db:72:f2:ee:
1d:2a:a6:bd:a9:17:0e:25:70:67:3f:1f:5f:60:3a:
b5:80:d8:f0:8c:35:79:40:c6:de:2e:ca:39:e6:6d:
25:41:14:1d:c5:43:53:cc:e3:f5:ee:12:78:42:5d:
09:ae:c0:53:12:ef:8b:5c:c6:bd:4f:91:a8:bb:37:
0c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:79:97:A1:75:C8:62:3F:73:E2:94:F7:30:14:A4:4F:05:F0:E9:D4
X509v3 Authority Key Identifier:
keyid:D1:D9:5B:7E:7B:07:68:DB:54:48:AA:4B:B4:C9:13:C5:A4:85:98:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF27E/6FC32460BFD011E898AD6C71C4F9AE02/0dlbfnsHaNtUSKpLtMkTxaSFmLg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0dlbfnsHaNtUSKpLtMkTxaSFmLg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF27E/6FC32460BFD011E898AD6C71C4F9AE02/AD17B87C504311E98761C12FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.78.96.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:c8:59:13:82:b7:ff:be:88:6b:52:d1:80:4a:41:9a:6e:55:
c2:a8:bb:63:99:0b:f0:cc:92:9d:7e:3c:4e:06:8a:a6:cb:21:
a5:18:e3:9b:eb:3f:d1:b1:3d:05:3f:b8:cb:a9:ae:c3:8d:ce:
6f:e1:4c:40:68:b3:97:4e:85:34:ef:bd:47:02:07:55:56:7a:
72:4a:44:77:a4:1e:78:36:9c:cc:96:c9:6d:14:6f:5f:69:35:
b0:4a:78:6f:9f:d5:be:a1:8b:67:7a:da:52:7d:d9:76:40:ea:
14:16:a2:35:c1:00:d8:e1:b0:7f:11:07:16:a3:6f:ef:03:d2:
39:70:5d:11:b3:4a:a9:5e:15:d8:f7:83:0e:c4:3f:25:90:4d:
67:53:8b:a2:e3:51:be:d8:8b:5b:59:78:34:41:f5:40:6b:b8:
8f:5b:79:77:d2:7f:1f:11:62:14:48:00:7d:6c:37:f3:88:f0:
ce:58:72:51:07:99:79:4d:a8:49:2e:80:d8:ae:54:5d:05:58:
0b:e4:11:2c:72:9c:b0:a7:b9:c9:52:bb:b8:46:70:4f:15:a6:
ae:16:aa:0b:9c:fc:a2:f5:b9:0f:30:73:21:f6:6e:94:69:9d:
5a:4b:5d:be:29:b9:b6:02:6b:e6:c4:0f:59:cd:67:41:1c:57:
eb:59:ac:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:14 2023 by rpki-client on console-fra.rpki-client.org