Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8B73/7C2E0E40C51011E983F4D40CC4F9AE02/43E01FB8146111ECBFF2AE75C4F9AE02.roa
File: 43E01FB8146111ECBFF2AE75C4F9AE02.roa (raw, json)
Hash identifier: OpyZaOoRsUEa8JIHEFrFZuTebqeKVPtKje+gSPCEYbc=
Subject key identifier: 5B:81:16:98:4D:FF:45:6E:26:03:F7:81:22:2F:0E:B6:35:09:AE:11
Certificate issuer: /CN=A91F8B73/serialNumber=81563E28D485A6964CDB5D19553423D24DF2D94F
Certificate serial: 089F
Authority key identifier: 81:56:3E:28:D4:85:A6:96:4C:DB:5D:19:55:34:23:D2:4D:F2:D9:4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gVY-KNSFppZM210ZVTQj0k3y2U8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8B73/7C2E0E40C51011E983F4D40CC4F9AE02/43E01FB8146111ECBFF2AE75C4F9AE02.roa
Signing time: Mon 13 Sep 2021 07:07:33 +0000
ROA not before: Mon 13 Sep 2021 07:07:33 +0000
ROA not after: Mon 31 Oct 2022 00:00:00 +0000
asID: 139601
IP address blocks: 103.142.66.0/24 maxlen: 24
2001:df1:3280::/47 maxlen: 47
2001:df1:3280::/48 maxlen: 48
2001:df1:3281::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2207 (0x89f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8B73/serialNumber=81563E28D485A6964CDB5D19553423D24DF2D94F
Validity
Not Before: Sep 13 07:07:33 2021 GMT
Not After : Oct 31 00:00:00 2022 GMT
Subject: CN=613ef8b4-11a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:95:fd:bc:ca:c8:93:df:9f:f2:c5:f2:c0:da:
e7:88:d6:39:fd:39:df:d3:a4:26:34:25:fd:b2:0c:
59:c8:89:98:1f:97:db:c0:d3:ce:00:17:a0:44:79:
3b:2c:33:92:b9:f8:08:88:41:a7:13:65:65:64:47:
03:3a:a3:5e:d5:24:2a:5e:39:8e:39:85:4b:0c:04:
ab:3a:46:54:25:05:20:4c:20:52:79:79:c9:60:72:
05:46:7d:69:1f:bb:c1:1c:9d:d1:92:67:45:86:22:
04:5a:00:e6:73:4e:cf:b1:b8:66:e9:c1:69:92:30:
c9:1f:80:4a:d0:e6:d2:f5:4e:cb:ca:5b:66:7b:48:
bd:8c:cd:fe:20:a6:26:b8:be:f7:9b:8d:20:4b:a4:
0b:5d:6b:19:ab:ec:12:1d:73:72:e0:ba:48:11:b4:
44:d0:9d:7c:c4:82:d3:44:a9:02:15:ef:60:8f:e5:
18:d8:ee:f0:96:a0:8f:24:48:8b:08:3a:80:23:a6:
1e:54:7e:09:bc:5f:59:99:30:87:63:75:8d:47:88:
68:4c:05:33:90:a9:4f:93:6f:d9:75:b7:8b:9c:8f:
b4:76:85:0a:99:ae:b5:a5:1c:12:4a:3d:75:59:0d:
2e:99:ea:30:82:aa:d2:94:ac:01:a7:03:8d:93:4d:
8e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:81:16:98:4D:FF:45:6E:26:03:F7:81:22:2F:0E:B6:35:09:AE:11
X509v3 Authority Key Identifier:
keyid:81:56:3E:28:D4:85:A6:96:4C:DB:5D:19:55:34:23:D2:4D:F2:D9:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8B73/7C2E0E40C51011E983F4D40CC4F9AE02/gVY-KNSFppZM210ZVTQj0k3y2U8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gVY-KNSFppZM210ZVTQj0k3y2U8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8B73/7C2E0E40C51011E983F4D40CC4F9AE02/43E01FB8146111ECBFF2AE75C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.142.66.0/24
IPv6:
2001:df1:3280::/47
Signature Algorithm: sha256WithRSAEncryption
4d:a1:d7:e6:b9:03:df:5e:ee:09:c9:c1:a2:43:d0:ce:58:60:
71:28:f4:38:c1:93:77:f7:14:af:e0:d2:39:69:50:b8:13:ed:
f9:31:2a:08:41:35:f8:e1:49:e5:76:5a:c8:bc:18:c5:98:06:
99:5a:82:df:2b:78:af:fa:d4:f5:2a:3e:52:e5:39:29:9c:21:
d2:91:59:ff:6e:d3:b9:40:b3:83:a2:ec:9d:a2:ed:e4:07:ef:
21:1f:b3:eb:0e:74:fc:02:70:6f:fd:59:7f:94:e8:c3:f4:d0:
16:11:64:fc:a7:b0:6e:47:fd:51:6c:3f:bf:e5:33:84:98:aa:
d9:52:07:69:72:20:f9:e4:76:58:95:b7:fa:7e:0f:de:ce:51:
89:cc:7b:6c:0a:6a:31:16:2e:e9:1f:96:c1:1b:86:70:91:70:
7d:e8:3e:d6:e9:ba:f4:1b:15:bf:9b:f1:30:b5:a0:cc:31:9b:
31:6e:56:91:63:59:16:b7:42:e8:f4:7c:14:66:ee:0f:03:a1:
bd:a3:32:b7:11:41:d4:1a:2e:b8:5f:40:6e:ed:04:17:fd:26:
7b:4f:a0:94:a1:23:2f:ba:a1:81:4e:3f:6d:32:cd:1f:7b:a0:
d7:e6:69:8c:23:16:44:35:e2:9f:10:58:e0:f4:88:69:7f:6c:
c0:52:bb:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:39 2024 by rpki-client on console-ams.rpki-client.org