Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8B73/7C2E0E40C51011E983F4D40CC4F9AE02/8042CE52B26C11EC94F2571FC4F9AE02.roa
File: 8042CE52B26C11EC94F2571FC4F9AE02.roa (raw, json)
Hash identifier: xkfhWLk/LfAQh+HEhPiM0LF8nNyqKU6jxnDu5MsIH6Q=
Subject key identifier: 36:E1:F9:4F:48:6F:A0:14:DF:80:A3:93:66:22:FD:12:11:B2:26:E0
Certificate issuer: /CN=A91F8B73/serialNumber=81563E28D485A6964CDB5D19553423D24DF2D94F
Certificate serial: 0A34
Authority key identifier: 81:56:3E:28:D4:85:A6:96:4C:DB:5D:19:55:34:23:D2:4D:F2:D9:4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gVY-KNSFppZM210ZVTQj0k3y2U8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8B73/7C2E0E40C51011E983F4D40CC4F9AE02/8042CE52B26C11EC94F2571FC4F9AE02.roa
Signing time: Sat 02 Apr 2022 10:06:03 +0000
ROA not before: Sat 02 Apr 2022 10:06:03 +0000
ROA not after: Mon 31 Oct 2022 00:00:00 +0000
asID: 138418
IP address blocks: 103.142.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2612 (0xa34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8B73/serialNumber=81563E28D485A6964CDB5D19553423D24DF2D94F
Validity
Not Before: Apr 2 10:06:03 2022 GMT
Not After : Oct 31 00:00:00 2022 GMT
Subject: CN=6248200a-5420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b8:dc:47:a7:0e:c3:b2:d3:59:80:67:42:9f:
d2:02:25:13:d2:26:1e:68:d1:7c:e7:80:a3:d6:37:
3d:0f:0a:1b:95:df:a6:06:94:54:af:e4:a2:f7:1e:
59:ba:34:2c:2e:04:d4:be:76:ef:89:fe:a0:75:93:
12:71:88:0c:16:fd:e2:3b:02:a6:07:6e:2e:18:00:
f1:7c:84:fb:86:93:67:b8:a9:85:54:55:0e:e9:a9:
1d:57:a8:8c:2a:35:37:5a:be:f3:aa:ee:25:ed:81:
5d:d5:b8:e5:00:7c:09:b7:56:d9:d5:f5:24:2b:3e:
77:5e:44:65:af:cc:bc:ae:1a:a5:23:f1:66:4a:70:
5d:35:17:ac:5e:d1:21:b1:ca:89:2b:01:0f:4c:8a:
91:d7:66:e4:64:51:d8:7e:57:d8:b9:9b:a9:78:32:
e9:d0:bb:d9:3a:09:5c:ce:64:0d:3c:06:d3:d0:8f:
85:af:e7:b8:08:b6:14:68:a8:31:d3:37:ba:4e:9d:
0c:81:b3:fa:ac:b0:bd:35:74:1a:62:fd:86:58:70:
b2:12:c9:c9:44:9f:28:fa:91:dd:5a:35:8c:d4:8a:
51:23:1d:d5:89:a7:10:60:f3:ca:d6:d4:79:9b:c2:
dc:e9:d9:75:4b:e4:33:cb:f9:a9:e8:74:7c:b6:5c:
9f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E1:F9:4F:48:6F:A0:14:DF:80:A3:93:66:22:FD:12:11:B2:26:E0
X509v3 Authority Key Identifier:
keyid:81:56:3E:28:D4:85:A6:96:4C:DB:5D:19:55:34:23:D2:4D:F2:D9:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8B73/7C2E0E40C51011E983F4D40CC4F9AE02/gVY-KNSFppZM210ZVTQj0k3y2U8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gVY-KNSFppZM210ZVTQj0k3y2U8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8B73/7C2E0E40C51011E983F4D40CC4F9AE02/8042CE52B26C11EC94F2571FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.142.66.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:5d:11:93:3b:4d:c9:c5:9f:77:9d:28:7d:bb:32:fe:35:cb:
0b:92:ad:a2:61:e0:23:fc:cf:00:d9:40:43:a6:d5:61:a2:ab:
cc:53:69:f6:e2:10:85:d4:ad:3e:4e:4c:86:37:20:30:5d:3e:
46:98:0f:fa:db:66:c6:48:57:e8:69:41:2f:b7:14:79:01:46:
83:41:c0:fe:da:8d:9a:23:24:0b:71:73:98:16:02:e7:a4:b1:
07:c7:46:a3:e6:1f:c1:a5:5a:25:cc:a7:aa:a9:d6:4b:52:6d:
2d:a4:b6:48:6f:5e:86:c8:18:08:ed:b5:38:a7:3b:f0:ac:c0:
b4:b4:bc:cd:da:a0:6f:67:60:54:b7:94:50:57:5d:f9:36:66:
9a:1d:1f:2e:17:e9:ae:88:8a:14:fa:9f:1c:7f:ec:97:68:41:
f5:2d:81:28:61:b8:69:b1:37:9d:3a:bf:ff:8d:2d:7f:49:9e:
8c:12:d6:29:c0:83:80:78:d2:37:cc:0e:54:46:20:43:29:9f:
82:a1:89:4d:02:05:9e:72:f2:8c:a7:55:ff:8f:6c:89:56:df:
2e:49:dc:ae:95:98:71:d7:f9:6b:dc:94:7a:c1:f1:73:61:ba:
6b:cd:85:f8:e5:e3:29:80:bc:4a:77:95:ca:f3:0b:f6:23:b3:
62:b4:7f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:15 2023 by rpki-client on console-fra.rpki-client.org