Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAE47/974D6D7E48F011EA886EB445C4F9AE02/F8DE0512247F11EE97AC345BC4F9AE02.roa
File: F8DE0512247F11EE97AC345BC4F9AE02.roa (raw, json)
Hash identifier: A76lYW8Yk7Dts5u39iCO6Hk/cmEwphjXPTbE/Q8RmiI=
Subject key identifier: 0D:0C:6E:2C:55:E5:3A:90:9A:C7:5E:C6:85:16:A2:B4:3C:CC:A7:F5
Certificate issuer: /CN=A91FAE47/serialNumber=44EAC9DF307E581A9BBBF6524F145997310E63B3
Certificate serial: 04
Authority key identifier: 44:EA:C9:DF:30:7E:58:1A:9B:BB:F6:52:4F:14:59:97:31:0E:63:B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ROrJ3zB-WBqbu_ZSTxRZlzEOY7M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FAE47/974D6D7E48F011EA886EB445C4F9AE02/F8DE0512247F11EE97AC345BC4F9AE02.roa
Signing time: Mon 17 Jul 2023 08:57:35 +0000
ROA not before: Mon 17 Jul 2023 08:57:35 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 138623
IP address blocks: 103.106.0.0/24 maxlen: 24
103.106.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FAE47/serialNumber=44EAC9DF307E581A9BBBF6524F145997310E63B3
Validity
Not Before: Jul 17 08:57:35 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=64b5027f-114a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0b:18:f9:94:c0:ad:48:14:fb:82:2f:bc:93:
a0:e5:a1:4b:e8:8d:9a:48:c1:7d:53:5c:e1:e2:42:
5c:5e:83:f5:b8:b7:c4:fa:4c:eb:02:3e:ab:a8:da:
e6:bd:c3:56:4f:7b:c8:80:50:23:bd:82:9e:80:54:
d3:0e:41:b6:93:fd:e4:cf:2c:84:41:16:2c:f1:2b:
c5:7e:59:34:74:29:1f:f1:24:20:09:f5:c1:85:6b:
4a:55:fa:d6:4f:c1:ce:3c:f8:a9:8d:44:65:e4:b2:
d2:87:f4:c0:36:76:10:ad:d5:e6:4c:97:ad:62:2c:
a7:b4:38:0a:6e:da:4c:ab:97:64:34:38:5a:02:fb:
a4:63:dd:15:e3:a1:16:6e:d3:00:4b:ff:07:2f:49:
86:73:e2:08:fe:62:62:5f:d9:5d:8d:56:ce:bb:c9:
b0:80:ff:21:e0:52:c6:41:c9:56:f9:a8:77:49:e7:
f3:27:ce:a6:9d:66:17:ee:5e:ef:97:d9:fa:31:5e:
61:09:70:42:26:40:5b:7e:cb:98:f0:3d:c0:af:1f:
4d:45:65:d6:df:b0:38:d0:99:03:6a:7a:18:37:df:
b0:b3:e2:2e:2a:69:ee:24:f3:56:a4:96:51:68:00:
83:a8:26:f2:80:4c:81:00:49:2e:fb:9d:5e:96:dd:
d7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:0C:6E:2C:55:E5:3A:90:9A:C7:5E:C6:85:16:A2:B4:3C:CC:A7:F5
X509v3 Authority Key Identifier:
keyid:44:EA:C9:DF:30:7E:58:1A:9B:BB:F6:52:4F:14:59:97:31:0E:63:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FAE47/974D6D7E48F011EA886EB445C4F9AE02/ROrJ3zB-WBqbu_ZSTxRZlzEOY7M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ROrJ3zB-WBqbu_ZSTxRZlzEOY7M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAE47/974D6D7E48F011EA886EB445C4F9AE02/F8DE0512247F11EE97AC345BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.106.0.0/23
Signature Algorithm: sha256WithRSAEncryption
87:7d:d3:9a:5b:59:f2:6c:a4:c6:c9:1d:12:5a:77:9d:cf:00:
7e:c0:1c:3f:90:61:f6:37:38:b5:84:fc:9f:97:2c:c2:e1:b9:
a4:09:a1:3c:19:b4:7d:5d:90:71:71:ed:ea:0e:1b:5e:b1:b2:
ce:5b:97:24:6f:8f:ca:8e:f4:95:a0:05:ad:a0:00:0a:c3:a9:
00:fc:bc:c2:0c:1a:9b:ec:f2:12:fd:28:02:af:7b:dc:9e:fe:
66:d8:46:c5:7e:3a:51:67:8c:c5:6c:3a:1a:6b:6a:93:47:4e:
0b:7c:a3:b3:1d:2e:60:96:b4:e1:7b:60:23:0d:95:01:f4:78:
82:2d:29:00:6b:87:de:fc:74:5c:50:fd:fd:6e:ba:bc:63:b4:
71:69:35:66:ed:6a:78:f1:3c:c7:c3:60:b6:33:fe:3e:39:c3:
89:85:1f:87:a5:b5:c0:57:2a:6f:cb:c4:a5:fd:3f:f3:d9:08:
dc:2a:e7:cc:cb:ef:7d:d6:3d:26:f3:11:83:1e:3f:4e:13:1a:
8e:fb:78:5b:ad:c4:dd:37:78:3e:06:87:1d:eb:b6:89:c9:47:
f0:f0:d3:2e:b2:b7:c8:69:29:bf:22:53:d9:af:f6:32:04:43:
8d:be:86:6d:23:e0:6d:1c:b5:10:0c:bf:17:de:08:75:d7:99:
ab:cf:e4:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:40 2024 by rpki-client on console-ams.rpki-client.org