Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFE3F/4D794BD2176811EAA896FF79C4F9AE02/FCC83816182311EB85A87020C4F9AE02.roa
File: FCC83816182311EB85A87020C4F9AE02.roa (raw, json)
Hash identifier: KWUbbUlH9/S+lHlqxjeTEnJ1mkU+msQSrwtz76bBZ84=
Subject key identifier: 37:18:C7:C2:A1:06:2B:90:BA:54:7B:FB:C6:92:0C:9C:6B:98:0E:4A
Certificate issuer: /CN=A91FFE3F/serialNumber=859F98591F512D5BD8EE3DDB3F570E883BFF0410
Certificate serial: 07DD
Authority key identifier: 85:9F:98:59:1F:51:2D:5B:D8:EE:3D:DB:3F:57:0E:88:3B:FF:04:10
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZ-YWR9RLVvY7j3bP1cOiDv_BBA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FFE3F/4D794BD2176811EAA896FF79C4F9AE02/FCC83816182311EB85A87020C4F9AE02.roa
Signing time: Sat 01 Jan 2022 08:36:30 +0000
ROA not before: Sat 01 Jan 2022 08:36:30 +0000
ROA not after: Thu 02 Mar 2023 00:00:00 +0000
asID: 4785
IP address blocks: 103.201.129.0/24 maxlen: 24
202.5.220.0/24 maxlen: 24
202.5.221.0/24 maxlen: 24
202.5.222.0/24 maxlen: 24
202.5.223.0/24 maxlen: 24
2403:ac80::/32 maxlen: 32
2403:ac80:a::/48 maxlen: 48
2403:ac80:b::/48 maxlen: 48
2403:ac80:c::/48 maxlen: 48
2403:ac80:d::/48 maxlen: 48
2403:ac80:88::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2013 (0x7dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FFE3F/serialNumber=859F98591F512D5BD8EE3DDB3F570E883BFF0410
Validity
Not Before: Jan 1 08:36:30 2022 GMT
Not After : Mar 2 00:00:00 2023 GMT
Subject: CN=61d0128e-41b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:15:78:54:16:45:c7:54:84:4c:e3:be:e2:5f:
21:bd:bf:56:d7:b9:a3:0d:77:86:1a:0e:76:e8:9d:
d7:fc:5a:b9:a4:4d:2b:26:0e:17:58:f3:40:11:8f:
7a:e3:1d:bd:b7:7e:23:2f:a5:40:1b:04:dc:dc:cc:
ae:a2:2f:21:5f:5e:72:71:5e:11:7c:97:9d:3e:87:
15:58:81:30:8d:01:34:22:38:ff:d7:36:d5:4d:ea:
f8:f6:5e:f7:35:9d:5e:7f:e0:31:21:a0:a5:8b:f3:
e9:1e:26:e1:a4:4d:02:88:9a:ef:f1:e8:4b:af:87:
11:f2:53:41:ac:f7:76:c6:d7:f2:95:20:06:85:a7:
c1:33:f1:80:eb:7b:9a:54:af:d2:9c:38:71:88:c6:
57:29:e5:b0:6a:13:7f:1f:5b:35:02:85:21:ea:c1:
42:fd:bb:33:9c:1a:50:58:b1:a8:8d:43:0b:ac:f9:
5f:ca:4b:de:6e:30:30:96:71:fb:ea:f7:2a:24:22:
a6:09:ca:81:6f:12:60:40:0c:52:c5:9c:ef:81:c5:
24:d8:4a:2f:8b:e4:67:fc:b2:c4:df:ba:d5:d1:e8:
4f:82:25:18:02:b1:41:b0:f8:f3:c0:05:65:35:f0:
7d:1a:4f:83:14:eb:d7:02:af:7d:3e:ee:a0:50:c9:
6d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:18:C7:C2:A1:06:2B:90:BA:54:7B:FB:C6:92:0C:9C:6B:98:0E:4A
X509v3 Authority Key Identifier:
keyid:85:9F:98:59:1F:51:2D:5B:D8:EE:3D:DB:3F:57:0E:88:3B:FF:04:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FFE3F/4D794BD2176811EAA896FF79C4F9AE02/hZ-YWR9RLVvY7j3bP1cOiDv_BBA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZ-YWR9RLVvY7j3bP1cOiDv_BBA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFE3F/4D794BD2176811EAA896FF79C4F9AE02/FCC83816182311EB85A87020C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.201.129.0/24
202.5.220.0/22
IPv6:
2403:ac80::/32
Signature Algorithm: sha256WithRSAEncryption
aa:f1:7d:33:7e:32:dc:79:86:25:99:a2:e3:e7:4b:25:81:83:
7a:b6:25:dd:22:e4:8b:c1:31:c5:83:78:aa:b2:11:26:59:28:
b2:7b:86:d0:fe:82:1f:e4:03:5f:1d:08:91:80:ff:23:52:93:
2c:85:c5:77:fe:7f:f7:2a:1e:db:39:78:81:ca:4d:ab:8e:65:
32:5b:d3:71:4f:f6:cb:32:19:92:bd:af:6a:0f:f8:9e:f6:d9:
a1:22:9f:db:b7:4e:1e:ff:93:62:13:8d:e6:6d:54:fe:46:1a:
74:a3:4d:8e:54:99:04:47:0c:10:5c:e4:d1:0b:20:ef:ce:bd:
0c:b8:54:e3:b3:db:78:d0:d0:a4:67:e4:bb:ec:34:aa:fe:da:
96:6a:ca:35:6d:d3:3f:13:ef:3a:6f:4a:1b:ef:0d:89:d9:f1:
bf:a1:d3:51:84:d3:7b:37:b8:7a:c0:29:e1:0a:e5:7d:50:4b:
32:7a:bd:0a:9e:d3:99:8f:57:02:f5:98:47:0d:46:37:13:66:
a2:0e:9d:9e:ba:39:db:c5:a3:45:81:fa:66:d8:2e:fd:55:19:
b1:ee:b4:35:78:4d:fc:ba:fa:7d:4e:c8:1d:88:bf:e9:67:9e:
6c:7c:f2:84:99:64:9a:fb:95:9a:0e:20:0d:77:41:83:d3:c1:
62:27:fb:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:15 2023 by rpki-client on console-fra.rpki-client.org