Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91129EC/84BE0546D9AA11EB9BB4DE48C4F9AE02/D83FFBA8D9AE11EBA5CFBB17C4F9AE02.roa
File: D83FFBA8D9AE11EBA5CFBB17C4F9AE02.roa (raw, json)
Hash identifier: +OSY0y1aFcWOw7kEDVGIPVO5GqH8S+weVacio5nMH3I=
Subject key identifier: DF:A9:A7:3B:58:DC:E8:CB:28:19:08:FF:74:F1:41:5D:B3:D3:F6:04
Certificate issuer: /CN=A91129EC/serialNumber=97A6B367D4B757CF4E390C11CD26B4514274EA61
Certificate serial: 0133
Authority key identifier: 97:A6:B3:67:D4:B7:57:CF:4E:39:0C:11:CD:26:B4:51:42:74:EA:61
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6azZ9S3V89OOQwRzSa0UUJ06mE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91129EC/84BE0546D9AA11EB9BB4DE48C4F9AE02/D83FFBA8D9AE11EBA5CFBB17C4F9AE02.roa
Signing time: Wed 01 Dec 2021 15:01:16 +0000
ROA not before: Wed 01 Dec 2021 15:01:16 +0000
ROA not after: Tue 31 Jan 2023 00:00:00 +0000
asID: 131111
IP address blocks: 103.78.24.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 307 (0x133)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91129EC/serialNumber=97A6B367D4B757CF4E390C11CD26B4514274EA61
Validity
Not Before: Dec 1 15:01:16 2021 GMT
Not After : Jan 31 00:00:00 2023 GMT
Subject: CN=61a78e3c-3014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7a:d8:72:cd:59:fb:cc:88:3b:cb:a4:19:74:
37:c9:42:9d:6f:0b:5e:e8:a0:1c:3e:91:c3:8b:8b:
02:84:0d:41:99:a4:fa:75:8b:ab:cb:d5:43:72:30:
84:e2:70:38:3f:7a:9b:2b:1b:f6:d5:a8:bd:c1:a1:
4d:4b:98:03:59:f3:fa:c7:e8:65:59:42:3c:5f:a9:
f8:b4:7b:be:30:68:d8:9e:9b:09:42:f3:46:d0:f1:
f9:19:28:f4:03:61:4d:43:51:37:02:9c:3d:c4:2d:
c2:5d:49:f6:f3:91:f8:e0:39:2c:cd:4a:96:ca:74:
2e:7e:25:22:4f:05:ce:7d:1a:0e:70:e3:7b:ec:44:
8e:05:8c:eb:b4:4e:bf:4a:14:52:a7:0f:a5:86:8e:
e6:c7:e7:3b:f1:ec:4b:b6:2e:e9:85:6b:5c:46:c8:
85:46:02:64:5a:5e:d6:39:d3:79:f2:dc:82:75:38:
aa:c5:37:e6:b4:66:a5:df:d2:98:94:11:14:0d:29:
f1:a4:cc:a4:21:0c:38:0f:1f:cd:2b:4d:fb:5f:35:
b3:28:31:f1:6b:48:93:93:91:fa:1b:5a:9c:fa:c0:
19:51:71:7c:f5:03:a9:1b:43:11:f0:7c:91:b3:3e:
57:74:54:2b:f0:3e:ea:d5:99:74:6a:88:89:62:f9:
26:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A9:A7:3B:58:DC:E8:CB:28:19:08:FF:74:F1:41:5D:B3:D3:F6:04
X509v3 Authority Key Identifier:
keyid:97:A6:B3:67:D4:B7:57:CF:4E:39:0C:11:CD:26:B4:51:42:74:EA:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91129EC/84BE0546D9AA11EB9BB4DE48C4F9AE02/l6azZ9S3V89OOQwRzSa0UUJ06mE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6azZ9S3V89OOQwRzSa0UUJ06mE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91129EC/84BE0546D9AA11EB9BB4DE48C4F9AE02/D83FFBA8D9AE11EBA5CFBB17C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.78.24.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:91:37:25:93:2a:c6:c9:b7:bb:b5:b1:10:7e:f2:eb:e3:b9:
5f:72:70:e1:70:25:50:3c:eb:0f:48:8d:1f:9d:d1:c2:39:79:
43:86:3f:7a:74:6c:07:55:d6:59:82:92:d4:84:f1:d9:79:f3:
cb:b4:11:86:53:dc:8c:07:f3:2b:d6:1a:d9:bc:87:c2:b4:b0:
45:48:94:9c:f0:c6:66:d5:74:fb:d0:a3:26:d3:d0:30:75:b3:
2b:6c:ef:e8:c6:af:44:8f:1d:05:84:f5:1e:80:7e:c3:f1:e2:
01:a8:71:c2:d6:9b:f7:11:80:89:e6:43:76:13:b6:4e:60:aa:
44:22:90:cc:e4:26:66:cb:84:54:18:f3:cc:ac:6a:f1:ba:5a:
d3:3a:76:38:de:e1:72:2d:d9:18:1d:75:bf:62:fe:e8:b5:7a:
35:54:1a:c2:87:8c:25:52:40:1a:af:bd:4a:0f:9c:a7:3a:26:
8d:8b:3a:d2:6a:b8:c0:7b:dc:c9:e9:07:54:50:86:ec:62:d7:
9c:f3:08:85:d6:bf:9e:e1:e8:12:37:f6:30:95:ef:36:88:47:
cf:95:68:7e:8a:3d:ff:b2:d9:32:2c:5d:63:7c:3b:71:98:d2:
dd:a6:fd:91:1b:42:eb:73:f0:af:17:e5:f4:46:d2:8b:b9:fc:
04:d9:26:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:54 2024 by rpki-client on console-fra.rpki-client.org