Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911CF5D/B1844B8228F111EAA2D2C761C4F9AE02/A71F5DB053B411EAB1294F48C4F9AE02.roa
File: A71F5DB053B411EAB1294F48C4F9AE02.roa (raw, json)
Hash identifier: gsM4f/33CtXbnXCJDzwacNtdIRU7/6Qrs27I4aERXM0=
Subject key identifier: 64:1B:38:3A:A6:F7:C2:B2:C0:52:40:CB:5F:41:B1:C8:E6:99:31:8D
Certificate issuer: /CN=A911CF5D/serialNumber=40FC7051E1350BB9A013DB0623E0F96516244279
Certificate serial: 058E
Authority key identifier: 40:FC:70:51:E1:35:0B:B9:A0:13:DB:06:23:E0:F9:65:16:24:42:79
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QPxwUeE1C7mgE9sGI-D5ZRYkQnk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911CF5D/B1844B8228F111EAA2D2C761C4F9AE02/A71F5DB053B411EAB1294F48C4F9AE02.roa
Signing time: Sat 01 May 2021 21:05:05 +0000
ROA not before: Sat 01 May 2021 21:05:04 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 32708
IP address blocks: 103.211.0.0/22 maxlen: 22
103.211.0.0/24 maxlen: 24
103.211.1.0/24 maxlen: 24
103.211.2.0/24 maxlen: 24
103.211.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1422 (0x58e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911CF5D/serialNumber=40FC7051E1350BB9A013DB0623E0F96516244279
Validity
Not Before: May 1 21:05:04 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=608dc280-5933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c8:17:8c:b9:98:a7:12:47:b8:15:ab:8e:26:
c4:ef:97:7d:55:1a:30:40:57:4c:7f:0a:6a:f8:6a:
08:8a:15:47:2e:21:1f:6c:f6:d8:6d:97:b9:32:49:
8f:85:35:d1:27:a5:dd:b7:ee:e7:2d:52:aa:1c:e7:
bd:18:81:cd:9a:ef:ad:9a:00:85:29:db:73:5a:e2:
02:89:51:fd:e2:99:4e:cb:20:e2:ba:fd:5c:47:48:
5a:ed:11:04:fe:0b:04:46:0f:0e:35:3f:3d:80:f9:
80:54:f3:3c:14:a2:a9:c7:f8:ad:38:64:d1:30:8d:
11:6e:81:1d:0e:ee:0c:98:26:45:82:8f:56:f8:ce:
b3:9a:82:ba:c3:9a:f5:8c:49:a2:5a:37:41:4b:46:
b9:3d:95:18:9e:6f:f3:a5:cf:59:44:8e:34:5b:ae:
0b:be:7c:25:b6:eb:a3:df:a7:70:be:1b:f5:8f:5d:
74:19:93:5c:7d:3e:57:a7:a0:a6:63:2d:c2:88:81:
f9:31:4e:3f:13:33:88:ef:63:aa:b7:60:2f:66:6f:
b8:2e:3c:81:87:a8:42:14:8b:37:72:52:cc:06:c9:
69:42:09:f7:b3:fd:01:34:8b:3c:41:28:73:39:9b:
c8:c9:58:05:7d:cb:d0:3f:bd:17:35:18:8d:a2:ad:
9f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:1B:38:3A:A6:F7:C2:B2:C0:52:40:CB:5F:41:B1:C8:E6:99:31:8D
X509v3 Authority Key Identifier:
keyid:40:FC:70:51:E1:35:0B:B9:A0:13:DB:06:23:E0:F9:65:16:24:42:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911CF5D/B1844B8228F111EAA2D2C761C4F9AE02/QPxwUeE1C7mgE9sGI-D5ZRYkQnk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QPxwUeE1C7mgE9sGI-D5ZRYkQnk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CF5D/B1844B8228F111EAA2D2C761C4F9AE02/A71F5DB053B411EAB1294F48C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.211.0.0/22
Signature Algorithm: sha256WithRSAEncryption
51:60:7f:c5:64:62:47:36:9e:7c:ba:d0:78:b2:9f:bd:2d:26:
67:98:d6:ef:cc:1f:d9:ba:ba:37:2b:69:b8:80:5c:cb:ef:5c:
ec:a7:d7:80:7f:13:25:ac:a6:ed:9e:a1:ca:9d:cf:93:d0:53:
63:fa:fd:99:b1:b7:ea:0f:c5:7a:33:d6:ba:03:7a:e1:ae:4a:
45:7e:d3:db:d2:56:30:7c:4b:ca:a3:a2:d3:92:a4:7d:dc:73:
35:b2:4f:42:68:14:8b:ed:dc:1e:7e:24:7e:73:33:7d:46:82:
ba:cf:27:47:79:55:1e:22:5f:a7:6c:3b:4c:ea:46:fb:fe:ef:
b2:96:b0:f2:64:f2:71:42:cc:85:31:98:2a:ba:e4:e6:cb:f0:
20:31:93:45:cf:88:cb:aa:14:b8:b1:31:d6:17:8d:47:e9:a4:
2e:d5:a8:03:4c:7a:51:59:fb:cf:b8:0d:ad:3d:99:6b:0d:88:
8c:35:85:c9:c9:36:d4:c0:51:f2:d5:6e:f8:32:4e:47:84:1c:
f8:09:d1:f6:b6:09:07:0f:41:73:86:ea:ba:65:54:27:be:8d:
77:be:ef:ff:c1:42:57:25:0f:30:a9:0c:eb:0f:2e:1a:56:31:
7d:b8:9f:fd:91:c6:a6:4a:6d:07:ae:48:51:ed:93:40:3c:18:
a1:85:be:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:56 2024 by rpki-client on console-fra.rpki-client.org