Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91270E6/75648ECED63511E896631322C4F9AE02/DC667DDCBA9B11EC88EADB1AC4F9AE02.roa
File: DC667DDCBA9B11EC88EADB1AC4F9AE02.roa (raw, json)
Hash identifier: FVfVMPk982el7zoJWjWfRngo60TcBujxld0d1AjvZZU=
Subject key identifier: 4B:47:61:DB:19:7B:72:BF:74:DA:9C:3D:6D:C0:BE:3B:3F:9F:04:C4
Certificate issuer: /CN=A91270E6/serialNumber=22A2FAC461FFD523645A68116E55C22D8E986C99
Certificate serial: 0395
Authority key identifier: 22:A2:FA:C4:61:FF:D5:23:64:5A:68:11:6E:55:C2:2D:8E:98:6C:99
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IqL6xGH_1SNkWmgRblXCLY6YbJk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91270E6/75648ECED63511E896631322C4F9AE02/DC667DDCBA9B11EC88EADB1AC4F9AE02.roa
Signing time: Fri 01 Jul 2022 18:24:25 +0000
ROA not before: Fri 01 Jul 2022 18:24:25 +0000
ROA not after: Sat 30 Sep 2023 00:00:00 +0000
asID: 138346
IP address blocks: 103.102.252.0/23 maxlen: 24
103.102.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 917 (0x395)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91270E6/serialNumber=22A2FAC461FFD523645A68116E55C22D8E986C99
Validity
Not Before: Jul 1 18:24:25 2022 GMT
Not After : Sep 30 00:00:00 2023 GMT
Subject: CN=62bf3bd9-1093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:cb:c6:33:66:fb:40:22:d2:f0:fd:00:2b:49:
93:05:0c:b8:15:21:39:a3:f8:2c:d9:79:3f:b7:a0:
0b:48:7d:7c:a1:f5:f6:3b:f6:ef:cd:f7:96:b2:d7:
77:51:7d:45:bf:45:ca:19:f3:46:cd:4d:ef:2f:31:
51:00:70:26:85:d4:cd:ba:16:1d:66:c3:48:9d:3c:
bb:8c:39:ff:35:53:07:68:9c:33:79:ea:11:9a:d5:
9f:63:06:3c:a2:00:63:2b:b4:51:d3:cb:ff:60:48:
a2:3f:93:17:3a:e2:3c:76:ef:f1:0d:95:64:2e:48:
ca:75:5f:ff:48:a5:e7:60:59:1f:14:d4:27:4e:66:
63:9e:34:84:81:8f:85:51:e3:7f:ed:40:a8:e2:62:
6e:e7:89:06:fb:90:54:96:e9:8c:2b:bc:97:c5:21:
05:82:cb:3b:82:be:e2:7c:af:21:e0:be:99:5f:c3:
2d:23:1d:19:04:3c:9d:8e:e9:cb:32:6e:3b:80:c7:
0d:b4:73:8a:64:a3:d6:97:d5:32:7e:4d:f2:bc:18:
db:b2:74:ac:db:b6:de:11:fe:3b:20:04:23:7c:3f:
19:d2:d0:41:4e:cb:cb:90:58:00:ee:b4:60:a0:5c:
11:dd:ea:c9:66:41:5f:d6:d8:3e:b2:17:2c:fd:6e:
c1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:47:61:DB:19:7B:72:BF:74:DA:9C:3D:6D:C0:BE:3B:3F:9F:04:C4
X509v3 Authority Key Identifier:
keyid:22:A2:FA:C4:61:FF:D5:23:64:5A:68:11:6E:55:C2:2D:8E:98:6C:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91270E6/75648ECED63511E896631322C4F9AE02/IqL6xGH_1SNkWmgRblXCLY6YbJk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IqL6xGH_1SNkWmgRblXCLY6YbJk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91270E6/75648ECED63511E896631322C4F9AE02/DC667DDCBA9B11EC88EADB1AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.102.252.0-103.102.254.255
Signature Algorithm: sha256WithRSAEncryption
54:e4:63:1c:05:e2:e6:22:6b:67:fd:5a:18:03:08:13:75:f1:
d5:67:48:02:d3:7d:e8:23:9e:69:ef:e4:ab:c7:4a:4d:d2:f2:
9e:c0:2b:74:2b:f5:ef:34:ff:66:ee:fd:45:47:8d:bd:38:a8:
86:38:32:c4:c6:50:d2:02:ae:da:20:94:52:cc:c7:af:7b:93:
b2:fa:90:2d:26:71:f3:06:b5:9f:ac:e1:41:ec:8e:a2:9f:c4:
67:0e:1a:e8:9a:13:a0:fd:ef:c2:6b:88:7a:81:b8:66:76:69:
37:a2:84:6f:cc:68:cf:d5:2b:cf:ed:36:53:e8:7a:35:83:cc:
0e:3a:2b:c7:4e:08:6c:91:f0:8c:91:e6:b4:58:02:59:48:f4:
b1:86:05:e1:44:97:b0:a9:64:ee:f1:19:8f:39:cf:3e:a3:b7:
73:99:0f:41:8d:a9:0d:5d:57:bd:f6:a0:75:df:dc:32:b1:d1:
52:9b:3e:4a:ec:22:e6:0c:e8:8a:91:25:22:d8:3b:dd:ac:c1:
a5:62:95:44:db:98:ff:d3:3c:97:1b:84:59:8e:d3:0c:df:bd:
3f:ff:f3:d4:a1:ad:2f:05:28:60:4d:bb:76:27:73:fc:b6:fd:
0a:dd:82:f0:11:29:6a:42:33:47:2a:a2:38:9e:d2:80:fc:81:
65:b5:24:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:48 2024 by rpki-client on console-ams.rpki-client.org