Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134358/6972A42A175611EBA846E00CC4F9AE02/59705530C11511EC83C0770DC4F9AE02.roa
File: 59705530C11511EC83C0770DC4F9AE02.roa (raw, json)
Hash identifier: EsKm9UicZOLwu40f9DsLpEjiOx6Ta0d3EehCacr4YIA=
Subject key identifier: 61:4E:D2:09:61:E6:3E:43:34:A9:61:FA:6F:0A:FF:09:1D:45:32:3E
Certificate issuer: /CN=A9134358/serialNumber=AEA2980090C7B9805A035555553D1392A6AA5221
Certificate serial: 0446
Authority key identifier: AE:A2:98:00:90:C7:B9:80:5A:03:55:55:55:3D:13:92:A6:AA:52:21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rqKYAJDHuYBaA1VVVT0TkqaqUiE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134358/6972A42A175611EBA846E00CC4F9AE02/59705530C11511EC83C0770DC4F9AE02.roa
Signing time: Thu 21 Apr 2022 01:49:58 +0000
ROA not before: Thu 21 Apr 2022 01:49:58 +0000
ROA not after: Fri 30 Dec 2022 00:00:00 +0000
asID: 13444
IP address blocks: 103.156.24.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1094 (0x446)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134358/serialNumber=AEA2980090C7B9805A035555553D1392A6AA5221
Validity
Not Before: Apr 21 01:49:58 2022 GMT
Not After : Dec 30 00:00:00 2022 GMT
Subject: CN=6260b846-b047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:68:ea:24:ae:99:27:e7:ee:7a:a4:72:d5:01:
87:23:ff:f8:6d:9a:f2:98:a2:f9:e2:d0:b6:d4:d3:
9b:2d:94:20:56:35:f5:9d:99:dc:ee:6e:8e:71:67:
1f:b4:5e:d0:e1:28:95:42:4b:60:24:df:1c:29:87:
35:e9:2c:24:f6:67:db:c0:26:5a:1a:8b:c1:eb:16:
fb:80:ab:86:13:74:f9:50:44:9f:b5:e2:2c:7b:53:
0a:15:76:e1:a1:75:a9:e3:37:68:b4:12:6f:56:76:
84:41:46:45:7c:7a:f6:38:62:8b:3e:0c:b3:a3:8b:
d4:10:68:98:be:98:a2:c7:1d:a4:65:90:d9:a2:a9:
86:16:07:10:22:59:07:bf:b6:4a:0f:f0:e7:92:0e:
e3:20:dc:94:ce:4c:b6:a5:db:ac:46:7b:7b:75:6c:
db:e9:a6:b4:5e:ac:ae:08:45:f1:fc:f7:cf:53:13:
6d:57:53:32:a5:07:25:2f:b0:1c:52:7f:dd:fa:12:
d7:5d:a4:ba:1e:f1:4e:74:20:7c:37:2d:81:9e:48:
82:80:b9:71:16:e7:9d:bf:7a:17:11:fa:95:72:18:
a5:d9:75:7f:b8:b8:bd:28:57:93:79:17:0e:b2:9c:
bd:bf:0c:8a:c1:97:87:b3:d0:2f:40:a3:b6:5e:54:
52:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:4E:D2:09:61:E6:3E:43:34:A9:61:FA:6F:0A:FF:09:1D:45:32:3E
X509v3 Authority Key Identifier:
keyid:AE:A2:98:00:90:C7:B9:80:5A:03:55:55:55:3D:13:92:A6:AA:52:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134358/6972A42A175611EBA846E00CC4F9AE02/rqKYAJDHuYBaA1VVVT0TkqaqUiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rqKYAJDHuYBaA1VVVT0TkqaqUiE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134358/6972A42A175611EBA846E00CC4F9AE02/59705530C11511EC83C0770DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.156.24.0/23
Signature Algorithm: sha256WithRSAEncryption
86:58:66:aa:80:a6:c4:09:52:08:16:da:55:89:2d:15:c2:33:
1b:89:46:2d:ec:96:01:fd:32:e7:1b:9d:d3:d0:50:f2:87:5e:
84:4d:48:dd:e2:12:84:45:4f:ed:3b:74:e3:18:c7:4c:ef:f6:
bc:91:1a:00:74:16:32:8d:73:f8:68:8a:12:82:50:93:7e:9e:
4b:5f:89:66:9f:77:d5:4d:38:8e:2e:80:8e:ca:d8:02:ff:ff:
8b:5b:82:8e:f1:48:70:ce:a2:e4:3f:65:81:43:bd:7a:4a:44:
f3:e9:0f:12:6f:06:3b:d4:e0:49:87:79:28:db:70:d2:97:34:
33:8b:ca:9d:d6:6e:f8:0d:b5:fb:45:f3:9e:97:53:ed:dd:95:
28:c5:8f:ab:b8:d0:ec:c3:b9:16:f6:36:eb:c1:12:aa:f5:6e:
21:78:22:5a:9b:bb:d1:a7:71:aa:fb:fb:42:dc:0c:68:df:e6:
93:9b:90:5f:98:89:4c:98:90:bc:9d:4a:f1:51:50:ce:4d:38:
83:ea:fd:a9:f9:ec:8c:bd:9b:20:73:71:ec:84:2c:44:a3:b2:
a0:ea:da:07:ab:f2:ff:84:e1:a6:93:c1:f8:0d:60:d2:87:5d:
21:d6:aa:07:4a:e7:fe:8e:73:b8:94:59:cb:3e:d8:70:e4:43:
ac:6a:e9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:53 2024 by rpki-client on console-ams.rpki-client.org