Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134358/6972A42A175611EBA846E00CC4F9AE02/CAB9EB00B94711ECA04E326DC4F9AE02.roa
File: CAB9EB00B94711ECA04E326DC4F9AE02.roa (raw, json)
Hash identifier: wzr0F5Z/8RZS0B0thp8cw6apSO/Ya3X1hSOuAJlUd9Y=
Subject key identifier: 9B:81:A2:54:D0:C4:47:31:70:89:DE:FA:1C:17:DB:6E:85:70:40:8B
Certificate issuer: /CN=A9134358/serialNumber=AEA2980090C7B9805A035555553D1392A6AA5221
Certificate serial: 042D
Authority key identifier: AE:A2:98:00:90:C7:B9:80:5A:03:55:55:55:3D:13:92:A6:AA:52:21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rqKYAJDHuYBaA1VVVT0TkqaqUiE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134358/6972A42A175611EBA846E00CC4F9AE02/CAB9EB00B94711ECA04E326DC4F9AE02.roa
Signing time: Mon 11 Apr 2022 03:30:54 +0000
ROA not before: Mon 11 Apr 2022 03:30:54 +0000
ROA not after: Fri 30 Dec 2022 00:00:00 +0000
asID: 13444
IP address blocks: 103.84.94.0/24 maxlen: 24
103.84.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1069 (0x42d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134358/serialNumber=AEA2980090C7B9805A035555553D1392A6AA5221
Validity
Not Before: Apr 11 03:30:54 2022 GMT
Not After : Dec 30 00:00:00 2022 GMT
Subject: CN=6253a0ee-d0cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:30:a2:cd:27:02:51:24:4f:eb:79:f2:2d:f6:
82:66:48:87:92:df:df:36:d2:eb:71:36:72:c7:8c:
fe:a8:69:47:ab:fb:a1:d7:58:94:ab:1b:76:3c:39:
fa:58:dd:72:ab:df:4a:df:6f:94:fa:22:da:fd:96:
14:9d:12:58:02:ce:3d:63:30:11:f9:bc:65:5c:61:
5c:97:7e:68:c3:4c:c4:07:ee:58:7f:15:11:77:19:
c0:fa:ba:39:12:4e:47:03:94:06:7b:e4:39:f9:14:
cf:fe:44:bf:b2:cf:06:68:a7:d5:6f:a2:50:78:0f:
4c:e8:be:42:58:23:c8:25:f3:ca:03:66:c6:e7:83:
33:1b:52:0d:f0:e1:e7:bb:f8:fb:8c:f9:e3:9f:f4:
87:04:ba:c5:0f:ff:c4:29:8b:7b:c8:5c:62:84:87:
b6:85:b4:19:b4:3f:0e:2b:e1:af:de:d0:c3:c4:b5:
5f:3f:af:c9:cb:0d:eb:28:ee:86:a2:21:20:8a:3d:
7d:e7:1e:8e:b3:a9:89:59:8e:a0:03:f8:cb:2a:16:
73:ba:12:f1:71:9b:59:73:bf:1e:ab:72:33:a0:09:
45:59:95:03:63:70:bc:c8:2a:97:ac:9c:d3:8e:78:
be:68:87:7a:af:be:5f:81:95:68:bb:26:37:fc:0b:
3e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:81:A2:54:D0:C4:47:31:70:89:DE:FA:1C:17:DB:6E:85:70:40:8B
X509v3 Authority Key Identifier:
keyid:AE:A2:98:00:90:C7:B9:80:5A:03:55:55:55:3D:13:92:A6:AA:52:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134358/6972A42A175611EBA846E00CC4F9AE02/rqKYAJDHuYBaA1VVVT0TkqaqUiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rqKYAJDHuYBaA1VVVT0TkqaqUiE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134358/6972A42A175611EBA846E00CC4F9AE02/CAB9EB00B94711ECA04E326DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.84.94.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:9d:51:f0:f9:92:93:34:b8:65:3c:05:f2:e0:f7:d2:6b:ed:
da:5d:90:30:e0:9c:3c:a5:f5:6c:63:2f:80:22:5e:0c:83:8e:
37:84:47:fd:0d:90:dc:a4:8d:b1:cf:a4:6e:00:d8:9e:cf:3e:
9f:de:fb:cf:ce:f6:7e:ea:99:31:75:ec:7c:6e:dc:a5:50:ab:
d6:49:6d:6b:d1:63:22:c7:44:76:88:e3:59:69:2c:c8:07:96:
0b:ed:fb:57:77:aa:52:23:bb:48:3a:ee:93:71:92:2a:80:cc:
c4:64:44:4e:17:0c:74:aa:0e:67:b3:8c:d0:62:80:5b:37:d6:
71:2c:6d:e1:73:c9:cb:e6:2b:77:af:14:87:2b:f2:c8:c3:92:
bd:81:17:df:41:3a:cb:07:a3:0b:6c:15:bf:6c:2a:34:c0:38:
fe:52:a2:31:bb:d1:ed:25:e6:cb:13:b2:5c:9e:d1:7b:a2:de:
45:1c:d0:38:a5:77:fd:6f:0b:1a:07:a7:fb:44:d0:33:50:c7:
37:2f:95:5b:e7:06:5e:f3:4f:a3:08:eb:37:c9:15:89:a1:ec:
26:c5:67:18:e2:b9:e5:93:3a:4f:dd:f5:6d:e7:e5:24:7b:27:
f7:b6:6a:d7:ba:65:24:b7:46:00:2c:8d:4b:c2:71:ed:23:49:
85:7d:80:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:59 2024 by rpki-client on console-fra.rpki-client.org