Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134358/6972A42A175611EBA846E00CC4F9AE02/CCE45F8CB94711ECA04E326DC4F9AE02.roa
File: CCE45F8CB94711ECA04E326DC4F9AE02.roa (raw, json)
Hash identifier: k6wkgQM2gnbfSwGYupWjD24hq77RDXfNhvyxdfzPzAo=
Subject key identifier: D3:E7:EB:84:18:C4:BF:EA:02:04:93:61:D4:8D:23:52:BA:EB:6F:A6
Certificate issuer: /CN=A9134358/serialNumber=AEA2980090C7B9805A035555553D1392A6AA5221
Certificate serial: 0430
Authority key identifier: AE:A2:98:00:90:C7:B9:80:5A:03:55:55:55:3D:13:92:A6:AA:52:21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rqKYAJDHuYBaA1VVVT0TkqaqUiE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134358/6972A42A175611EBA846E00CC4F9AE02/CCE45F8CB94711ECA04E326DC4F9AE02.roa
Signing time: Mon 11 Apr 2022 03:30:57 +0000
ROA not before: Mon 11 Apr 2022 03:30:57 +0000
ROA not after: Fri 30 Dec 2022 00:00:00 +0000
asID: 24373
IP address blocks: 103.84.94.0/24 maxlen: 24
103.84.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1072 (0x430)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134358/serialNumber=AEA2980090C7B9805A035555553D1392A6AA5221
Validity
Not Before: Apr 11 03:30:57 2022 GMT
Not After : Dec 30 00:00:00 2022 GMT
Subject: CN=6253a0f1-fcdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:67:d7:10:35:ce:46:df:8e:d9:4f:e6:9e:cd:
70:a4:89:bc:cf:58:2e:8a:05:13:68:7d:b0:88:c8:
ba:0f:77:6a:9a:6f:4e:6e:22:e1:d1:be:69:f5:b4:
98:f7:72:b9:3f:f3:3d:19:9b:e7:2c:d3:49:b2:85:
bd:16:26:95:2e:86:bd:7a:f4:d6:44:5e:3b:a0:2f:
d5:a0:e5:26:27:6a:92:11:a8:da:40:e8:be:48:ce:
1b:f6:ae:1b:7f:75:97:5e:f9:c6:ce:dc:76:22:29:
68:7f:16:97:40:4d:c2:4d:23:2b:dd:05:34:a4:e0:
b9:96:2f:f6:f1:4f:4c:60:92:ab:f3:37:56:8e:41:
df:e5:8a:06:5b:ae:e1:7c:4d:2d:46:43:f4:c8:11:
7a:4c:32:3f:9f:2a:25:a0:35:90:71:84:e5:9b:6f:
d8:57:02:09:b2:ae:2a:fe:19:90:79:66:6b:12:42:
24:bf:b1:7c:20:7e:32:00:eb:b4:ac:4a:72:2e:f1:
42:72:70:8b:95:b2:c0:d3:05:96:f4:02:5e:fb:f2:
a8:0c:c2:43:41:8f:24:07:fa:ff:ab:a7:1c:6b:62:
83:4a:3a:ab:58:71:ef:a8:c8:70:5b:b6:b2:05:1f:
82:bf:3b:38:17:6b:e3:4c:0d:33:b2:ac:42:b2:60:
04:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E7:EB:84:18:C4:BF:EA:02:04:93:61:D4:8D:23:52:BA:EB:6F:A6
X509v3 Authority Key Identifier:
keyid:AE:A2:98:00:90:C7:B9:80:5A:03:55:55:55:3D:13:92:A6:AA:52:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134358/6972A42A175611EBA846E00CC4F9AE02/rqKYAJDHuYBaA1VVVT0TkqaqUiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rqKYAJDHuYBaA1VVVT0TkqaqUiE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134358/6972A42A175611EBA846E00CC4F9AE02/CCE45F8CB94711ECA04E326DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.84.94.0/23
Signature Algorithm: sha256WithRSAEncryption
b9:7d:88:c6:25:0f:64:1e:34:83:db:f0:ca:ac:e5:d9:7d:e4:
d3:31:e0:72:cb:e3:d9:2b:9e:04:b5:82:ad:60:3e:21:77:9e:
a3:9c:82:f8:b2:bb:75:86:04:4a:00:0a:4e:9d:f6:91:07:95:
67:26:db:cb:0c:56:28:35:c9:c3:f2:7d:2c:4f:d9:c2:b6:43:
ef:6a:7c:10:07:2d:55:39:3f:ce:8b:fc:76:f4:ce:e9:bd:1f:
df:cc:74:8e:bb:1a:e5:b6:7a:fc:4a:cf:a0:1c:4a:a8:af:3a:
ec:31:02:e5:86:5d:d8:b8:97:f0:ed:ea:6d:39:7d:5a:dd:3f:
a8:ab:de:b6:54:60:d4:e8:5a:7d:5c:d6:a6:34:4b:57:f7:1b:
85:26:57:02:4d:bc:e9:1a:cb:b3:8c:bc:46:ea:ca:ee:90:2d:
c3:bd:8f:ee:c5:a4:30:06:92:50:83:52:b2:80:16:15:67:03:
a7:e9:4e:86:ea:ed:b6:01:65:b7:fd:13:ab:13:d8:90:14:06:
d8:57:8c:5c:ca:dd:a2:9a:d4:4e:c5:1a:5e:b3:07:5d:68:e3:
a2:bf:be:b8:b1:ae:61:11:c6:b9:02:16:b9:c6:d5:83:09:73:
1f:09:50:d1:d4:b8:1c:74:3f:6c:48:2d:b0:92:5a:43:b9:16:
f6:3e:fb:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----