Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9138FCA/BACF23FE35E311ED81A3DD32C4F9AE02/4C4E9F3460AB11ED85291585C4F9AE02.roa
File: 4C4E9F3460AB11ED85291585C4F9AE02.roa (raw, json)
Hash identifier: 1uDSQkg95cnNadU3Y5gChmX4Vy2QnHMNNPrmkxgRkwk=
Subject key identifier: C6:D6:4B:D4:C8:95:9D:CE:DB:3C:26:EC:E4:34:CE:E2:B1:40:38:DF
Certificate issuer: /CN=A9138FCA/serialNumber=C199597C4E78CD35ADF1AFDCFD4161174606A649
Certificate serial: 59
Authority key identifier: C1:99:59:7C:4E:78:CD:35:AD:F1:AF:DC:FD:41:61:17:46:06:A6:49
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wZlZfE54zTWt8a_c_UFhF0YGpkk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9138FCA/BACF23FE35E311ED81A3DD32C4F9AE02/4C4E9F3460AB11ED85291585C4F9AE02.roa
Signing time: Fri 23 Dec 2022 06:24:53 +0000
ROA not before: Fri 23 Dec 2022 06:24:53 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 135330
IP address blocks: 103.79.121.0/24 maxlen: 24
103.79.123.0/24 maxlen: 24
202.91.37.0/24 maxlen: 24
202.91.39.0/24 maxlen: 24
2400:3bc0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89 (0x59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9138FCA/serialNumber=C199597C4E78CD35ADF1AFDCFD4161174606A649
Validity
Not Before: Dec 23 06:24:53 2022 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=63a549b5-7cd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:43:25:4b:98:83:9a:c1:48:6d:a4:ce:7a:0e:
67:3d:0b:78:13:ed:b9:0b:4c:da:9f:5c:a8:0a:f2:
2d:5b:0e:e4:dc:41:ad:29:f1:ce:44:5e:f1:c3:dc:
b6:95:16:3f:58:79:84:85:1c:6f:53:b5:84:ac:5e:
41:db:d7:c3:da:d7:4b:6b:70:7f:cf:2b:f3:54:32:
ca:10:c7:c1:fd:2a:7f:3e:09:a5:69:02:a0:e5:b1:
67:a3:39:94:92:7e:20:fd:11:11:ad:4a:b3:b4:97:
35:93:e0:b1:a4:a6:4e:94:20:9b:b1:11:34:38:5a:
d8:37:19:ad:a8:9b:bb:c6:75:5c:f8:c2:62:3f:15:
c7:f3:cf:30:a4:43:70:03:23:4a:b9:a3:4a:9a:69:
89:c0:2d:94:76:2a:3e:5e:67:69:2e:18:da:96:86:
4f:78:c5:49:70:fb:79:ec:2b:22:92:21:3d:d6:97:
32:dd:99:69:46:21:48:3e:a7:8d:13:b7:c2:03:c3:
e0:6f:74:b4:d8:24:4a:5a:99:73:bf:e4:5d:2d:e2:
1c:69:d3:c1:f0:d5:0b:9d:b9:94:62:a7:4f:ce:1c:
c6:48:2f:29:7e:8b:10:7f:fd:34:a2:08:67:64:99:
63:16:be:2f:22:78:ae:af:0b:a2:a9:bf:39:4c:5d:
44:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D6:4B:D4:C8:95:9D:CE:DB:3C:26:EC:E4:34:CE:E2:B1:40:38:DF
X509v3 Authority Key Identifier:
keyid:C1:99:59:7C:4E:78:CD:35:AD:F1:AF:DC:FD:41:61:17:46:06:A6:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9138FCA/BACF23FE35E311ED81A3DD32C4F9AE02/wZlZfE54zTWt8a_c_UFhF0YGpkk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wZlZfE54zTWt8a_c_UFhF0YGpkk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138FCA/BACF23FE35E311ED81A3DD32C4F9AE02/4C4E9F3460AB11ED85291585C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.79.121.0/24
103.79.123.0/24
202.91.37.0/24
202.91.39.0/24
IPv6:
2400:3bc0::/32
Signature Algorithm: sha256WithRSAEncryption
10:80:73:fc:19:23:08:aa:06:8d:9a:d0:ca:fd:66:c0:14:45:
d4:01:21:8d:34:ab:9d:4e:cc:39:f1:3a:ae:35:fc:16:05:8a:
db:11:b2:2c:61:10:39:b2:82:37:8a:01:1f:d0:e3:e2:0f:c5:
3c:25:64:3d:cc:28:f4:84:59:ee:b7:21:87:d4:a4:0a:28:96:
09:5c:40:34:09:3d:b2:2f:cf:dd:4e:28:98:c1:e6:bd:b4:3d:
03:78:ce:d4:dd:42:7d:77:1f:1f:82:1b:c2:bd:3a:37:69:2c:
bb:43:a7:82:69:b7:86:06:9e:0c:4e:20:c3:43:36:27:9b:35:
30:d6:c9:26:f0:e5:ab:d5:06:f8:6d:ee:4c:7e:ed:ab:21:7f:
54:26:f6:58:71:09:90:f5:23:5e:2d:e0:5b:4f:f8:36:3d:71:
b2:24:c7:38:32:49:8c:b4:ab:aa:88:ba:45:df:e6:71:3c:f1:
d5:85:ba:a8:13:37:1e:ae:bf:2a:51:4b:f5:ac:81:1a:52:19:
16:ee:1d:b9:03:93:c6:4f:85:4b:84:d8:0c:20:5c:8a:b5:94:
cd:25:b7:89:2c:16:c5:58:1a:18:e8:c9:cc:e7:30:e5:2d:54:
e9:c0:77:79:48:3d:a2:a1:fd:03:f0:91:96:6a:be:fa:a2:7a:
cc:e6:4a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:02 2024 by rpki-client on console-fra.rpki-client.org