Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145241/793306F041D711ECA1A16475C4F9AE02/936F25C441D911ECBA62C976C4F9AE02.roa
File: 936F25C441D911ECBA62C976C4F9AE02.roa (raw, json)
Hash identifier: TMnB3mYSWjJOo5FNAeCrYiVgni8VLSentM7zqxIi0Qo=
Subject key identifier: B7:2C:9B:19:4F:9F:D6:4E:53:F9:03:0D:2B:29:BE:DE:41:7B:6A:20
Certificate issuer: /CN=A9145241/serialNumber=8C031978B6EF51CEA2E83F022A572FDA3D77592F
Certificate serial: 02
Authority key identifier: 8C:03:19:78:B6:EF:51:CE:A2:E8:3F:02:2A:57:2F:DA:3D:77:59:2F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAMZeLbvUc6i6D8CKlcv2j13WS8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145241/793306F041D711ECA1A16475C4F9AE02/936F25C441D911ECBA62C976C4F9AE02.roa
Signing time: Wed 10 Nov 2021 03:52:08 +0000
ROA not before: Wed 10 Nov 2021 03:52:08 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 133739
IP address blocks: 103.24.240.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145241/serialNumber=8C031978B6EF51CEA2E83F022A572FDA3D77592F
Validity
Not Before: Nov 10 03:52:08 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=618b41e8-6889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3f:89:46:53:01:50:2d:88:90:06:c0:6d:06:
97:a5:5a:27:b5:e3:f1:f4:74:f7:50:7a:db:36:29:
c5:d1:b6:a2:b6:d5:3d:d2:43:73:a4:8c:7a:a0:9c:
60:62:03:b4:3b:66:35:8d:0c:4f:80:8a:24:6a:cc:
88:69:fc:44:e6:53:11:92:8a:2c:90:1d:6c:d0:29:
a0:9b:b3:c4:cf:3b:4e:08:6a:a4:77:b0:43:69:c7:
50:19:d3:ec:44:6c:b4:50:f5:39:31:b3:1e:f2:b9:
ce:f9:98:60:aa:35:96:ab:1f:7a:24:3b:5b:15:db:
0c:95:60:cf:ad:75:8b:e1:08:a6:40:09:ce:0f:20:
b4:f6:f8:34:f9:16:ea:1e:07:d3:1b:60:f8:06:50:
da:92:8b:54:eb:e4:b0:45:6c:3e:fe:3a:5c:74:8f:
ba:d9:ff:6c:db:3f:97:9f:33:cd:e5:1c:a0:b3:7c:
50:37:fa:1d:dd:5a:d5:10:bc:f1:eb:04:42:51:74:
fc:21:d7:09:fb:32:19:84:07:c4:c4:cf:ad:a7:b7:
af:f6:c3:25:e8:d3:bb:10:76:38:b6:f8:88:8b:38:
0c:7b:41:b8:0e:36:7b:c9:cb:b7:e7:f6:77:b7:d3:
c6:73:97:57:2b:93:ea:32:43:f1:72:58:08:21:c5:
4e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:2C:9B:19:4F:9F:D6:4E:53:F9:03:0D:2B:29:BE:DE:41:7B:6A:20
X509v3 Authority Key Identifier:
keyid:8C:03:19:78:B6:EF:51:CE:A2:E8:3F:02:2A:57:2F:DA:3D:77:59:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145241/793306F041D711ECA1A16475C4F9AE02/jAMZeLbvUc6i6D8CKlcv2j13WS8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAMZeLbvUc6i6D8CKlcv2j13WS8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145241/793306F041D711ECA1A16475C4F9AE02/936F25C441D911ECBA62C976C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.24.240.0/22
Signature Algorithm: sha256WithRSAEncryption
04:98:d6:47:66:44:0f:ed:ec:bb:c7:3e:30:5b:fa:ed:27:dc:
dd:f4:76:da:a4:0c:83:34:7b:1b:20:96:f7:f0:ed:65:03:54:
a8:8f:4e:df:28:42:ea:e7:f8:01:0e:b7:b4:0d:df:3e:d9:7d:
c2:e6:a4:22:52:d9:1b:f7:40:6d:5d:2b:b5:98:f7:e3:23:14:
c3:27:a5:59:ad:e3:f2:6b:aa:4d:45:d5:a7:bc:2c:60:bd:65:
25:2c:78:74:39:f2:54:56:29:ae:5d:c0:b1:3a:72:48:3f:a0:
8f:5e:f6:ad:50:31:54:1d:cd:98:af:47:46:0b:96:d3:0e:3f:
ff:22:06:1f:3d:f2:3d:b7:97:8a:31:b4:7e:f4:47:f6:3b:88:
f4:d1:f5:ac:29:e8:59:e2:3b:37:86:26:dd:c0:77:71:66:eb:
e4:43:77:22:11:89:93:0f:3c:18:23:4f:cd:24:d2:ba:08:2b:
3e:1d:08:79:b3:73:97:c1:05:36:77:8a:fd:64:9d:94:90:a3:
2b:38:ca:3b:48:c3:0f:3a:da:a9:66:36:e6:bf:55:b4:7c:a0:
cb:b9:fa:ef:09:d5:a8:bb:ea:27:92:e9:e5:eb:a0:f9:ac:0b:
1b:fe:eb:a6:79:a2:4f:c4:78:75:ee:87:c2:74:02:6a:b5:d7:
29:1f:0a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:04 2024 by rpki-client on console-fra.rpki-client.org