Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147DD1/0ADE96D8D06311EA897C0513C4F9AE02/5980B404C08C11EC93F0B454C4F9AE02.roa
File: 5980B404C08C11EC93F0B454C4F9AE02.roa (raw, json)
Hash identifier: YYzAUvW2rqMAWwRayGZ6Vrr15MfhGSAOUV4bD06N1Lg=
Subject key identifier: 57:DB:56:22:3A:C7:98:9D:26:8E:8E:BF:AD:55:F4:C5:F4:C8:19:09
Certificate issuer: /CN=A9147DD1/serialNumber=FE2AF30D7AE2BDC160E61B77F0B6522E9B268CB9
Certificate serial: 06BD
Authority key identifier: FE:2A:F3:0D:7A:E2:BD:C1:60:E6:1B:77:F0:B6:52:2E:9B:26:8C:B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_irzDXrivcFg5ht38LZSLpsmjLk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147DD1/0ADE96D8D06311EA897C0513C4F9AE02/5980B404C08C11EC93F0B454C4F9AE02.roa
Signing time: Thu 04 May 2023 23:40:16 +0000
ROA not before: Thu 04 May 2023 23:40:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 64098
IP address blocks: 103.61.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1725 (0x6bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147DD1/serialNumber=FE2AF30D7AE2BDC160E61B77F0B6522E9B268CB9
Validity
Not Before: May 4 23:40:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64544260-4815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bd:39:23:05:18:2c:4f:94:86:f3:49:7d:2f:
99:8f:15:11:09:70:45:b6:fd:bb:55:54:e6:04:7d:
0b:38:f7:88:d2:bb:ce:1a:36:bd:d8:a3:a2:62:0c:
3e:f3:8e:ba:85:1e:8c:50:e0:5f:c0:b4:18:10:cd:
9e:ca:c5:af:3b:5b:16:a3:ab:cf:21:0a:48:6c:06:
90:02:dc:c7:e8:b6:79:d4:6f:00:29:8f:67:b5:fc:
85:19:d1:89:20:10:39:23:cb:b9:c9:ae:51:85:e0:
16:2c:b1:01:2d:ca:ca:24:8c:95:5a:e6:6d:45:1d:
9d:9e:cc:2e:6c:6e:29:59:e5:3b:d9:1d:c8:6c:b7:
67:e4:5c:53:5a:7d:c0:14:08:de:db:13:c3:ea:fe:
60:6b:81:f1:13:1e:27:ef:62:78:1d:4b:a0:9f:bb:
75:42:d2:4c:20:40:44:52:0f:db:e0:18:e4:d2:34:
61:0d:8a:ff:3d:4f:a2:26:f4:86:86:3f:81:27:69:
bd:c3:40:9d:f0:b9:06:15:f3:4a:1b:92:41:d6:57:
9f:61:5c:47:34:25:80:28:d3:92:f8:11:43:96:69:
e8:30:07:07:f4:1d:b5:e9:df:2d:db:0d:c6:fc:c5:
ea:ca:dc:d0:1f:34:93:47:ce:7f:a2:57:dc:c9:05:
c5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:DB:56:22:3A:C7:98:9D:26:8E:8E:BF:AD:55:F4:C5:F4:C8:19:09
X509v3 Authority Key Identifier:
keyid:FE:2A:F3:0D:7A:E2:BD:C1:60:E6:1B:77:F0:B6:52:2E:9B:26:8C:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147DD1/0ADE96D8D06311EA897C0513C4F9AE02/_irzDXrivcFg5ht38LZSLpsmjLk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_irzDXrivcFg5ht38LZSLpsmjLk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147DD1/0ADE96D8D06311EA897C0513C4F9AE02/5980B404C08C11EC93F0B454C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.61.129.0/24
Signature Algorithm: sha256WithRSAEncryption
21:05:29:61:07:99:c0:e3:fa:6e:12:e5:6d:a0:99:cd:91:69:
91:a7:be:db:55:b4:34:66:d6:01:11:e1:43:d4:b7:b2:f7:cb:
f9:e3:14:46:85:df:c9:8b:c1:b8:e3:0d:30:b8:e5:84:71:da:
5d:3b:17:7a:ce:ab:0a:2f:9d:20:90:5b:64:44:66:34:06:9e:
54:90:eb:12:7b:a4:05:3e:53:8e:bf:98:3e:a0:1d:eb:21:ee:
03:76:c5:ad:a1:37:2c:aa:d2:2e:65:31:07:3d:da:02:49:c5:
73:e1:91:b8:32:8e:ea:72:8b:71:85:75:05:4d:f6:c8:ab:1a:
88:17:5f:08:d9:27:0e:c8:ae:45:88:5d:45:58:a6:ed:f9:79:
8a:66:7d:50:e3:89:2a:66:17:06:c7:42:2a:a5:e9:01:61:eb:
9f:7c:f9:a0:76:05:01:93:d2:4b:f3:c9:93:1e:3f:eb:65:c6:
c0:da:74:ce:80:1d:6b:6c:e3:33:23:4e:48:a6:c2:b4:74:b1:
c2:e7:60:dc:67:f1:5f:86:18:46:be:c2:dc:a3:81:96:32:42:
f0:df:44:fb:be:42:fd:1e:1c:fb:84:14:c6:40:94:10:59:65:
cd:17:81:7e:fc:f6:59:1b:c4:e6:f1:e1:09:34:4e:99:15:06:
56:2e:15:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 22 14:40:43 2023 by rpki-client on console-fra.rpki-client.org