Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C07F/9F9E1ECA0B6311EB8105B374C4F9AE02/55ECA22C3E4A11EC87385947C4F9AE02.roa
File: 55ECA22C3E4A11EC87385947C4F9AE02.roa (raw, json)
Hash identifier: LSWhDdEihnIuak6qmPRSuWtV42LUKyL0xqWVWdei/cg=
Subject key identifier: 4D:08:BE:06:B0:C4:96:1C:CC:F1:72:9E:38:57:D6:E1:FF:78:E0:31
Certificate issuer: /CN=A914C07F/serialNumber=D91F77BE22011D7E1D575D9F9ADB5F8E160E5FD9
Certificate serial: 0325
Authority key identifier: D9:1F:77:BE:22:01:1D:7E:1D:57:5D:9F:9A:DB:5F:8E:16:0E:5F:D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2R93viIBHX4dV12fmttfjhYOX9k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C07F/9F9E1ECA0B6311EB8105B374C4F9AE02/55ECA22C3E4A11EC87385947C4F9AE02.roa
Signing time: Fri 05 Nov 2021 15:09:14 +0000
ROA not before: Fri 05 Nov 2021 15:09:14 +0000
ROA not after: Fri 30 Dec 2022 00:00:00 +0000
asID: 61414
IP address blocks: 103.101.176.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 805 (0x325)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C07F/serialNumber=D91F77BE22011D7E1D575D9F9ADB5F8E160E5FD9
Validity
Not Before: Nov 5 15:09:14 2021 GMT
Not After : Dec 30 00:00:00 2022 GMT
Subject: CN=61854919-4ced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5d:85:f7:b9:8e:76:a5:e1:d8:64:55:a4:db:
45:a6:48:d0:fc:03:11:66:84:ac:af:3d:e3:c6:5a:
65:20:30:54:24:c4:07:25:c4:f4:e3:23:c0:9c:da:
be:1c:f0:64:d6:41:88:da:22:87:4e:63:5a:15:2e:
a0:9b:15:34:54:c6:12:84:7c:19:37:80:7a:d2:f7:
fc:02:7f:31:df:ea:39:a8:93:11:06:10:83:bf:e9:
cb:de:ed:e8:7c:8a:93:c4:99:68:dd:bf:ad:ff:a9:
b1:7d:38:c8:6a:93:46:f6:b6:04:ab:76:e1:83:6e:
1d:df:a7:93:0a:1e:d5:0a:a4:47:84:f1:a6:4b:03:
d6:bd:27:d5:e7:6f:af:d5:ce:7a:b1:fa:d6:f5:c7:
45:c6:0c:ff:0e:28:4a:c1:1f:60:72:ad:d4:10:e5:
a9:1b:8d:2d:63:74:66:f6:c1:f1:78:52:58:19:83:
9f:d2:af:0b:15:12:29:89:2a:03:f7:47:54:af:f7:
9e:f0:d8:13:92:13:2e:5a:6c:55:61:92:19:9b:41:
14:61:af:92:5a:71:a9:ec:ae:11:31:90:97:5e:25:
f6:6a:08:4c:08:69:66:67:66:9e:f6:cf:79:5b:fe:
99:54:ca:c1:c1:c3:ee:d3:e3:af:a5:07:22:64:63:
1b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:08:BE:06:B0:C4:96:1C:CC:F1:72:9E:38:57:D6:E1:FF:78:E0:31
X509v3 Authority Key Identifier:
keyid:D9:1F:77:BE:22:01:1D:7E:1D:57:5D:9F:9A:DB:5F:8E:16:0E:5F:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C07F/9F9E1ECA0B6311EB8105B374C4F9AE02/2R93viIBHX4dV12fmttfjhYOX9k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2R93viIBHX4dV12fmttfjhYOX9k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C07F/9F9E1ECA0B6311EB8105B374C4F9AE02/55ECA22C3E4A11EC87385947C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.101.176.0/22
Signature Algorithm: sha256WithRSAEncryption
b6:f9:92:6d:eb:71:3a:c3:83:7f:fa:cd:dc:08:9d:69:17:18:
6a:a5:67:0c:73:fb:72:7a:f1:fe:92:76:c8:b5:d0:7f:b3:f2:
aa:8a:7a:3f:eb:f6:99:d7:59:8d:93:7c:51:8d:00:90:77:ce:
1e:73:c7:69:ea:92:13:9f:ef:e2:4e:c1:76:f0:da:ff:80:27:
ed:a3:49:20:15:df:34:71:94:00:fb:70:9f:b1:b4:ac:3e:8a:
29:e7:08:41:6e:11:8f:d2:ac:40:51:28:4d:57:42:34:ac:7b:
d7:de:e8:92:5b:a3:c9:3b:44:ad:63:63:7b:8e:7a:0e:2c:f6:
72:c8:04:32:f8:cc:a6:ed:f6:2f:11:ae:bc:ff:66:d0:ab:28:
f8:26:e0:36:1a:3e:d0:11:7e:69:a5:75:aa:a0:20:cb:d4:cf:
59:ef:69:d1:a4:57:2b:12:dc:38:11:93:74:3b:7d:92:31:7d:
0c:22:c2:b4:d9:1a:dc:ea:46:e2:92:66:2d:66:63:7a:f4:40:
f8:d2:70:39:82:36:96:f2:bf:74:0f:e0:38:82:5f:1f:7a:dd:
95:be:8f:11:51:39:e7:ed:37:74:83:80:9b:1c:6a:5d:c7:7f:
8d:2f:9f:2e:fb:e4:ef:68:33:0f:cd:f7:8f:0b:f3:54:f9:ad:
bc:bc:47:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:05 2024 by rpki-client on console-fra.rpki-client.org