Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9162B3A/00945B1628F411EA9A6D0168C4F9AE02/F1C5EFD406F911EB8B744F65C4F9AE02.roa
File: F1C5EFD406F911EB8B744F65C4F9AE02.roa (raw, json)
Hash identifier: qmzhw9SxSw9ptzdYs01dKbyt+eAnxeRtlZdNxJ35mm8=
Subject key identifier: E2:25:E6:6B:89:B5:43:9E:EC:8B:4C:0D:61:BC:6D:F6:F5:B0:0B:5E
Certificate issuer: /CN=A9162B3A/serialNumber=C5430E246D38781E266A18D641510FB99FB623A7
Certificate serial: 07BA
Authority key identifier: C5:43:0E:24:6D:38:78:1E:26:6A:18:D6:41:51:0F:B9:9F:B6:23:A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUMOJG04eB4mahjWQVEPuZ-2I6c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9162B3A/00945B1628F411EA9A6D0168C4F9AE02/F1C5EFD406F911EB8B744F65C4F9AE02.roa
Signing time: Tue 01 Feb 2022 21:07:33 +0000
ROA not before: Tue 01 Feb 2022 21:07:33 +0000
ROA not after: Mon 01 May 2023 00:00:00 +0000
asID: 59117
IP address blocks: 103.108.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1978 (0x7ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162B3A/serialNumber=C5430E246D38781E266A18D641510FB99FB623A7
Validity
Not Before: Feb 1 21:07:33 2022 GMT
Not After : May 1 00:00:00 2023 GMT
Subject: CN=61f9a114-12ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1b:c6:4f:60:a8:a3:9a:a7:eb:b1:6b:9f:0d:
c6:78:28:f8:de:79:00:64:74:d4:f5:30:71:c4:97:
a2:0f:f5:f1:98:e5:6e:d0:c0:45:6e:49:1d:e7:aa:
89:54:f6:45:0b:8e:5d:83:ee:47:71:42:70:b1:b8:
43:d0:e4:35:c7:bd:1e:af:09:c8:c0:00:3a:fe:36:
f3:16:14:f2:8c:9c:84:8a:2f:4c:26:59:6e:7a:f4:
a4:13:58:20:44:fd:70:c9:7c:57:4d:30:f3:5a:fd:
48:b5:55:75:53:8e:27:f3:5f:27:13:81:57:54:e2:
5f:cd:30:c9:f1:52:0d:90:95:d5:0c:93:6b:34:dd:
98:f0:8d:2c:33:64:fd:88:1b:0e:77:56:1a:87:0b:
d5:07:c5:5c:40:2b:bc:07:31:36:d8:00:b3:fd:34:
fc:11:b2:85:62:d4:50:b2:03:59:e5:0e:de:a2:92:
8a:f6:43:2f:2a:61:fc:45:1e:90:49:90:be:f7:f1:
c4:eb:67:3b:93:dd:11:01:1f:ee:ff:cb:f1:e3:29:
da:66:ac:43:0b:e6:da:58:7c:0d:88:04:28:ac:70:
46:f0:03:3f:68:35:d3:96:d0:25:c5:78:ed:a4:c4:
55:11:24:70:f0:77:8c:7b:44:90:e7:34:15:49:3d:
52:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:25:E6:6B:89:B5:43:9E:EC:8B:4C:0D:61:BC:6D:F6:F5:B0:0B:5E
X509v3 Authority Key Identifier:
keyid:C5:43:0E:24:6D:38:78:1E:26:6A:18:D6:41:51:0F:B9:9F:B6:23:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9162B3A/00945B1628F411EA9A6D0168C4F9AE02/xUMOJG04eB4mahjWQVEPuZ-2I6c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUMOJG04eB4mahjWQVEPuZ-2I6c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162B3A/00945B1628F411EA9A6D0168C4F9AE02/F1C5EFD406F911EB8B744F65C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.108.188.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:e6:f2:7e:9c:90:29:b5:2a:f3:50:7c:92:c7:3c:fd:23:9c:
40:95:4b:0e:8a:cd:f6:f4:5a:de:32:ad:32:f7:fd:04:c2:27:
1e:2c:b5:34:5f:70:dc:3a:80:cb:ac:48:0c:cd:ee:17:0a:35:
6e:26:5a:f9:e3:e3:a7:c3:9e:f6:59:a1:06:89:37:14:b9:ba:
88:18:e4:0e:d1:af:10:89:20:aa:f5:8f:99:b0:a5:d6:cf:43:
84:1e:c8:8f:27:f0:9f:ed:87:84:d8:cc:c6:7b:8d:64:68:ad:
64:2b:bc:7e:d9:27:02:4e:18:b0:cb:b9:96:fe:b0:8b:ee:dd:
5b:b6:65:a5:ca:5d:63:27:8b:a2:2d:8f:a1:48:95:a5:dc:7f:
9b:3b:82:73:c3:26:dd:41:0b:4f:77:0a:f2:a5:40:ef:36:05:
7a:99:10:43:08:26:74:4e:cf:6c:9a:93:1f:51:b2:43:87:fe:
a5:20:d4:da:58:4d:78:90:0f:b0:01:4d:56:c7:d3:b2:89:2f:
3f:b0:ce:45:19:bf:de:b6:eb:47:1f:a1:4a:b0:17:62:bd:6c:
b0:b9:51:1d:67:2b:ff:c5:7d:8c:55:eb:71:54:30:d2:21:23:
92:e6:5d:5f:b8:20:5b:8f:69:23:f0:31:fa:ca:44:d1:16:93:
25:2a:f0:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:09 2024 by rpki-client on console-fra.rpki-client.org