Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91685DF/AB7357AECD6D11E9A6C26E46C4F9AE02/77068C788FC811EC85C9690DC4F9AE02.roa
File: 77068C788FC811EC85C9690DC4F9AE02.roa (raw, json)
Hash identifier: k+8c64UL4/arBkfxPRi3MOkpTRYGDzSAL69K9DmQBMA=
Subject key identifier: 31:01:D4:A7:7E:23:5C:C5:71:E3:E1:ED:24:ED:D1:B6:BC:C8:9A:ED
Certificate issuer: /CN=A91685DF/serialNumber=BF237EE623BD2853AC04554EB812280434A85A8F
Certificate serial: 09F5
Authority key identifier: BF:23:7E:E6:23:BD:28:53:AC:04:55:4E:B8:12:28:04:34:A8:5A:8F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vyN-5iO9KFOsBFVOuBIoBDSoWo8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91685DF/AB7357AECD6D11E9A6C26E46C4F9AE02/77068C788FC811EC85C9690DC4F9AE02.roa
Signing time: Sun 27 Mar 2022 19:25:40 +0000
ROA not before: Sun 27 Mar 2022 19:25:40 +0000
ROA not after: Sun 28 May 2023 00:00:00 +0000
asID: 140604
IP address blocks: 103.134.216.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2549 (0x9f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91685DF/serialNumber=BF237EE623BD2853AC04554EB812280434A85A8F
Validity
Not Before: Mar 27 19:25:40 2022 GMT
Not After : May 28 00:00:00 2023 GMT
Subject: CN=6240ba33-a39f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:68:c0:41:0e:0f:89:20:bd:72:0e:c0:e0:04:
fb:8c:c1:f8:a3:20:a5:a6:cc:cc:20:91:48:ad:01:
3c:8b:9e:e3:eb:ed:d5:e8:e7:cd:87:9a:51:3e:dc:
e7:02:7f:72:5d:2e:29:ac:58:7c:51:24:c3:5b:85:
da:8c:34:28:93:0d:66:08:2d:84:50:aa:ec:41:b6:
df:8f:f8:ae:ff:6e:f2:b5:2e:e3:99:a4:2a:9d:37:
ae:6d:ca:a3:32:ad:52:97:8c:19:53:13:a9:42:f7:
d4:29:fa:37:dd:5e:c0:64:f7:61:86:79:e0:bc:4b:
59:74:2a:d6:2e:19:cc:0d:d6:36:24:87:31:bb:1f:
87:77:50:87:6a:71:29:82:5d:46:de:e0:ec:bf:60:
c8:50:69:5f:0e:10:d8:a0:14:15:02:5b:49:72:ff:
42:38:9a:1a:f4:4a:17:30:02:82:27:b3:41:6f:fe:
ce:10:2e:b6:b8:8f:09:da:26:53:35:ae:99:ec:04:
d2:e5:44:1e:d8:cd:71:92:21:39:c6:a7:d8:c8:4e:
3b:0f:54:4f:95:25:3d:40:63:26:dc:da:9c:cb:d0:
99:b4:fc:03:99:63:d3:05:a0:82:f6:db:c0:6d:be:
2d:71:b5:a9:71:06:bf:fe:ba:cc:54:9b:8a:57:5a:
e4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:01:D4:A7:7E:23:5C:C5:71:E3:E1:ED:24:ED:D1:B6:BC:C8:9A:ED
X509v3 Authority Key Identifier:
keyid:BF:23:7E:E6:23:BD:28:53:AC:04:55:4E:B8:12:28:04:34:A8:5A:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91685DF/AB7357AECD6D11E9A6C26E46C4F9AE02/vyN-5iO9KFOsBFVOuBIoBDSoWo8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vyN-5iO9KFOsBFVOuBIoBDSoWo8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91685DF/AB7357AECD6D11E9A6C26E46C4F9AE02/77068C788FC811EC85C9690DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.134.216.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:ae:98:f7:a8:d9:05:b4:68:6f:c4:21:12:5d:0b:54:d0:46:
48:fa:64:80:bb:84:b0:73:20:14:b3:06:6b:f8:fc:47:e6:48:
47:99:9c:b6:01:ed:59:7b:21:28:61:a1:93:6c:f6:63:04:55:
59:24:bf:a7:ad:88:a8:d7:66:d5:8d:0d:c8:86:97:eb:87:e9:
7f:5a:7d:66:79:0e:02:59:17:7e:c8:4c:d3:4f:95:4d:d8:c8:
13:e6:65:64:c8:c4:09:3d:cd:18:ff:20:2c:47:11:f5:d8:ed:
b3:10:a9:df:a3:e2:fe:b7:24:6f:e8:7f:69:e4:9a:f6:c4:c2:
78:b7:58:9b:14:9c:b8:e7:90:9d:a7:da:4b:5a:c2:fa:3e:fb:
60:d8:1f:52:85:36:c5:cd:25:87:bc:12:aa:8f:f6:db:62:1e:
23:7c:5a:a9:ad:17:8d:84:3c:a7:44:c6:e8:51:d3:94:1c:6a:
00:60:86:7b:3c:9e:0c:05:45:78:e4:85:fe:cf:ca:b2:f1:e3:
99:e5:47:b5:54:1e:95:27:85:2a:75:a6:71:7d:b7:45:61:82:
2c:3d:e1:7c:e5:3b:fb:dc:4a:eb:97:79:b4:4b:d4:26:a2:20:
fb:88:7f:d0:5c:3a:cb:5f:c5:7a:fa:0d:60:26:8b:a7:45:a4:
27:48:f2:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:20 2024 by rpki-client on console-ams.rpki-client.org