Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A75B/99277692295711EB916CE46EC4F9AE02/21DF6324DA3711EBACB20A48C4F9AE02.roa
File: 21DF6324DA3711EBACB20A48C4F9AE02.roa (raw, json)
Hash identifier: BDTjskLEIEAMGSO74rj6XAToVe0J9vQ8bqICbULe01A=
Subject key identifier: 6F:8A:14:DC:41:45:33:59:AA:71:81:B0:C1:88:E5:93:16:37:8E:4F
Certificate issuer: /CN=A916A75B/serialNumber=952C3F4D9BD6B08E1ED8095FCC624285F7AAAC2F
Certificate serial: 03C3
Authority key identifier: 95:2C:3F:4D:9B:D6:B0:8E:1E:D8:09:5F:CC:62:42:85:F7:AA:AC:2F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSw_TZvWsI4e2AlfzGJChfeqrC8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A75B/99277692295711EB916CE46EC4F9AE02/21DF6324DA3711EBACB20A48C4F9AE02.roa
Signing time: Fri 11 Mar 2022 13:10:34 +0000
ROA not before: Fri 11 Mar 2022 13:10:34 +0000
ROA not after: Mon 01 May 2023 00:00:00 +0000
asID: 131111
IP address blocks: 103.85.64.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 963 (0x3c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A75B/serialNumber=952C3F4D9BD6B08E1ED8095FCC624285F7AAAC2F
Validity
Not Before: Mar 11 13:10:34 2022 GMT
Not After : May 1 00:00:00 2023 GMT
Subject: CN=622b4a49-5a1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7c:6d:b6:04:cd:ef:19:10:9a:eb:cc:de:0f:
99:60:c8:3d:01:d2:e4:da:ae:c2:d1:12:17:ee:48:
be:e0:5c:93:bb:36:6f:73:61:79:14:38:0b:53:d6:
e9:6e:db:7a:e7:87:70:23:0b:24:3e:0b:1e:d8:7a:
9f:3a:99:ac:6f:95:82:46:18:dc:1e:43:2a:01:21:
4f:13:4b:10:89:55:c6:8f:df:45:31:51:47:f0:15:
47:76:b1:73:6c:81:bf:ea:de:2c:ef:5d:f3:f3:94:
ad:0b:8f:df:66:cd:53:20:5f:01:8d:c6:59:86:98:
23:49:00:14:73:a9:28:98:13:07:2c:c9:08:09:fc:
37:f3:2e:8d:d3:1f:b7:29:d9:6c:50:49:63:17:ba:
d2:02:50:48:1b:fe:50:bc:9d:44:32:e6:6b:af:23:
8e:93:e7:73:0a:13:3d:47:48:b3:36:75:82:9a:4c:
cb:64:63:a9:54:d1:5c:05:e7:37:24:d8:da:8e:83:
c8:a0:99:52:84:e1:b6:75:e7:8c:77:08:f1:72:e8:
64:3c:22:2a:24:e5:13:20:14:c8:31:8d:82:53:49:
93:80:0e:0d:42:71:3b:82:59:ce:6a:14:3c:b8:6f:
9e:d5:01:cb:d5:bb:d5:a6:26:ab:a9:1f:8e:1a:a8:
11:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:8A:14:DC:41:45:33:59:AA:71:81:B0:C1:88:E5:93:16:37:8E:4F
X509v3 Authority Key Identifier:
keyid:95:2C:3F:4D:9B:D6:B0:8E:1E:D8:09:5F:CC:62:42:85:F7:AA:AC:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A75B/99277692295711EB916CE46EC4F9AE02/lSw_TZvWsI4e2AlfzGJChfeqrC8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSw_TZvWsI4e2AlfzGJChfeqrC8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A75B/99277692295711EB916CE46EC4F9AE02/21DF6324DA3711EBACB20A48C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.85.64.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:15:a9:6f:af:47:c7:30:1d:ed:f0:f5:39:07:ae:04:f5:40:
f3:1d:ab:3d:62:76:ae:21:1a:93:42:99:3c:e1:37:0b:7b:fe:
bc:5f:0c:66:b2:c5:8d:f1:60:62:03:42:75:78:f5:86:64:4d:
c8:d5:62:f9:7f:14:a4:8e:1e:37:b4:37:9d:57:b8:63:97:b4:
13:83:33:fe:ec:0a:c4:97:84:a6:a2:93:43:23:f8:c8:5e:8e:
3a:3d:a0:98:de:e9:88:d5:76:e0:af:2c:0f:99:c9:0b:89:8a:
fa:20:4d:4f:91:e2:48:f5:a5:c0:3e:ff:85:10:a8:a0:63:1e:
3e:ba:ea:28:d2:41:12:8f:c4:0f:e6:8d:04:a6:9e:ba:44:8a:
df:46:d5:d5:ac:a5:8c:e6:12:01:77:f8:86:0a:d7:0f:13:62:
f4:7e:6f:0e:f4:c0:da:88:3f:f1:14:69:5c:bc:a2:8e:c8:dd:
c4:c5:50:78:6e:24:dc:18:57:45:fd:9d:67:e2:7e:1d:ae:3e:
f4:75:5d:31:ac:e6:a2:86:75:3c:84:f5:f1:38:08:7d:bd:e1:
bd:85:23:20:60:ee:db:fa:8c:49:8b:68:a9:97:ae:b6:86:ea:
cd:ec:92:c9:90:4a:02:83:99:ee:ee:a6:94:cd:cb:08:42:4a:
54:91:e7:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:10 2024 by rpki-client on console-fra.rpki-client.org