Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C10F/049747B8EFC111ED8982B716C4F9AE02/D79CBA16EFC711EDBC38D042C4F9AE02.roa
File: D79CBA16EFC711EDBC38D042C4F9AE02.roa (raw, json)
Hash identifier: Huc9Njsdci4CqlH7AvQfownTLFe5b6gdg1Gmj56qc2A=
Subject key identifier: 59:61:92:6D:3C:9D:63:F8:EF:71:03:10:D1:30:D3:14:B2:32:8B:CB
Certificate issuer: /CN=A916C10F/serialNumber=D34659C39218A12FA8CA799D9CADC049249059A2
Certificate serial: 4C
Authority key identifier: D3:46:59:C3:92:18:A1:2F:A8:CA:79:9D:9C:AD:C0:49:24:90:59:A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/00ZZw5IYoS-oynmdnK3ASSSQWaI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C10F/049747B8EFC111ED8982B716C4F9AE02/D79CBA16EFC711EDBC38D042C4F9AE02.roa
Signing time: Wed 27 Sep 2023 05:05:37 +0000
ROA not before: Wed 27 Sep 2023 05:05:37 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 38713
IP address blocks: 103.121.40.0/24 maxlen: 24
103.121.41.0/24 maxlen: 24
103.121.42.0/24 maxlen: 24
103.121.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76 (0x4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C10F/serialNumber=D34659C39218A12FA8CA799D9CADC049249059A2
Validity
Not Before: Sep 27 05:05:37 2023 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=6513b821-f454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:6b:2a:91:a9:65:f9:aa:d1:87:e4:4a:c9:43:
a5:64:50:cf:92:30:6f:28:7f:f4:42:9a:3c:67:65:
3c:be:6b:45:07:34:90:70:17:b2:25:15:ee:f5:49:
95:72:be:34:42:71:73:71:9b:3d:bc:8c:dd:0a:27:
65:c7:25:97:3a:07:a1:ef:c8:5d:51:f3:cf:b4:97:
8b:03:cb:b4:de:f6:c8:25:d3:48:1d:5c:75:ca:39:
c3:9f:14:67:93:cd:af:94:8a:9f:37:c9:dc:c4:c5:
85:03:8b:9b:45:71:23:b5:9c:14:80:6c:7d:0e:66:
d5:80:21:10:b1:aa:dd:2c:7f:32:1a:30:67:82:c7:
c8:4c:49:75:97:11:62:22:73:63:1d:94:20:79:de:
3c:e9:32:97:44:db:e1:d2:2c:0b:75:8e:c7:cf:3d:
46:43:e3:b2:a0:84:fb:ae:19:6e:1e:3b:85:cd:cb:
1c:54:de:f7:70:3e:9b:45:c4:0b:4b:e0:6b:10:ff:
28:cf:8b:b7:11:78:0a:6a:d0:c2:1e:cf:cd:2b:1d:
b7:c7:94:9a:fe:09:95:7c:e1:1a:63:e0:a5:3e:3f:
b7:30:61:77:0b:34:91:14:4c:a5:d4:2a:57:cd:35:
3c:60:00:fd:a2:ae:db:e0:91:28:3f:ff:4d:16:f9:
58:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:61:92:6D:3C:9D:63:F8:EF:71:03:10:D1:30:D3:14:B2:32:8B:CB
X509v3 Authority Key Identifier:
keyid:D3:46:59:C3:92:18:A1:2F:A8:CA:79:9D:9C:AD:C0:49:24:90:59:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C10F/049747B8EFC111ED8982B716C4F9AE02/00ZZw5IYoS-oynmdnK3ASSSQWaI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/00ZZw5IYoS-oynmdnK3ASSSQWaI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C10F/049747B8EFC111ED8982B716C4F9AE02/D79CBA16EFC711EDBC38D042C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.121.40.0/22
Signature Algorithm: sha256WithRSAEncryption
41:90:d9:97:27:a9:74:a9:10:cb:d5:b0:22:24:ae:1d:b1:55:
26:a3:74:32:80:a9:9c:45:35:b4:b3:c2:7c:55:b5:bc:f7:02:
f4:45:e3:2e:55:ae:6b:13:2c:cc:14:a4:56:51:4c:6a:a5:83:
40:04:3f:41:27:15:50:a3:82:1d:d3:da:ce:ea:8e:b5:40:b2:
68:f1:22:64:bc:4f:b9:c1:9d:1c:4f:4b:36:4f:c8:0b:2d:80:
c4:71:eb:5a:bf:6b:48:21:50:ed:52:e2:62:17:17:13:fc:7a:
d2:81:48:49:8b:b7:a9:7e:c6:fb:77:0b:34:c8:cd:15:3a:76:
dd:59:43:bc:66:12:59:50:87:b2:9e:b4:0a:fc:f9:01:2b:c1:
77:b6:a5:8b:84:10:b8:ea:ae:4c:81:32:d9:6b:6b:32:e6:b0:
22:c2:96:ac:c4:5f:7d:14:f8:88:40:92:c8:96:36:28:6f:21:
01:90:ac:6f:a8:37:df:6a:d0:14:94:f5:b1:2d:c9:84:71:9e:
d2:ba:0d:93:0d:53:f0:95:31:af:e6:06:b8:11:c4:92:1c:69:
a2:7b:5e:4c:36:20:62:cd:f3:8e:8e:62:84:38:03:27:50:96:
2a:d6:e5:02:65:6f:12:ba:1a:c5:26:30:8c:b2:d8:77:82:eb:
47:5a:d7:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:10 2024 by rpki-client on console-fra.rpki-client.org