Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D5ED/96E204CE8A2B11E8BFD1841AC4F9AE02/6DF5BB628BBE11ECA570C520C4F9AE02.roa
File: 6DF5BB628BBE11ECA570C520C4F9AE02.roa (raw, json)
Hash identifier: 3ogusl50ui79dai1IIb2T9U+ODdBAibKr6z6GhqODng=
Subject key identifier: 17:2D:1C:AF:99:70:29:A7:9F:93:F3:B0:60:D4:E9:D9:84:89:F5:99
Certificate issuer: /CN=A916D5ED/serialNumber=11F50F361632329F5CC62B4307D9A96D8B67D339
Certificate serial: 11CD
Authority key identifier: 11:F5:0F:36:16:32:32:9F:5C:C6:2B:43:07:D9:A9:6D:8B:67:D3:39
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfUPNhYyMp9cxitDB9mpbYtn0zk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D5ED/96E204CE8A2B11E8BFD1841AC4F9AE02/6DF5BB628BBE11ECA570C520C4F9AE02.roa
Signing time: Tue 20 Sep 2022 03:34:44 +0000
ROA not before: Tue 20 Sep 2022 03:34:44 +0000
ROA not after: Fri 31 Mar 2023 00:00:00 +0000
asID: 134090
IP address blocks: 103.106.88.0/22 maxlen: 22
103.106.88.0/23 maxlen: 23
103.106.88.0/24 maxlen: 24
103.106.89.0/24 maxlen: 24
103.106.90.0/23 maxlen: 23
103.106.90.0/24 maxlen: 24
103.106.91.0/24 maxlen: 24
2402:3fc0::/32 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4557 (0x11cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D5ED/serialNumber=11F50F361632329F5CC62B4307D9A96D8B67D339
Validity
Not Before: Sep 20 03:34:44 2022 GMT
Not After : Mar 31 00:00:00 2023 GMT
Subject: CN=632934d4-c607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:30:0a:12:53:fa:1c:d0:e2:a5:eb:99:84:fb:
d1:38:9f:d6:db:78:27:1a:bf:b5:fa:5d:62:48:79:
81:26:c7:ce:62:07:76:ec:8a:d7:bd:8e:af:b0:08:
fc:11:76:68:af:2c:52:a4:65:a2:62:b5:dd:5f:13:
c0:6e:aa:64:06:b7:0a:d6:f6:56:30:74:2f:3a:ec:
83:d9:26:60:00:60:06:4c:bb:66:6c:dd:46:76:19:
c7:88:87:f4:f5:30:35:ab:55:4f:f1:88:28:9e:d6:
07:3b:f6:00:2e:13:9c:d1:01:df:c6:69:40:0f:1b:
54:c9:7d:66:19:2a:00:32:cc:db:a1:26:34:30:ed:
11:24:d3:16:5a:03:eb:69:4c:da:22:61:b1:c8:05:
5d:be:2a:02:0a:97:f5:51:55:9e:91:7e:2c:9d:19:
8a:71:0a:65:03:c9:af:f7:96:a2:4b:db:cf:25:95:
80:5c:b1:19:4e:d3:d0:18:9d:79:c4:c2:6e:ce:44:
66:e7:00:66:f3:c1:1e:f6:b7:61:3b:04:a7:d0:ed:
93:56:5c:b7:4a:37:6e:a1:a0:69:61:fd:fe:6b:7c:
99:ff:98:d6:07:68:d9:6f:b7:c6:cb:30:10:b6:5e:
b8:44:70:1b:fd:54:37:c9:9b:b2:8f:14:8d:02:aa:
7e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:2D:1C:AF:99:70:29:A7:9F:93:F3:B0:60:D4:E9:D9:84:89:F5:99
X509v3 Authority Key Identifier:
keyid:11:F5:0F:36:16:32:32:9F:5C:C6:2B:43:07:D9:A9:6D:8B:67:D3:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D5ED/96E204CE8A2B11E8BFD1841AC4F9AE02/EfUPNhYyMp9cxitDB9mpbYtn0zk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfUPNhYyMp9cxitDB9mpbYtn0zk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D5ED/96E204CE8A2B11E8BFD1841AC4F9AE02/6DF5BB628BBE11ECA570C520C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.106.88.0/22
IPv6:
2402:3fc0::/32
Signature Algorithm: sha256WithRSAEncryption
aa:09:83:4b:33:7d:0a:f1:fd:a4:48:48:2c:52:a2:cb:54:d6:
df:09:33:36:31:f8:2d:7f:6a:ca:4e:5a:9d:a9:34:59:2c:d6:
f2:00:54:39:1d:b2:90:af:05:92:bc:17:d1:ae:94:d7:64:bb:
b3:0c:a4:83:90:9d:d2:6b:86:29:48:49:4d:31:11:d8:0f:8c:
b9:eb:88:be:1e:54:3b:79:d0:93:8d:bd:3a:8c:9f:64:c0:c0:
3d:d1:4f:c7:40:56:fa:bc:5c:52:76:51:c6:9a:74:43:7b:54:
c6:c3:98:99:74:74:ff:43:5c:b3:d6:d7:db:d1:72:be:aa:f0:
71:e4:0d:b7:33:a4:be:34:46:32:fd:05:32:a5:9e:c3:e0:5e:
27:a7:d5:06:0d:c0:68:cc:4d:ea:1d:48:6a:e3:05:76:28:fe:
7c:4d:54:ea:93:21:32:d3:eb:b1:00:d8:42:e1:f7:ae:29:47:
8e:0c:3f:70:b0:e2:cf:f4:2f:e4:16:c0:b0:92:09:d7:f2:48:
5e:33:6e:42:c6:8c:fb:03:a8:54:c7:84:8c:f0:e6:bf:e4:74:
23:ea:51:70:cc:f1:09:c9:e1:3c:95:17:bd:f5:ca:9c:85:fa:
11:99:62:3a:d3:23:63:16:08:5e:9a:96:58:ca:8a:ff:c7:ae:
a4:a9:4d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:11 2024 by rpki-client on console-fra.rpki-client.org