Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91701DA/E7E2250613FB11EA9F339279C4F9AE02/64B31C1A13FD11EA9930287FC4F9AE02.roa
File: 64B31C1A13FD11EA9930287FC4F9AE02.roa (raw, json)
Hash identifier: n6lR3mbfHfoGgnjG0/3PSaqAJ8o2H2i7mfvV+reGQvU=
Subject key identifier: CF:36:47:B6:D5:6F:42:C3:CF:73:DE:C2:C4:F6:C0:9F:9F:2A:72:D7
Certificate issuer: /CN=A91701DA/serialNumber=519C40A3A6F2CDFC75543D3E2D04520C37B51CC5
Certificate serial: 0829
Authority key identifier: 51:9C:40:A3:A6:F2:CD:FC:75:54:3D:3E:2D:04:52:0C:37:B5:1C:C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZxAo6byzfx1VD0-LQRSDDe1HMU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91701DA/E7E2250613FB11EA9F339279C4F9AE02/64B31C1A13FD11EA9930287FC4F9AE02.roa
Signing time: Mon 07 Feb 2022 08:46:25 +0000
ROA not before: Mon 07 Feb 2022 08:46:25 +0000
ROA not after: Fri 31 Mar 2023 00:00:00 +0000
asID: 137444
IP address blocks: 103.108.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2089 (0x829)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91701DA/serialNumber=519C40A3A6F2CDFC75543D3E2D04520C37B51CC5
Validity
Not Before: Feb 7 08:46:25 2022 GMT
Not After : Mar 31 00:00:00 2023 GMT
Subject: CN=6200dc60-a860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:bf:f4:cf:bd:d2:ec:91:f7:ce:83:3d:c6:90:
8b:fc:fa:c2:8e:b1:d8:a2:ec:d9:3e:27:71:82:d6:
c5:2f:9d:59:b3:31:24:cb:8f:55:ad:28:d0:69:6d:
51:5f:fe:24:f8:c0:8f:05:e3:b8:75:62:bb:4b:c6:
88:14:96:0f:9b:b0:4e:0c:41:85:5b:cc:9a:65:01:
14:41:78:b4:ab:08:03:66:fc:f8:ac:ad:b8:cd:10:
0d:b6:e3:71:72:5b:89:29:38:1d:7c:0a:ba:29:0d:
88:94:d7:e7:74:c2:d2:9d:bf:bd:e0:69:05:e1:cf:
3d:8a:90:ce:54:82:84:ad:05:1a:c9:3b:98:1a:54:
1b:e3:ce:8e:75:a6:a8:6f:c7:5b:30:b1:91:90:e5:
86:ca:3a:1e:68:5f:65:3e:c4:f7:fc:ed:8f:a8:e4:
1b:7e:75:fe:e2:6c:07:72:77:c1:b3:84:a4:52:c7:
f4:1d:e2:1f:37:77:95:1d:bc:0d:29:22:f5:da:ea:
a8:0c:c7:85:fd:64:4b:78:f8:42:73:f3:99:a2:a1:
33:dc:93:ea:f0:2e:65:9f:54:a0:f9:e3:e6:f1:3e:
35:09:d8:88:cf:e0:ec:ee:0c:ea:78:bf:e0:de:74:
19:f9:55:af:58:27:bd:4c:8d:a3:84:91:cf:8c:e2:
fe:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:36:47:B6:D5:6F:42:C3:CF:73:DE:C2:C4:F6:C0:9F:9F:2A:72:D7
X509v3 Authority Key Identifier:
keyid:51:9C:40:A3:A6:F2:CD:FC:75:54:3D:3E:2D:04:52:0C:37:B5:1C:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91701DA/E7E2250613FB11EA9F339279C4F9AE02/UZxAo6byzfx1VD0-LQRSDDe1HMU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZxAo6byzfx1VD0-LQRSDDe1HMU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91701DA/E7E2250613FB11EA9F339279C4F9AE02/64B31C1A13FD11EA9930287FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.108.221.0/24
Signature Algorithm: sha256WithRSAEncryption
44:79:79:d7:ae:9b:93:49:0a:bb:1f:ac:7e:9a:41:a9:22:ae:
37:94:77:b7:e6:f1:40:17:ec:4b:57:c2:a4:97:c3:d2:0c:35:
36:01:a3:94:5b:69:ed:70:45:ed:03:99:ae:11:96:c8:4f:e3:
25:0d:b7:5e:38:c1:61:88:cb:e3:94:61:c2:89:89:74:2b:7b:
e5:cd:2a:de:a7:21:6b:7c:e9:7c:4f:74:fd:8b:7d:82:ba:bb:
9e:19:5c:a0:52:de:6e:57:0f:35:a9:8e:69:8f:17:61:bc:74:
d7:7b:f4:4a:48:50:07:60:97:61:4b:1a:9f:67:b9:b8:6d:6c:
b4:dd:77:1a:3b:f5:10:1a:12:9b:44:27:13:c3:b5:48:f1:0b:
4d:33:d5:03:c5:b7:89:48:da:3f:84:2b:d9:21:27:ee:69:a6:
f4:f1:3e:fc:69:8d:f9:24:cf:cf:75:01:ac:45:a5:b0:1b:14:
e8:18:a9:00:dc:98:a2:1a:64:c7:22:ce:26:96:55:c7:62:8a:
e4:2b:30:d7:9e:e4:03:b2:d0:aa:7e:09:d7:01:9e:19:a6:2c:
e8:57:91:53:6f:5e:c8:4b:1b:1a:15:74:4f:1c:b8:42:64:f6:
a4:0b:89:fc:2a:89:58:9c:89:c1:a5:91:1c:95:ce:eb:f7:3d:
64:50:61:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:11 2024 by rpki-client on console-fra.rpki-client.org