Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170E90/0F1D2FBC8F7111EAB411537EC4F9AE02/913D53C4B1A611EC997A0F5AC4F9AE02.roa
File: 913D53C4B1A611EC997A0F5AC4F9AE02.roa (raw, json)
Hash identifier: lA8dszeTaNnXdcuUWeuTvj+yGhsAbik98V3Rb0R3DTg=
Subject key identifier: 50:88:05:34:7A:65:A2:AD:C0:7A:A1:29:1A:67:66:AD:7F:20:83:87
Certificate issuer: /CN=A9170E90/serialNumber=97D65528BAB1B5814EB1064296CF48A85E5E2A4F
Certificate serial: 01F3
Authority key identifier: 97:D6:55:28:BA:B1:B5:81:4E:B1:06:42:96:CF:48:A8:5E:5E:2A:4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9ZVKLqxtYFOsQZCls9IqF5eKk8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170E90/0F1D2FBC8F7111EAB411537EC4F9AE02/913D53C4B1A611EC997A0F5AC4F9AE02.roa
Signing time: Fri 01 Apr 2022 22:28:43 +0000
ROA not before: Fri 01 Apr 2022 22:28:43 +0000
ROA not after: Mon 01 Aug 2022 00:00:00 +0000
asID: 136907
IP address blocks: 103.148.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 499 (0x1f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170E90/serialNumber=97D65528BAB1B5814EB1064296CF48A85E5E2A4F
Validity
Not Before: Apr 1 22:28:43 2022 GMT
Not After : Aug 1 00:00:00 2022 GMT
Subject: CN=62477c9b-87df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:8c:22:31:ca:1b:78:f0:13:be:b9:d6:91:ee:
ff:76:1b:d4:1e:34:55:d7:f3:0c:51:7c:09:96:ca:
7a:1a:0d:f3:04:74:a2:aa:48:61:a1:f8:62:d4:88:
55:26:d5:62:ed:a3:90:8b:42:ec:37:4e:84:b8:ce:
e5:a0:07:70:0e:27:a8:b6:15:39:9f:fd:f8:1d:9d:
fd:46:a5:37:0e:c9:41:0b:da:70:e3:25:29:72:09:
c5:fe:47:4e:15:55:5b:5e:94:93:07:f9:84:f4:5d:
0d:4b:88:cd:4b:cc:c1:f5:9d:8d:41:64:2f:4e:01:
9a:46:19:e5:29:46:12:12:f4:f7:29:d7:a6:26:74:
83:94:be:69:8d:4a:ff:19:6d:49:8d:36:14:34:f5:
b4:5f:e9:a3:50:5e:b0:03:59:d8:85:49:d2:6c:40:
52:d8:e8:2f:d6:fe:66:55:d3:47:cd:fd:ab:9d:62:
c9:f2:5f:75:8a:c8:b6:3a:a2:bb:b8:b8:c2:87:4d:
ab:81:96:63:30:98:05:c7:6e:5e:75:dd:75:f2:b7:
ab:a3:01:ac:f7:e5:0f:19:0a:b7:9a:2d:76:7f:dc:
d5:bb:00:4a:67:75:f4:0b:23:4d:96:73:a7:ed:a6:
0c:fa:5b:9f:aa:8b:6b:b9:fe:61:3c:2f:ef:21:19:
f8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:88:05:34:7A:65:A2:AD:C0:7A:A1:29:1A:67:66:AD:7F:20:83:87
X509v3 Authority Key Identifier:
keyid:97:D6:55:28:BA:B1:B5:81:4E:B1:06:42:96:CF:48:A8:5E:5E:2A:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170E90/0F1D2FBC8F7111EAB411537EC4F9AE02/l9ZVKLqxtYFOsQZCls9IqF5eKk8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9ZVKLqxtYFOsQZCls9IqF5eKk8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170E90/0F1D2FBC8F7111EAB411537EC4F9AE02/913D53C4B1A611EC997A0F5AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.148.106.0/24
Signature Algorithm: sha256WithRSAEncryption
08:76:37:97:f4:94:49:df:47:f9:e8:54:9c:99:c5:9d:96:5b:
c1:98:58:2e:39:1b:93:7d:9f:54:a3:43:2c:a3:e1:a5:23:68:
4d:48:4a:83:25:31:23:8a:e7:ca:50:fc:51:fc:16:e3:05:de:
6f:b5:73:2b:64:40:54:3d:49:a1:4a:34:6a:6e:13:c9:43:82:
4b:00:ac:20:c8:39:b5:b9:02:67:d7:0d:58:0c:e8:53:d4:c3:
f6:ac:88:e2:bb:55:7c:c6:f2:c3:cb:13:57:9d:6d:e8:94:d2:
50:59:6e:2c:f2:56:7f:ad:f3:5f:45:3e:55:7f:48:82:37:6d:
2a:ed:76:9d:d0:b7:13:f2:ae:56:9d:6b:c6:f5:a9:e7:eb:b4:
65:61:56:a0:19:0b:78:2f:14:da:5a:81:1e:34:aa:b4:14:42:
34:48:13:c8:22:27:94:7b:39:93:75:15:02:c4:7d:33:5f:24:
12:48:10:83:d4:c0:63:f4:2a:dd:4a:f3:ac:3b:43:48:df:01:
3a:02:99:0a:88:ab:a8:1d:84:2d:05:72:f8:51:87:31:b0:b4:
ec:51:6a:ed:0a:a7:ca:f3:e7:28:9b:73:ab:3a:92:d8:13:89:
da:9e:e3:a7:b9:a7:35:05:16:75:9c:d3:32:3f:ff:ce:6a:0e:
12:ec:79:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:46 2023 by rpki-client on console-fra.rpki-client.org