Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918BA94/8A9C7C76FFF811EBB6C4795EC4F9AE02/925D6D88FFFA11EB9CF87D5FC4F9AE02.roa
File: 925D6D88FFFA11EB9CF87D5FC4F9AE02.roa (raw, json)
Hash identifier: M+xYhujawrcbe7Vkc7YPDcj33Xb4oHrYX/g064QSH4w=
Subject key identifier: D8:A7:BF:BF:D3:FA:8D:7E:9C:A5:9E:0F:D0:9D:C4:12:8C:07:19:90
Certificate issuer: /CN=A918BA94/serialNumber=2EC934FB809D130BDC854C34989D149E5842C722
Certificate serial: 76
Authority key identifier: 2E:C9:34:FB:80:9D:13:0B:DC:85:4C:34:98:9D:14:9E:58:42:C7:22
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lsk0-4CdEwvchUw0mJ0UnlhCxyI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918BA94/8A9C7C76FFF811EBB6C4795EC4F9AE02/925D6D88FFFA11EB9CF87D5FC4F9AE02.roa
Signing time: Fri 15 Oct 2021 03:50:51 +0000
ROA not before: Fri 15 Oct 2021 03:50:51 +0000
ROA not after: Fri 30 Dec 2022 00:00:00 +0000
asID: 135026
IP address blocks: 103.100.140.0/24 maxlen: 24
103.100.141.0/24 maxlen: 24
103.100.142.0/24 maxlen: 24
103.100.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118 (0x76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918BA94/serialNumber=2EC934FB809D130BDC854C34989D149E5842C722
Validity
Not Before: Oct 15 03:50:51 2021 GMT
Not After : Dec 30 00:00:00 2022 GMT
Subject: CN=6168fa9b-dd1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a7:7f:7f:0e:f7:55:1b:24:34:42:94:99:fe:
bf:7a:94:81:d9:c8:cf:b5:f4:23:c1:36:ae:2a:3f:
70:99:57:65:b3:7a:d8:28:32:8f:ed:7f:3c:2c:98:
4b:c4:b2:7b:6d:76:61:7b:76:0d:b1:67:d2:73:d9:
a1:fd:48:3d:82:83:76:5c:40:1f:d4:a2:40:f4:91:
d7:47:21:26:63:fa:c8:7d:35:08:40:cf:a9:f2:40:
f9:80:74:ac:fa:33:1d:e2:88:bd:42:5a:c6:a3:3d:
16:bc:02:30:e3:d1:20:e4:86:cf:46:ac:c7:c8:f8:
b5:e3:9f:0e:97:fa:d3:6e:f7:05:b8:5d:81:ef:69:
ae:0c:3a:47:4e:d1:74:2c:a3:6c:1e:d0:5d:2c:d2:
39:df:09:d1:70:25:d9:2a:13:49:65:16:b1:13:2a:
38:d8:cf:51:ca:87:c5:a6:48:e0:a6:86:da:35:2b:
d5:d7:33:dc:25:58:8d:c1:2e:d3:05:a0:c4:ba:ad:
fe:4d:8a:a3:ea:91:f5:3e:50:51:7a:d7:ec:f6:45:
3d:7b:d2:e4:eb:b6:e4:cb:ce:a9:c9:ed:cd:c1:e3:
30:13:13:fc:4e:1c:c1:5b:fa:d6:0e:67:40:05:b3:
c7:2d:98:77:a8:9a:bf:da:9e:4c:4b:46:6d:71:0a:
6c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:A7:BF:BF:D3:FA:8D:7E:9C:A5:9E:0F:D0:9D:C4:12:8C:07:19:90
X509v3 Authority Key Identifier:
keyid:2E:C9:34:FB:80:9D:13:0B:DC:85:4C:34:98:9D:14:9E:58:42:C7:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918BA94/8A9C7C76FFF811EBB6C4795EC4F9AE02/Lsk0-4CdEwvchUw0mJ0UnlhCxyI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lsk0-4CdEwvchUw0mJ0UnlhCxyI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BA94/8A9C7C76FFF811EBB6C4795EC4F9AE02/925D6D88FFFA11EB9CF87D5FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.100.140.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:d2:42:bf:df:27:37:d9:22:97:3d:f0:37:35:8c:0e:41:74:
35:5b:11:ff:60:35:50:e1:62:c8:d2:7e:cb:07:1f:70:0b:04:
05:84:6e:c5:fe:be:d4:cc:0c:0e:6b:94:05:69:07:55:92:80:
1f:c6:45:00:42:b6:48:fb:f0:25:d3:97:fd:c0:09:23:53:ee:
18:64:88:5d:2d:b7:d1:ad:17:0e:93:6d:9e:23:68:e3:59:b1:
0c:57:1a:32:45:fc:c3:23:c4:1a:9e:12:cb:97:5a:3c:5b:3e:
92:28:68:ac:0b:23:7b:c8:d7:61:cb:9b:8b:3e:bd:a8:ca:a9:
26:20:68:c8:83:9d:f5:36:c9:cd:d5:98:ff:bf:ae:c4:b0:89:
48:41:bc:a9:aa:8a:d1:1e:81:90:ea:0b:16:bb:66:69:1a:c5:
99:98:7e:cf:32:c3:41:4d:66:a6:32:67:b6:e8:ee:17:e6:a5:
8d:84:4a:fd:3f:55:11:90:c0:e6:12:d3:1e:fa:59:21:f6:62:
1b:0c:83:d7:8a:a4:71:0d:7a:b5:df:21:c5:c7:fa:9a:ba:41:
70:c2:bb:ed:a5:a2:56:7d:1e:49:fe:c8:11:db:80:cc:73:15:
07:f1:3e:ac:2f:49:c8:f2:e0:7a:48:0b:aa:2c:93:e5:3c:33:
4c:95:c0:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:15 2024 by rpki-client on console-fra.rpki-client.org