Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91953C5/B20CA31EEEBC11EBBD8DF829C4F9AE02/36E558F6EEC711EBA5AA602EC4F9AE02.roa
File: 36E558F6EEC711EBA5AA602EC4F9AE02.roa (raw, json)
Hash identifier: WW7O4cjs0QCGUM0Z5KkkrC8k8jeovs5JKA9Ne3aCfjk=
Subject key identifier: 4A:0C:CD:5A:FA:21:8A:46:3C:18:9F:7A:6F:CC:29:09:50:AE:60:D9
Certificate issuer: /CN=A91953C5/serialNumber=4EE8E8AB72BD6B9F28D9BA39EAC289482DF08E2B
Certificate serial: 04
Authority key identifier: 4E:E8:E8:AB:72:BD:6B:9F:28:D9:BA:39:EA:C2:89:48:2D:F0:8E:2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tujoq3K9a58o2bo56sKJSC3wjis.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91953C5/B20CA31EEEBC11EBBD8DF829C4F9AE02/36E558F6EEC711EBA5AA602EC4F9AE02.roa
Signing time: Tue 27 Jul 2021 10:41:35 +0000
ROA not before: Tue 27 Jul 2021 10:41:35 +0000
ROA not after: Thu 31 Mar 2022 00:00:00 +0000
asID: 59357
IP address blocks: 103.254.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91953C5/serialNumber=4EE8E8AB72BD6B9F28D9BA39EAC289482DF08E2B
Validity
Not Before: Jul 27 10:41:35 2021 GMT
Not After : Mar 31 00:00:00 2022 GMT
Subject: CN=60ffe2df-c230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e6:fa:16:bf:bd:4e:07:57:b1:38:13:ad:79:
31:bd:d2:e4:58:d7:81:f6:e4:90:c5:5d:74:5d:05:
8a:7a:45:ed:14:b1:2a:ed:ee:e4:92:c6:6f:d8:d4:
0b:72:cb:5e:7b:85:e2:21:36:50:25:e7:3c:fa:2b:
5f:dc:12:a6:38:3e:63:43:18:e2:d0:18:03:02:a2:
b6:ef:5c:92:a3:d4:84:8f:5c:b4:df:a5:84:6b:79:
ed:58:f5:d4:75:81:92:87:f0:8e:86:55:29:4a:54:
49:77:19:bb:72:50:7b:09:bb:5c:a2:2e:99:62:36:
30:b8:62:e2:16:3f:42:6f:5a:60:0a:1c:05:96:66:
e7:5a:85:32:5b:04:e8:f9:b9:a7:8d:51:35:81:0e:
9e:14:a7:ca:67:16:99:db:ee:8a:7d:ad:d8:fd:b0:
bf:0f:9b:f0:21:3d:0e:91:1b:7d:d0:77:67:11:12:
d1:b9:62:a7:b7:46:10:f2:0f:a9:59:e6:2c:f1:e5:
6a:c6:ef:5f:a9:84:36:bf:d5:88:c3:55:eb:a9:5a:
e7:b4:79:de:86:09:9d:4f:2e:74:28:26:a7:71:ef:
76:ff:e8:95:db:91:43:f0:40:22:16:e9:95:7f:6d:
5f:60:82:f0:9d:ef:77:32:25:d7:f1:12:c2:65:2b:
be:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:0C:CD:5A:FA:21:8A:46:3C:18:9F:7A:6F:CC:29:09:50:AE:60:D9
X509v3 Authority Key Identifier:
keyid:4E:E8:E8:AB:72:BD:6B:9F:28:D9:BA:39:EA:C2:89:48:2D:F0:8E:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91953C5/B20CA31EEEBC11EBBD8DF829C4F9AE02/Tujoq3K9a58o2bo56sKJSC3wjis.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tujoq3K9a58o2bo56sKJSC3wjis.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91953C5/B20CA31EEEBC11EBBD8DF829C4F9AE02/36E558F6EEC711EBA5AA602EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.254.231.0/24
Signature Algorithm: sha256WithRSAEncryption
05:05:57:a6:8d:21:14:ca:bc:14:45:38:d5:ef:15:1c:4d:74:
35:cd:21:b5:5f:ff:27:05:30:1b:61:cf:04:c3:fd:ea:91:cc:
37:d5:44:cf:09:58:f8:ab:7c:55:96:ad:ad:cd:6f:4c:c4:49:
ee:bf:ff:ad:02:7c:18:d0:f7:73:ec:1b:4b:ff:23:6d:a4:ab:
9e:05:d4:8b:2a:1b:51:39:c6:90:04:ee:fb:14:98:42:63:ba:
61:21:a2:eb:91:42:a0:f6:f0:f5:37:79:90:d3:7d:36:95:ee:
7b:49:1a:e8:79:00:e1:18:37:ec:37:9a:bc:a8:b7:ee:0a:97:
e5:61:25:19:05:ee:6a:f3:69:5e:9b:85:32:c8:44:53:09:9d:
4f:c8:15:b4:c9:d7:9b:00:94:b5:ff:1e:aa:c9:7f:cc:43:5d:
eb:a3:96:92:6d:d7:9e:81:b0:81:95:c8:4d:8d:cd:6b:e2:45:
48:68:88:c2:5f:40:83:c6:e1:59:6f:b3:56:73:13:0b:11:41:
d3:ed:93:37:bd:ea:32:45:86:56:4b:87:8b:b2:5b:df:e0:25:
85:4e:67:1a:4f:e3:ea:33:1d:52:c7:02:4c:11:e1:92:47:57:
ad:38:ee:32:75:d8:94:7e:3f:31:07:87:48:c4:3f:26:91:dd:
f7:a5:94:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:47 2024 by rpki-client on console-ams.rpki-client.org