Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5C82/8352D712DA3211EBA1E28B1CC4F9AE02/91ECF152DA3411EBB76EB61DC4F9AE02.roa
File: 91ECF152DA3411EBB76EB61DC4F9AE02.roa (raw, json)
Hash identifier: uJ5xEKO+RZTcP8GdBdNXO58kmTsD3ORpgFBJ3zlsVX4=
Subject key identifier: 5A:DB:B2:7A:14:DC:78:EF:C0:A7:A3:3A:F3:1E:BE:8B:9D:05:FE:B1
Certificate issuer: /CN=A91A5C82/serialNumber=8D27CCE1FC2693BF623EB11DE60E87AD579B8AF1
Certificate serial: 03BB
Authority key identifier: 8D:27:CC:E1:FC:26:93:BF:62:3E:B1:1D:E6:0E:87:AD:57:9B:8A:F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jSfM4fwmk79iPrEd5g6HrVebivE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5C82/8352D712DA3211EBA1E28B1CC4F9AE02/91ECF152DA3411EBB76EB61DC4F9AE02.roa
Signing time: Wed 21 Dec 2022 02:42:17 +0000
ROA not before: Wed 21 Dec 2022 02:42:17 +0000
ROA not after: Wed 31 Jan 2024 00:00:00 +0000
asID: 131111
IP address blocks: 103.78.208.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 955 (0x3bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5C82/serialNumber=8D27CCE1FC2693BF623EB11DE60E87AD579B8AF1
Validity
Not Before: Dec 21 02:42:17 2022 GMT
Not After : Jan 31 00:00:00 2024 GMT
Subject: CN=63a27289-a04c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7a:01:51:17:8f:d3:c0:b8:d6:72:28:7d:9c:
4c:5a:49:19:f2:f3:23:de:e3:8b:c7:6f:4d:1c:53:
51:dd:12:57:2f:ef:63:4a:7f:12:6e:f1:ab:0a:ff:
d6:b2:e6:2c:d5:02:78:ce:f7:48:c6:41:d0:dc:44:
49:74:f3:37:81:d3:d2:5e:ea:da:87:09:d2:7b:c6:
df:39:68:2a:65:92:45:37:3b:30:07:6f:40:2e:5a:
51:65:28:87:9e:d6:22:24:4b:7d:7d:da:2e:f8:e5:
bd:2b:8d:67:de:81:16:2d:18:2e:87:51:58:e0:16:
1d:4a:32:9a:ae:f6:d3:4a:8c:03:74:db:3d:49:a9:
ca:2c:bf:3f:a9:c4:a8:29:db:df:cb:56:ad:33:73:
5e:21:54:57:95:cc:23:4a:16:7c:c9:5d:6f:b6:37:
a2:b7:f6:98:0c:3f:4b:0b:a0:86:71:11:b1:6e:af:
99:36:4a:67:67:51:79:35:96:08:8a:12:cd:79:71:
76:85:b2:b8:f4:29:ac:04:0b:8c:5d:f0:ab:0a:5f:
30:48:b1:85:23:3f:df:50:41:18:60:5f:05:fe:5e:
9e:44:a8:ca:e2:ff:bb:1b:c0:3c:9f:a0:00:66:6b:
65:21:f8:16:1d:09:fc:aa:d8:bb:2e:d5:a3:14:16:
88:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:DB:B2:7A:14:DC:78:EF:C0:A7:A3:3A:F3:1E:BE:8B:9D:05:FE:B1
X509v3 Authority Key Identifier:
keyid:8D:27:CC:E1:FC:26:93:BF:62:3E:B1:1D:E6:0E:87:AD:57:9B:8A:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5C82/8352D712DA3211EBA1E28B1CC4F9AE02/jSfM4fwmk79iPrEd5g6HrVebivE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jSfM4fwmk79iPrEd5g6HrVebivE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5C82/8352D712DA3211EBA1E28B1CC4F9AE02/91ECF152DA3411EBB76EB61DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.78.208.0/22
Signature Algorithm: sha256WithRSAEncryption
21:5d:61:16:fa:ff:99:3c:9a:1b:00:02:c8:be:fc:80:ab:31:
f7:67:15:b6:7e:e1:71:17:72:04:61:2a:2a:60:a6:05:d8:9b:
73:39:08:64:67:27:59:58:bc:22:2d:94:c9:ce:2f:2a:1e:c7:
ed:b8:05:a3:b3:b9:52:88:f2:21:c5:73:a7:28:04:1a:d2:d4:
10:d8:f4:4a:9c:ed:e6:65:a9:af:92:16:9c:cf:ac:56:f7:a8:
01:e7:5d:27:dd:cc:5e:e7:af:8f:06:e8:b0:90:c8:9e:f1:b4:
e5:c9:f5:2e:03:31:84:7f:fe:f5:69:64:ac:f2:c1:e8:b2:5e:
5f:c2:8d:e7:9e:82:7f:4a:90:54:48:fb:a7:37:41:9a:dc:c1:
d9:82:bb:dc:98:0f:4e:70:00:bc:a4:f5:e9:01:78:d3:0e:6f:
65:7e:64:82:a4:e5:df:75:ee:31:1b:39:bc:3e:cf:49:0b:8c:
a5:4d:c6:ca:bd:bf:a3:ab:f6:25:4b:dc:66:d9:c5:72:e5:35:
3e:39:ab:2c:fe:f6:b5:5b:e4:5c:eb:05:f6:a0:3d:b1:a2:dc:
95:74:ca:87:d1:c4:74:93:2e:6f:9c:1c:32:61:6f:84:a3:cb:
97:50:b4:e3:ad:77:a1:b7:a9:69:8c:71:0b:90:a1:dd:7f:de:
a1:af:f8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:54 2024 by rpki-client on console-ams.rpki-client.org