Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/4CB8094C6D7711ECAEA0361CC4F9AE02.roa
File: 4CB8094C6D7711ECAEA0361CC4F9AE02.roa (raw, json)
Hash identifier: nUWs2MynSBHBlh8+H3/e0So8Xna0f7+PrQfbluH0w4c=
Subject key identifier: BB:7F:C1:C2:29:00:40:66:F2:63:8C:14:DD:D5:AA:4C:30:23:63:A9
Certificate issuer: /CN=A91A6131/serialNumber=7B059CCC60BAAAFCF6F141216EFDD68E870C2551
Certificate serial: 054D
Authority key identifier: 7B:05:9C:CC:60:BA:AA:FC:F6:F1:41:21:6E:FD:D6:8E:87:0C:25:51
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewWczGC6qvz28UEhbv3WjocMJVE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/4CB8094C6D7711ECAEA0361CC4F9AE02.roa
Signing time: Mon 22 Aug 2022 00:19:46 +0000
ROA not before: Mon 22 Aug 2022 00:19:46 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 49999
IP address blocks: 103.238.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1357 (0x54d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6131/serialNumber=7B059CCC60BAAAFCF6F141216EFDD68E870C2551
Validity
Not Before: Aug 22 00:19:46 2022 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=6302cba1-480f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2d:1e:ac:f9:12:a8:01:4d:3a:78:c8:00:ad:
dc:76:dd:f7:52:09:45:7f:da:fb:85:94:36:51:ef:
da:fe:50:c2:e7:8e:6d:e4:db:d4:51:4e:c2:0f:f1:
80:e7:90:45:1c:66:60:89:96:0a:40:fe:8e:62:00:
d1:1a:13:25:88:2f:43:fd:6b:45:cf:57:4f:ca:35:
1c:13:99:c0:fc:08:10:0a:e9:bd:89:5d:f6:d0:d0:
da:30:45:35:41:35:f3:4c:f9:64:f2:77:93:96:98:
78:7f:c2:58:b9:44:c7:00:d4:d8:b1:e0:91:ed:14:
30:2f:6c:7a:27:5d:a1:af:30:39:8e:11:52:7d:41:
20:0d:81:23:8f:0a:97:63:6b:2c:c4:44:01:71:bb:
d4:25:c5:02:76:d7:ca:ac:87:11:1b:fd:bf:e1:3f:
9c:7e:e9:0d:d0:95:ef:7a:cd:f2:f4:22:cb:91:0c:
6f:65:d3:ca:68:04:c6:4c:0a:da:3a:d8:f2:6c:74:
a1:c2:11:5d:e9:e5:1f:3f:21:0c:04:6c:8c:6b:f8:
07:63:77:c0:05:a6:8f:ea:1b:71:1f:97:cb:a2:34:
50:fa:d5:95:b7:1a:a2:29:ff:ee:e6:9c:6e:c8:f7:
60:91:b0:3a:cf:3a:69:21:c5:a0:70:1a:45:5f:7b:
5f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:7F:C1:C2:29:00:40:66:F2:63:8C:14:DD:D5:AA:4C:30:23:63:A9
X509v3 Authority Key Identifier:
keyid:7B:05:9C:CC:60:BA:AA:FC:F6:F1:41:21:6E:FD:D6:8E:87:0C:25:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/ewWczGC6qvz28UEhbv3WjocMJVE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewWczGC6qvz28UEhbv3WjocMJVE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/4CB8094C6D7711ECAEA0361CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.238.131.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:9a:a5:c2:3d:a1:34:5b:5f:7b:4b:49:36:92:97:66:85:3f:
4d:b3:fa:d5:26:72:48:cb:23:ee:f0:11:5d:52:03:2a:ae:88:
40:14:e9:34:42:de:f8:c3:00:3b:a0:7f:2f:ac:94:a9:7c:da:
33:fa:19:c1:61:92:e0:46:28:1b:bf:1a:dc:00:58:25:4b:5a:
e2:fb:6b:9f:a3:f9:14:13:b8:ff:ce:51:65:b9:47:df:5c:aa:
54:ef:1b:56:7d:7c:c3:48:5a:63:64:0a:5c:76:8e:74:2a:6e:
fc:b3:d7:79:0b:41:67:8d:d2:c2:bd:67:b8:95:68:e7:72:d7:
01:06:bb:24:dd:c5:c7:1b:3a:d8:c1:35:dc:a9:13:58:a2:0e:
a9:90:3a:cc:57:8c:6d:13:8f:62:5a:91:65:e9:73:28:21:42:
df:1b:13:76:70:b8:7f:37:ca:d1:30:c1:4e:57:fa:17:9a:62:
d3:9e:1f:9e:70:75:82:32:e3:1d:e6:e6:83:33:c2:06:bd:af:
3c:73:b1:13:38:a1:f0:b6:8e:75:d9:9b:34:6f:e6:26:c0:b0:
8b:f7:0e:cd:e0:0d:e8:e7:5d:d1:6f:7e:06:04:85:ee:63:a8:
6e:65:62:67:2f:c9:e6:0c:1b:ff:a5:6e:cd:2b:9d:f9:35:0e:
31:4c:6b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:54 2024 by rpki-client on console-ams.rpki-client.org