Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/553B161A9CC211EDBFEDAF76C4F9AE02.roa
File: 553B161A9CC211EDBFEDAF76C4F9AE02.roa (raw, json)
Hash identifier: v1Bwyt6uIK03aYwqHhM9dNh+scy2jZliLFDgePQ3VE4=
Subject key identifier: A2:67:4A:F2:8C:C2:A7:24:15:46:18:59:F9:D0:B7:93:AB:FD:3F:9C
Certificate issuer: /CN=A91A6131/serialNumber=7B059CCC60BAAAFCF6F141216EFDD68E870C2551
Certificate serial: 05EE
Authority key identifier: 7B:05:9C:CC:60:BA:AA:FC:F6:F1:41:21:6E:FD:D6:8E:87:0C:25:51
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewWczGC6qvz28UEhbv3WjocMJVE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/553B161A9CC211EDBFEDAF76C4F9AE02.roa
Signing time: Wed 25 Jan 2023 15:09:59 +0000
ROA not before: Wed 25 Jan 2023 15:09:59 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 149502
IP address blocks: 103.238.130.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1518 (0x5ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6131/serialNumber=7B059CCC60BAAAFCF6F141216EFDD68E870C2551
Validity
Not Before: Jan 25 15:09:59 2023 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=63d14646-6593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e1:93:c9:a3:e4:88:97:9e:7f:07:ce:2e:86:
f2:e7:f0:23:19:02:68:7e:8a:aa:6a:01:37:14:4c:
81:38:6c:b3:3a:d6:2d:71:2a:d0:c5:55:a0:37:6f:
54:8d:aa:f9:d4:35:e4:15:42:20:14:0d:f7:5b:19:
43:8c:f2:0e:8c:01:a3:2d:43:1f:99:2f:be:e6:2f:
95:56:4b:3c:fa:cb:bd:0f:ba:cd:4f:1c:be:ac:2d:
f1:c1:f7:95:54:3b:93:e4:a3:08:87:e7:7b:cf:e1:
99:37:4a:a5:a2:a4:07:da:c6:71:6a:7f:5c:75:ca:
c4:18:36:1a:ad:7b:9e:62:30:eb:ab:77:2c:26:4b:
7b:69:0f:1f:7d:32:d1:d2:04:3c:de:61:8e:eb:e9:
69:d3:e9:c4:af:28:9b:b4:b6:08:eb:35:7d:4e:fe:
4f:38:c0:40:aa:6d:bf:72:70:42:69:d0:0d:8b:56:
9d:3c:e8:2f:f6:4b:ab:1c:ff:e8:ae:df:19:3b:95:
25:5c:4f:72:0e:d4:0f:6a:6f:99:dc:52:0a:1a:7d:
85:f0:67:55:b5:40:72:8e:a6:df:72:2c:9b:be:4a:
4e:98:70:5b:57:74:9e:82:07:0f:74:26:2a:ec:e2:
51:1f:be:2a:75:e7:6e:d3:6f:23:19:f2:c5:18:4a:
5a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:67:4A:F2:8C:C2:A7:24:15:46:18:59:F9:D0:B7:93:AB:FD:3F:9C
X509v3 Authority Key Identifier:
keyid:7B:05:9C:CC:60:BA:AA:FC:F6:F1:41:21:6E:FD:D6:8E:87:0C:25:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/ewWczGC6qvz28UEhbv3WjocMJVE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewWczGC6qvz28UEhbv3WjocMJVE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/553B161A9CC211EDBFEDAF76C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.238.130.0/23
Signature Algorithm: sha256WithRSAEncryption
96:f9:17:2e:f5:04:d4:d1:d1:21:a5:9e:2d:96:0e:37:42:8a:
14:ac:87:22:9c:e5:ec:f4:19:03:86:72:52:5f:bb:b5:44:ff:
cf:3d:aa:43:cc:96:03:f0:0a:00:25:1e:cd:d7:8a:4e:22:0d:
cd:ad:e7:09:2c:34:73:ce:d7:dd:82:ec:67:10:bd:56:56:8e:
ad:eb:4a:29:4f:bb:41:35:64:48:aa:33:33:bb:69:53:44:15:
9b:03:ff:af:22:e7:b2:0c:f7:ec:e8:77:3a:da:a2:75:0e:a3:
ec:6a:e1:b4:98:dd:79:ec:2d:dc:2a:1f:8f:3b:3a:69:d8:53:
aa:cc:3a:d8:f9:20:d7:49:64:d6:55:c6:92:f7:44:13:11:14:
db:cb:c6:53:44:10:ca:81:b1:73:13:89:5b:b0:bb:dd:24:61:
9f:20:47:ac:2c:81:f9:60:bf:a9:b0:59:e6:19:43:6a:37:e0:
7a:74:d5:51:27:a3:2e:bd:18:0c:31:fe:f4:1c:3d:a7:a6:06:
31:ab:44:33:fb:6f:10:5d:50:19:e8:69:76:0d:59:6f:4c:14:
c0:3a:46:20:9f:7e:21:f1:8c:38:1b:3e:48:01:a4:09:ce:14:
31:aa:77:e9:6a:3e:e6:a7:5f:2c:52:5c:44:01:81:2b:41:8e:
8b:6f:8e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:36 2024 by rpki-client on console-fra.rpki-client.org