Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/923366565F1D11EBB4482216C4F9AE02.roa
File: 923366565F1D11EBB4482216C4F9AE02.roa (raw, json)
Hash identifier: SR7VbYNQmCQVHVRjh3K8D144Rbmys6vsnLr5yggQFps=
Subject key identifier: 38:08:BA:E0:9F:3D:8D:28:8A:06:70:68:40:28:54:11:26:58:89:69
Certificate issuer: /CN=A91A6131/serialNumber=7B059CCC60BAAAFCF6F141216EFDD68E870C2551
Certificate serial: 0549
Authority key identifier: 7B:05:9C:CC:60:BA:AA:FC:F6:F1:41:21:6E:FD:D6:8E:87:0C:25:51
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewWczGC6qvz28UEhbv3WjocMJVE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/923366565F1D11EBB4482216C4F9AE02.roa
Signing time: Mon 22 Aug 2022 00:19:41 +0000
ROA not before: Mon 22 Aug 2022 00:19:41 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 206150
IP address blocks: 103.238.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1353 (0x549)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6131/serialNumber=7B059CCC60BAAAFCF6F141216EFDD68E870C2551
Validity
Not Before: Aug 22 00:19:41 2022 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=6302cb9d-8c30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bd:cf:90:55:65:8e:d3:5d:d3:85:8f:0b:5b:
a2:0e:52:bb:50:fc:38:20:15:b2:c7:f3:0a:dd:11:
df:f5:c1:61:1e:04:16:44:2d:36:93:9e:09:fc:0f:
6f:86:61:46:0d:66:68:c2:23:f8:08:0a:be:2b:fd:
f7:6d:fa:54:df:4d:eb:92:a3:da:f7:6c:f7:98:fc:
a4:72:b2:74:f4:b1:70:7b:4d:4f:cf:9e:a9:30:31:
b0:eb:b4:ab:dd:70:74:74:f5:28:52:a7:c6:b2:67:
0d:98:85:7a:94:ad:86:9f:a2:c9:23:a1:a4:f5:42:
e7:74:c5:bf:ef:9a:3a:24:fd:f5:08:ae:ea:54:03:
6f:da:75:0c:b3:53:79:91:8b:c2:a0:0e:48:0c:d5:
f7:55:f2:b7:4c:cf:16:3d:6a:e8:89:ac:01:b2:99:
90:ce:73:e5:f3:2f:d6:10:5b:2e:81:7d:cb:ab:39:
27:4e:b8:6c:16:69:50:af:ef:4d:fc:61:ae:b9:6c:
b9:76:62:2a:b6:d2:2d:63:dc:8e:a3:e0:65:66:a6:
29:b8:f4:d4:8e:42:72:bd:eb:1a:17:ae:4e:f1:45:
dd:1f:ee:d4:9b:06:84:ed:45:ac:76:bc:74:67:b4:
b8:86:5a:d0:f1:a1:90:fc:3e:77:b8:48:ae:9b:6f:
33:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:08:BA:E0:9F:3D:8D:28:8A:06:70:68:40:28:54:11:26:58:89:69
X509v3 Authority Key Identifier:
keyid:7B:05:9C:CC:60:BA:AA:FC:F6:F1:41:21:6E:FD:D6:8E:87:0C:25:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/ewWczGC6qvz28UEhbv3WjocMJVE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewWczGC6qvz28UEhbv3WjocMJVE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/923366565F1D11EBB4482216C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.238.130.0/24
Signature Algorithm: sha256WithRSAEncryption
70:f1:0d:9a:7d:93:c3:18:f9:62:f2:cd:41:36:f7:ac:7a:bd:
8e:62:9a:64:3c:d2:7b:1f:2d:2b:d4:fc:ad:48:b6:bf:de:25:
24:e1:36:ac:56:d0:e6:53:25:2c:96:21:4b:70:fd:11:02:8b:
da:f0:fc:9a:b4:7f:f3:42:55:b7:95:73:c5:78:63:fb:4f:b4:
c0:fc:fe:54:9d:ff:fb:96:63:ae:63:a9:86:9a:7f:46:0c:47:
ad:85:95:20:62:6e:7a:54:f4:58:c5:48:5a:9d:3b:cb:ca:94:
e7:6e:c1:4b:db:43:62:fc:f5:c8:89:8c:92:e7:4e:fc:2d:1d:
42:9f:66:fa:a8:0a:9f:65:9f:86:0e:4f:d4:48:a0:df:66:91:
09:dc:05:87:be:ed:26:99:f0:64:8a:f9:97:46:d5:f8:83:e5:
d3:1e:bd:39:cc:11:1f:03:b5:c6:20:73:0a:8e:92:e1:c1:40:
84:c9:eb:ec:eb:e2:3c:0a:48:1e:ee:89:5d:cb:32:2a:6a:7a:
85:ff:2e:bc:79:15:d8:9d:9e:86:38:9b:be:80:09:e6:e9:ab:
aa:b6:b7:62:c0:b0:eb:f1:bd:aa:e3:12:1f:12:ef:57:35:b8:
60:6b:b0:c3:2b:8d:64:80:20:4b:0c:2a:49:12:63:19:75:b7:
91:56:71:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:36 2024 by rpki-client on console-fra.rpki-client.org