Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/EA33E076472111EEB2C0D73EC4F9AE02.roa
File: EA33E076472111EEB2C0D73EC4F9AE02.roa (raw, json)
Hash identifier: StyU8/TATGq9PRAYzOEOf3zjQlsZoPS7Mt1FSi04g08=
Subject key identifier: 4C:1A:A5:94:26:54:18:5F:7C:11:42:B7:02:72:31:32:6F:F9:B2:05
Certificate issuer: /CN=A91A6131/serialNumber=7B059CCC60BAAAFCF6F141216EFDD68E870C2551
Certificate serial: 068B
Authority key identifier: 7B:05:9C:CC:60:BA:AA:FC:F6:F1:41:21:6E:FD:D6:8E:87:0C:25:51
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewWczGC6qvz28UEhbv3WjocMJVE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/EA33E076472111EEB2C0D73EC4F9AE02.roa
Signing time: Wed 30 Aug 2023 10:42:28 +0000
ROA not before: Wed 30 Aug 2023 10:42:28 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 60504
IP address blocks: 103.238.130.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1675 (0x68b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6131/serialNumber=7B059CCC60BAAAFCF6F141216EFDD68E870C2551
Validity
Not Before: Aug 30 10:42:28 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=64ef1d14-780e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:47:1c:fc:ff:b8:01:c8:08:9c:b3:0b:98:24:
d1:96:bf:02:0f:e1:a8:10:f0:db:ee:76:6a:84:b2:
a2:d6:29:a3:48:68:77:f4:7f:70:b9:90:29:58:bf:
60:6c:ac:6c:d2:9b:ca:1e:30:40:cd:3a:e2:b2:92:
53:09:c2:24:56:31:b2:4b:5d:e4:01:2a:12:8c:66:
c5:26:8e:21:0a:c1:62:7e:89:58:19:cb:84:8c:45:
59:15:34:1d:c4:7f:cf:ac:92:b2:2c:1e:43:a4:e9:
51:c1:22:f2:c2:db:6a:99:b5:a8:a1:94:a4:89:a5:
16:34:1e:45:03:2d:25:fe:69:ee:de:24:63:aa:44:
39:8d:eb:fd:d1:83:1c:f1:5d:13:fc:26:a7:3c:ef:
cc:9e:65:3e:57:63:32:fd:13:36:95:30:74:ae:6e:
b9:d7:45:76:45:08:f6:0d:9e:9c:4a:2f:dd:cf:f8:
bb:6b:34:2b:0c:8e:53:75:2b:a9:14:38:0b:64:64:
58:08:69:be:54:46:52:7c:98:a1:5d:f5:c1:9d:a1:
a0:28:32:c7:db:4c:0d:b8:8f:9e:da:be:db:49:1a:
37:17:5b:6f:5e:d3:b9:53:96:02:30:23:d7:5c:62:
8a:93:47:aa:3c:8d:48:74:94:65:3b:4f:65:ac:cd:
fe:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:1A:A5:94:26:54:18:5F:7C:11:42:B7:02:72:31:32:6F:F9:B2:05
X509v3 Authority Key Identifier:
keyid:7B:05:9C:CC:60:BA:AA:FC:F6:F1:41:21:6E:FD:D6:8E:87:0C:25:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/ewWczGC6qvz28UEhbv3WjocMJVE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewWczGC6qvz28UEhbv3WjocMJVE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/EA33E076472111EEB2C0D73EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.238.130.0/23
Signature Algorithm: sha256WithRSAEncryption
c0:da:57:83:aa:6f:c1:94:e0:13:f3:5a:a1:1e:ae:46:77:21:
11:47:2b:39:2d:b7:a3:01:9f:ac:30:67:6d:35:bd:f0:db:0d:
04:bf:3a:fa:79:90:21:05:7c:e3:64:90:c7:1e:cc:86:22:5b:
44:32:7c:86:f5:e5:28:e3:2b:b2:b1:44:d9:a3:4c:fe:32:46:
46:49:b3:d3:11:41:34:7c:7f:6d:8b:e1:be:18:3b:7d:b3:15:
a2:c0:3d:10:05:56:35:eb:cb:ec:45:60:fe:b7:b4:21:90:39:
43:ae:9e:de:f7:c1:08:69:d0:91:ec:9f:37:e8:c9:7f:05:25:
3a:05:8d:f3:95:19:e7:d1:b2:01:96:45:0a:a4:37:ac:2d:55:
ec:ac:c1:78:24:6c:66:1a:d8:f7:86:8f:df:3e:3e:b7:df:d8:
d2:cc:e1:1d:d1:4b:d6:0c:eb:0b:02:27:ba:e5:8e:c6:71:90:
3b:da:0b:cc:7b:4c:37:91:5d:43:66:b6:0a:6a:f5:bc:f9:fc:
d2:bf:cc:ad:8e:1f:26:68:c1:9b:9b:c3:44:c1:3d:e1:5f:e7:
a4:c5:94:08:47:51:e6:55:1c:fa:6f:68:d8:00:ee:da:b0:27:
15:a0:8f:91:53:15:6a:62:a2:e5:32:75:2d:3b:ac:28:32:df:
62:a4:31:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 17 23:38:31 2023 by rpki-client on console-fra.rpki-client.org