Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/F780CF3028D611EB9168083CC4F9AE02.roa
File: F780CF3028D611EB9168083CC4F9AE02.roa (raw, json)
Hash identifier: FppaqCEawrc2g/0k9MAGOtybDz2oq+vgoS1AS2kVgI4=
Subject key identifier: 93:D0:C1:87:33:67:ED:B2:A1:95:37:D8:08:F7:A0:8B:3F:44:30:76
Certificate issuer: /CN=A91A6131/serialNumber=7B059CCC60BAAAFCF6F141216EFDD68E870C2551
Certificate serial: 0550
Authority key identifier: 7B:05:9C:CC:60:BA:AA:FC:F6:F1:41:21:6E:FD:D6:8E:87:0C:25:51
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewWczGC6qvz28UEhbv3WjocMJVE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/F780CF3028D611EB9168083CC4F9AE02.roa
Signing time: Mon 22 Aug 2022 00:19:49 +0000
ROA not before: Mon 22 Aug 2022 00:19:49 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 61317
IP address blocks: 43.255.80.0/22 maxlen: 24
103.238.128.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1360 (0x550)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6131/serialNumber=7B059CCC60BAAAFCF6F141216EFDD68E870C2551
Validity
Not Before: Aug 22 00:19:49 2022 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=6302cba4-8f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f5:58:60:79:63:12:4b:56:94:35:72:f3:aa:
68:15:b2:c1:9e:1b:7c:32:c3:74:90:cf:2e:04:73:
f7:c5:ec:ae:21:93:dc:3f:42:91:b7:84:80:5f:3e:
2f:d5:89:45:05:bb:cc:02:cd:73:6c:e9:ae:a6:73:
c5:03:55:9b:a9:68:80:06:cd:1c:d0:af:4a:91:1c:
e8:78:d3:e6:0e:8e:9a:df:da:a8:02:2f:d8:5b:49:
64:5c:7a:62:40:0f:96:ef:55:aa:2a:8a:cc:d4:92:
13:65:30:5f:65:7d:8a:ce:7f:c6:61:79:02:93:79:
67:77:59:1d:de:84:b7:fb:d0:b7:1f:5b:81:3c:fd:
9f:18:fd:47:10:bb:e2:e7:9c:a7:08:2b:61:3d:b2:
13:dd:fc:2e:81:a6:8f:da:c4:02:fa:a9:31:9b:9e:
bd:ed:77:16:1b:28:9a:ca:47:3a:bf:2d:86:52:98:
1a:72:eb:7b:ef:ca:c9:82:c0:04:d3:88:c0:cf:1c:
48:d4:b3:82:3c:13:4f:2a:f3:2d:95:ff:29:fd:ad:
12:cd:65:c1:a9:88:00:95:8f:04:26:ab:31:75:92:
42:0c:4c:80:dc:4e:4b:29:b3:bf:83:e9:c7:05:d8:
14:76:17:2e:92:35:7f:c8:ac:46:3a:c6:28:2f:a9:
fe:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D0:C1:87:33:67:ED:B2:A1:95:37:D8:08:F7:A0:8B:3F:44:30:76
X509v3 Authority Key Identifier:
keyid:7B:05:9C:CC:60:BA:AA:FC:F6:F1:41:21:6E:FD:D6:8E:87:0C:25:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/ewWczGC6qvz28UEhbv3WjocMJVE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewWczGC6qvz28UEhbv3WjocMJVE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/F780CF3028D611EB9168083CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.255.80.0/22
103.238.128.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:6f:7a:ea:65:0c:a6:c3:b0:7f:b0:93:d5:53:9f:dc:0c:a9:
9d:d1:96:26:25:73:45:3c:06:19:81:6a:fe:32:1f:bc:74:36:
26:59:05:bf:f6:50:11:f2:b1:1e:9e:e6:e2:03:5b:51:fa:17:
22:cb:91:e6:32:a2:4d:97:38:0e:59:ff:3d:03:1c:ea:19:e2:
4d:47:37:d7:92:e1:a2:bd:21:34:7c:f0:cc:2e:2f:fe:36:01:
a9:5c:c4:87:bd:3a:16:71:12:01:35:10:ca:6c:b5:e6:d3:cb:
b5:27:af:7c:0d:e6:62:86:67:0b:79:46:0b:1e:fa:68:ae:1f:
04:71:84:80:fb:e3:22:7e:10:4e:da:49:30:92:f0:2f:e4:a3:
60:38:51:43:19:3e:2f:48:1a:57:ba:83:95:a0:9e:5d:f9:bd:
85:c4:81:98:b6:e3:1e:80:f4:15:30:46:c5:8c:26:a9:78:54:
2e:48:54:19:dc:c7:b5:07:5b:11:4a:56:33:11:5c:c7:73:86:
c2:b3:49:5c:3f:b9:b5:03:99:e7:30:11:2a:86:14:56:77:6f:
14:33:ff:4a:86:1b:32:68:7a:00:10:db:73:55:7e:37:f8:00:
36:9c:67:dc:2a:47:a7:76:65:64:e1:10:66:df:34:b1:77:2b:
df:7d:d0:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:36 2024 by rpki-client on console-fra.rpki-client.org