Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7A43/B44614B4ABF211EC9457F923C4F9AE02/A9436DC2AE2311ECBF724C6DC4F9AE02.roa
File: A9436DC2AE2311ECBF724C6DC4F9AE02.roa (raw, json)
Hash identifier: YSjawa4r1XDQcVKvlTsD0QG70vthSLDnhjOYsEplPDg=
Subject key identifier: 8A:36:A1:7F:AE:98:06:F2:4C:58:81:A4:7D:25:92:9A:61:2A:AD:52
Certificate issuer: /CN=A91A7A43/serialNumber=B8E5C681CD86057881D492CB5CE4D124D6299886
Certificate serial: 0140
Authority key identifier: B8:E5:C6:81:CD:86:05:78:81:D4:92:CB:5C:E4:D1:24:D6:29:98:86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOXGgc2GBXiB1JLLXOTRJNYpmIY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7A43/B44614B4ABF211EC9457F923C4F9AE02/A9436DC2AE2311ECBF724C6DC4F9AE02.roa
Signing time: Wed 31 Aug 2022 05:03:40 +0000
ROA not before: Wed 31 Aug 2022 05:03:39 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 135425
IP address blocks: 103.99.20.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 320 (0x140)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7A43/serialNumber=B8E5C681CD86057881D492CB5CE4D124D6299886
Validity
Not Before: Aug 31 05:03:39 2022 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=630eebab-0122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b0:e4:af:0f:ce:d3:47:83:10:aa:e7:e0:75:
d3:08:f0:f5:d9:bc:09:86:ba:83:4f:45:7b:69:dc:
ce:e0:30:76:04:83:72:81:82:bc:97:62:0c:20:78:
e2:bc:d0:35:a4:53:1f:a1:04:b1:81:4e:bb:22:3e:
c7:2b:ed:16:5e:6f:fd:50:de:fb:a1:0d:d8:b5:70:
ac:b3:3b:a9:fe:92:2d:8c:e5:7b:a5:9b:56:94:22:
8b:e8:a5:8e:24:f3:2b:ed:d1:27:8c:a9:03:31:f3:
b9:f5:86:c7:4b:a4:d4:1c:5b:82:6e:ec:3d:4b:b2:
78:a2:7c:35:f3:42:27:6c:be:a0:e8:e9:38:6a:b1:
d4:fc:12:a8:8d:46:09:96:6c:ef:91:14:91:cf:e0:
27:a3:5f:93:f5:28:c4:93:55:b1:fe:ed:da:de:e2:
24:5a:2e:06:2a:ce:f6:b2:52:43:00:2f:d7:88:ba:
9b:ca:c9:d8:8b:b8:9c:a9:ed:98:2a:47:d7:f8:53:
cf:25:db:6c:27:dc:04:bf:83:57:2d:b9:c8:20:cd:
4a:79:fb:b7:91:fc:c4:50:e2:64:e7:74:70:5f:81:
6c:31:75:3c:62:9c:18:c4:4a:32:af:a8:be:b4:6d:
43:a5:b1:e0:9f:f2:1d:0f:37:ea:0b:64:6a:a9:1a:
0d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:36:A1:7F:AE:98:06:F2:4C:58:81:A4:7D:25:92:9A:61:2A:AD:52
X509v3 Authority Key Identifier:
keyid:B8:E5:C6:81:CD:86:05:78:81:D4:92:CB:5C:E4:D1:24:D6:29:98:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7A43/B44614B4ABF211EC9457F923C4F9AE02/uOXGgc2GBXiB1JLLXOTRJNYpmIY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOXGgc2GBXiB1JLLXOTRJNYpmIY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7A43/B44614B4ABF211EC9457F923C4F9AE02/A9436DC2AE2311ECBF724C6DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.99.20.0/23
Signature Algorithm: sha256WithRSAEncryption
19:b2:67:f5:82:03:41:ba:c8:ba:65:6c:04:c9:28:b9:ee:3f:
ef:36:e1:28:fe:a5:10:c7:9a:9e:65:3d:b5:7c:b9:69:bd:67:
5d:3a:c5:22:21:17:00:48:ce:e1:92:42:26:36:ec:4b:b2:e6:
02:00:e6:a0:cb:f9:51:4f:c3:46:07:07:b5:f2:b8:f7:c2:7b:
3b:99:ee:d3:78:cb:ff:00:4e:66:43:b1:0f:30:9e:94:b5:fc:
1a:45:da:ae:91:58:57:2a:83:e0:d8:1a:8f:3c:19:c4:0d:5f:
b6:e3:1f:05:34:c4:ac:77:72:95:8b:d4:50:2f:8f:6e:24:fe:
fe:eb:7f:3a:86:60:c1:59:da:96:5f:61:4a:60:2b:1a:0d:d8:
a2:d8:ff:dd:67:5a:6c:e0:62:43:ca:16:45:ec:11:08:dc:3f:
dd:9d:6b:ea:eb:a5:08:ba:a6:c2:25:c5:e1:55:61:de:26:c7:
32:49:f3:49:52:8d:1d:65:68:12:5b:c5:a6:19:10:be:6d:4e:
5a:63:eb:20:35:3d:be:82:6f:55:7f:cf:91:2b:f2:e5:21:ef:
fe:2b:0f:27:be:22:b2:d0:7b:ae:12:58:f5:dd:b8:2e:15:6f:
49:04:f4:4a:77:e0:68:b4:09:02:7a:f9:34:cd:19:b4:69:36:
bb:65:5f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:54 2024 by rpki-client on console-ams.rpki-client.org