Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B79AB/9C86D6B2855E11EBAC2C5458C4F9AE02/E9C3F40E855F11EB9E4AFD58C4F9AE02.roa
File: E9C3F40E855F11EB9E4AFD58C4F9AE02.roa (raw, json)
Hash identifier: MOZP852Vm+TAwAvJoSGqlWEXqjogi8BfzUOy2SNJnsc=
Subject key identifier: 48:7C:4C:B6:D6:EF:35:B3:F8:11:B5:05:5E:E7:5A:4A:D9:CB:5C:B7
Certificate issuer: /CN=A91B79AB/serialNumber=9B34980FA3CA2E4D70F2E2F87E76D669314F072A
Certificate serial: 0502
Authority key identifier: 9B:34:98:0F:A3:CA:2E:4D:70:F2:E2:F8:7E:76:D6:69:31:4F:07:2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mzSYD6PKLk1w8uL4fnbWaTFPByo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B79AB/9C86D6B2855E11EBAC2C5458C4F9AE02/E9C3F40E855F11EB9E4AFD58C4F9AE02.roa
Signing time: Wed 26 Jul 2023 23:40:14 +0000
ROA not before: Wed 26 Jul 2023 23:40:14 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 131273
IP address blocks: 103.68.138.0/24 maxlen: 24
103.117.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1282 (0x502)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B79AB/serialNumber=9B34980FA3CA2E4D70F2E2F87E76D669314F072A
Validity
Not Before: Jul 26 23:40:14 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=64c1aedd-8a0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d5:51:43:c3:c2:16:d2:63:d9:2f:1f:38:6f:
99:91:cf:c0:bb:ca:84:a5:0f:62:ce:dd:56:fd:8d:
05:3d:2a:10:ce:86:5d:20:e1:9a:e1:f5:9b:69:8b:
d1:e2:40:17:3c:80:92:ee:80:57:00:66:64:f3:15:
97:4f:b9:3e:8d:1e:6c:de:97:77:26:90:b6:1a:dc:
25:b2:f4:21:43:74:61:c8:f1:fb:ac:9d:bd:ea:0b:
0c:59:b9:17:84:eb:1f:11:ec:52:ed:20:7c:0c:46:
1c:13:93:68:80:82:1f:c4:cf:f6:7d:fa:e3:aa:69:
06:14:29:32:49:da:d8:b8:e9:8f:01:21:f7:b6:25:
61:02:7a:ba:3c:d8:73:a9:09:ac:88:c8:35:12:dd:
3d:84:a1:e1:11:b0:ad:e8:d3:80:47:40:ee:9b:0d:
1a:f0:79:de:d6:e9:3c:32:af:d0:e1:9e:13:34:3a:
98:a6:9f:3f:c6:02:8c:b4:7f:18:c7:96:b2:59:c6:
e6:85:1d:8d:67:eb:f3:bb:7d:af:9f:be:d4:f1:38:
9c:b0:00:75:ae:0f:08:3f:b9:a2:0d:7e:83:32:ea:
0e:62:56:6e:27:a5:eb:85:79:a8:22:84:bc:d1:e7:
fb:41:01:2b:13:0c:ce:b4:45:61:73:b4:7b:b8:3e:
a0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:7C:4C:B6:D6:EF:35:B3:F8:11:B5:05:5E:E7:5A:4A:D9:CB:5C:B7
X509v3 Authority Key Identifier:
keyid:9B:34:98:0F:A3:CA:2E:4D:70:F2:E2:F8:7E:76:D6:69:31:4F:07:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B79AB/9C86D6B2855E11EBAC2C5458C4F9AE02/mzSYD6PKLk1w8uL4fnbWaTFPByo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mzSYD6PKLk1w8uL4fnbWaTFPByo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B79AB/9C86D6B2855E11EBAC2C5458C4F9AE02/E9C3F40E855F11EB9E4AFD58C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.68.138.0/24
103.117.106.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:da:07:d0:85:96:c9:22:43:71:67:af:9a:da:6c:47:0a:07:
b1:e8:fc:d1:c3:96:b1:d8:6f:5e:e7:ce:50:f2:da:74:a5:a3:
91:08:d5:9b:f4:01:32:1a:d7:58:3e:2b:6a:d2:1f:a4:8a:1c:
04:3a:6a:79:d9:90:f5:17:45:df:ad:a4:d5:37:82:f1:12:b8:
b8:b7:95:dc:c2:24:f1:30:2b:4b:9f:a8:6d:c9:fb:bd:4d:9d:
a5:88:1c:69:18:2d:c7:59:44:77:bd:2d:9c:a3:52:d7:bb:e6:
fb:c3:ba:3a:3c:1d:20:8e:36:43:5e:2d:88:46:f4:1c:c7:2d:
e6:64:38:33:1c:8b:64:1d:89:8e:04:ae:88:83:f9:dd:4e:92:
79:f1:25:95:98:80:79:3c:4c:7d:5a:79:48:5a:e3:4c:a9:eb:
02:23:25:77:ea:f8:5e:9e:73:b8:61:88:cc:c4:9d:7e:db:d6:
89:46:a8:20:72:8b:49:14:0e:2d:91:c8:fd:92:bc:7b:51:72:
8a:45:e7:6e:15:2b:76:93:6e:b7:8a:dd:d3:9f:ff:7b:54:94:
eb:c4:68:ba:06:04:bb:bc:c7:36:db:86:a8:bc:aa:d9:1f:67:
77:6a:60:c3:f9:c4:6b:ae:93:15:4d:5e:7a:24:71:7b:a0:f8:
c7:94:31:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:57 2024 by rpki-client on console-ams.rpki-client.org