Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B84CB/F08A47D2B72611EAA50D1222C4F9AE02/39B8C2E0E8BC11EBA1CFBC7AC4F9AE02.roa
File: 39B8C2E0E8BC11EBA1CFBC7AC4F9AE02.roa (raw, json)
Hash identifier: 8ICJQTijOStJC2FtxYAEp209eto4BgjTm0n5uOatL3c=
Subject key identifier: C6:F8:46:BC:1F:82:75:2E:40:B2:D8:4E:02:42:7B:A5:1A:48:48:DD
Certificate issuer: /CN=A91B84CB/serialNumber=795F9167F267859F4D438B837F8394EBE283BCD8
Certificate serial: 03A1
Authority key identifier: 79:5F:91:67:F2:67:85:9F:4D:43:8B:83:7F:83:94:EB:E2:83:BC:D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eV-RZ_JnhZ9NQ4uDf4OU6-KDvNg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B84CB/F08A47D2B72611EAA50D1222C4F9AE02/39B8C2E0E8BC11EBA1CFBC7AC4F9AE02.roa
Signing time: Sun 22 Aug 2021 10:37:46 +0000
ROA not before: Sun 22 Aug 2021 10:37:46 +0000
ROA not after: Mon 31 Oct 2022 00:00:00 +0000
asID: 42831
IP address blocks: 103.68.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 929 (0x3a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B84CB/serialNumber=795F9167F267859F4D438B837F8394EBE283BCD8
Validity
Not Before: Aug 22 10:37:46 2021 GMT
Not After : Oct 31 00:00:00 2022 GMT
Subject: CN=612228fa-93df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ad:de:e8:bd:23:15:34:4f:cc:c5:27:ec:a4:
fa:2a:92:df:af:cc:93:17:23:c9:dc:c5:0c:a6:39:
ed:9e:26:f5:a0:c6:0a:dd:de:a9:92:49:08:61:cd:
55:41:65:b5:2a:c0:f6:4f:4e:a3:8d:41:87:5c:78:
2e:3d:f4:1b:a9:e3:10:c6:fd:9d:93:23:9a:74:0f:
c8:53:0a:58:26:5e:27:8b:5f:56:d8:9f:60:4f:76:
4a:e2:35:2b:8e:0f:c4:55:37:6e:7b:3d:a2:a6:d7:
c8:03:d0:bf:c2:ab:77:20:68:30:07:57:d1:3b:77:
6e:9b:37:7a:50:40:07:13:11:51:e6:1a:b4:ec:d7:
8c:40:f2:f3:6b:42:01:4b:7b:09:3c:98:96:d8:9b:
91:4e:a6:f2:83:94:d3:4a:70:cb:d0:ee:48:1a:c7:
be:39:95:58:06:35:94:b8:bc:61:fc:9a:bc:c8:fe:
cb:7b:82:7b:f0:c0:52:58:2e:60:86:c8:f5:81:08:
4b:2a:2a:b1:db:47:3b:3d:cd:e3:23:01:23:54:dc:
5c:3b:f5:7a:a5:27:6a:91:ed:e8:31:f7:28:6f:ad:
05:f1:b1:60:1c:0f:a2:cc:a2:cd:a4:7d:4d:30:46:
75:d2:de:0d:30:f1:a2:6a:91:bc:fe:98:0f:11:7d:
d0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F8:46:BC:1F:82:75:2E:40:B2:D8:4E:02:42:7B:A5:1A:48:48:DD
X509v3 Authority Key Identifier:
keyid:79:5F:91:67:F2:67:85:9F:4D:43:8B:83:7F:83:94:EB:E2:83:BC:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B84CB/F08A47D2B72611EAA50D1222C4F9AE02/eV-RZ_JnhZ9NQ4uDf4OU6-KDvNg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eV-RZ_JnhZ9NQ4uDf4OU6-KDvNg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B84CB/F08A47D2B72611EAA50D1222C4F9AE02/39B8C2E0E8BC11EBA1CFBC7AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.68.201.0/24
Signature Algorithm: sha256WithRSAEncryption
03:ca:69:c4:7b:53:a9:25:74:cf:8a:a2:50:f9:2a:6d:a6:c1:
42:21:c8:03:fc:59:4c:96:ca:36:91:0c:51:55:a8:b8:af:b2:
c6:b3:aa:59:9b:3f:a4:66:12:66:33:ab:ab:89:cc:dd:e0:e2:
fa:39:14:9b:0c:53:fe:a0:da:eb:cc:f2:e7:9b:a5:a0:0b:b3:
5a:eb:d7:9e:3b:8f:ca:b2:ec:d9:ac:b7:ba:ad:e9:55:47:74:
ac:43:b5:3f:e3:81:c5:d6:6a:1a:78:00:2d:6f:6e:24:95:bc:
57:5e:9b:ba:9a:db:32:41:19:15:82:46:28:ec:e2:6d:38:d1:
7f:aa:92:6f:af:33:21:ef:5d:46:e7:3d:ed:d5:97:77:e0:72:
ef:cc:47:e0:f0:eb:27:20:55:fd:69:5a:bc:3e:1a:76:89:2d:
5a:34:40:d0:b0:30:98:98:67:a0:86:6f:52:3c:01:a3:49:d7:
9c:37:90:66:cb:4a:80:ce:d4:f0:7e:c3:7e:cc:c9:53:4f:fa:
0b:64:80:7d:52:3d:84:82:b9:50:48:b4:88:ae:37:85:a2:fb:
a7:d4:f1:cf:60:31:d2:5d:57:11:13:4b:8e:33:89:76:44:ad:
9e:94:97:6e:3d:d4:6c:10:53:8e:2a:cc:bd:84:94:99:81:58:
27:65:a2:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:38 2024 by rpki-client on console-fra.rpki-client.org