Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB07D/E9B4853C4AC411EE9839386FC4F9AE02/3F81AC2A18CD11EFB4329233C4F9AE02.roa
File: 3F81AC2A18CD11EFB4329233C4F9AE02.roa (raw, json)
Hash identifier: bZ/hlMNyU9mq7IA5QBl7pU9HLp+baA1yUP3WHgWC274=
Subject key identifier: 7D:9A:45:0D:B5:A2:9B:84:E8:92:DD:DC:D5:21:C2:67:BB:CC:33:29
Certificate issuer: /CN=A91BB07D/serialNumber=D4310690DCEB7EE4A18DA3579ACAD174818646A3
Certificate serial: A2
Authority key identifier: D4:31:06:90:DC:EB:7E:E4:A1:8D:A3:57:9A:CA:D1:74:81:86:46:A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DEGkNzrfuShjaNXmsrRdIGGRqM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB07D/E9B4853C4AC411EE9839386FC4F9AE02/3F81AC2A18CD11EFB4329233C4F9AE02.roa
Signing time: Thu 23 May 2024 06:25:28 +0000
ROA not before: Thu 23 May 2024 06:25:28 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 216458
IP address blocks: 103.117.136.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162 (0xa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB07D/serialNumber=D4310690DCEB7EE4A18DA3579ACAD174818646A3
Validity
Not Before: May 23 06:25:28 2024 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=664ee158-5d6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6f:df:f9:5a:a1:da:2e:c8:92:c8:05:aa:02:
86:e5:bd:d8:a3:89:c9:80:2c:64:8f:f6:10:be:78:
7a:fc:66:0a:e9:cb:cd:ba:32:2f:54:3d:97:72:a3:
7e:8f:98:36:19:ae:fc:72:31:ec:c9:6d:a5:c6:d0:
d2:85:63:03:2c:fc:57:61:fc:b7:05:96:05:55:87:
a0:e3:11:f8:05:79:ec:30:52:dc:bf:62:80:9d:b0:
b7:44:98:30:57:b1:2a:2d:10:4a:fb:f7:b3:cf:8b:
1a:cb:c7:14:ac:ba:44:8b:86:fe:1f:d9:8b:59:16:
2c:db:c2:89:b1:a1:4d:13:6f:5b:54:ff:ea:28:66:
20:e9:86:fb:66:0c:ec:d4:a6:89:4f:93:b0:a0:ba:
55:2b:0d:8a:96:5a:02:d3:43:51:cf:40:41:0c:95:
84:ad:1d:d1:65:d7:80:86:98:2d:ef:ea:47:1c:26:
17:43:9b:48:1f:6b:1f:37:8f:09:3f:92:f3:46:f8:
fc:d5:ba:c7:45:d8:f0:66:9e:f1:87:e6:ba:ba:8e:
8e:42:18:8d:94:02:cd:44:5e:39:ea:62:77:9d:91:
c0:cb:d7:60:b8:05:24:fc:7e:b0:80:f6:3e:21:e1:
10:58:ce:d4:b1:bf:06:d2:ee:a0:5b:30:c7:4a:ec:
7a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:9A:45:0D:B5:A2:9B:84:E8:92:DD:DC:D5:21:C2:67:BB:CC:33:29
X509v3 Authority Key Identifier:
keyid:D4:31:06:90:DC:EB:7E:E4:A1:8D:A3:57:9A:CA:D1:74:81:86:46:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB07D/E9B4853C4AC411EE9839386FC4F9AE02/1DEGkNzrfuShjaNXmsrRdIGGRqM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DEGkNzrfuShjaNXmsrRdIGGRqM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB07D/E9B4853C4AC411EE9839386FC4F9AE02/3F81AC2A18CD11EFB4329233C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.117.136.0/22
Signature Algorithm: sha256WithRSAEncryption
54:65:16:d2:9e:27:eb:a5:c7:ff:f9:df:f5:6e:f9:96:91:b3:
3a:be:02:dd:eb:cf:28:97:25:cb:25:52:f6:ab:9b:26:f5:af:
21:57:32:4c:98:e8:1e:99:b9:49:88:c6:b5:99:79:1b:b7:28:
dc:66:7a:d3:d4:6f:fe:c4:11:fa:6d:31:0a:e3:e7:9e:86:fe:
65:78:d5:39:f3:b9:6e:ee:08:5d:6c:8c:16:e9:f9:ab:78:2a:
fe:37:b1:0f:10:6c:8c:71:65:02:32:43:d6:00:73:e0:ba:bc:
4e:74:55:8e:54:06:2c:74:4e:5f:86:1a:1e:8e:0c:8a:80:99:
e1:87:be:ba:0a:b8:14:0a:23:50:68:b8:2d:c7:13:6d:1d:b0:
58:c6:40:9d:89:a5:75:55:76:41:5e:25:cf:a6:17:34:13:2e:
a6:55:b8:08:d1:fb:4e:11:06:43:b0:16:cb:81:b4:6e:1e:52:
db:49:01:d5:c9:4f:22:45:5d:6e:1d:35:6c:1d:2f:2b:85:9b:
25:ce:0f:58:8f:9e:0b:58:fe:ed:90:18:ed:26:f2:23:33:52:
aa:5a:6a:f5:65:9f:44:fa:68:74:4c:37:4d:69:d3:c0:99:2d:
0c:be:ac:f5:04:6e:c7:1a:64:4f:3c:d8:4a:4f:11:34:a0:58:
53:8a:8f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 04:05:12 2024 by rpki-client on console-ams.rpki-client.org