Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB2D3/801BEE324DA011EAA418D03BC4F9AE02/FFA9A93AC2C211EBB3EDE748C4F9AE02.roa
File: FFA9A93AC2C211EBB3EDE748C4F9AE02.roa (raw, json)
Hash identifier: GBHbpSqLsZnuUiAiyKRUh8btwyoitfUcnXeYmJfkbjE=
Subject key identifier: 20:19:E1:12:88:BD:48:17:42:6B:95:53:4F:3A:18:A2:5C:3F:A8:05
Certificate issuer: /CN=A91BB2D3/serialNumber=8FA3EDE9B903537579B1EF41A37F03C041E7CDF0
Certificate serial: 07E5
Authority key identifier: 8F:A3:ED:E9:B9:03:53:75:79:B1:EF:41:A3:7F:03:C0:41:E7:CD:F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6Pt6bkDU3V5se9Bo38DwEHnzfA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB2D3/801BEE324DA011EAA418D03BC4F9AE02/FFA9A93AC2C211EBB3EDE748C4F9AE02.roa
Signing time: Wed 25 May 2022 21:21:28 +0000
ROA not before: Wed 25 May 2022 21:21:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 138933
IP address blocks: 103.137.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2021 (0x7e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB2D3/serialNumber=8FA3EDE9B903537579B1EF41A37F03C041E7CDF0
Validity
Not Before: May 25 21:21:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=628e9dd7-69ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c8:21:c0:33:a3:cd:b0:67:d0:33:91:0b:bc:
26:55:1b:11:9a:8c:69:ab:69:d0:01:01:ec:57:e4:
b7:27:2d:b8:a3:49:04:66:b4:34:7a:b6:65:9f:4f:
92:32:ec:94:5a:7d:96:bc:70:63:9f:98:13:d9:a9:
9c:f6:59:93:00:d4:c3:82:31:77:1c:21:2e:df:1b:
86:3a:cc:5c:ec:31:24:f1:20:da:ec:ed:d3:d2:9c:
22:d3:e9:85:09:65:c1:ae:b6:66:19:97:d7:17:49:
63:86:b4:3a:24:bf:bf:15:d1:e4:c4:e7:fb:d7:27:
1e:bd:98:61:03:e0:29:ee:0c:35:28:a3:27:87:db:
f8:96:da:5b:09:d0:c1:03:1e:0a:3d:48:8a:e6:c5:
9d:e8:d7:a0:c2:7d:95:22:72:1c:4a:ce:79:62:c0:
91:d7:1f:2b:cd:28:d6:8d:92:1a:cd:56:dd:8d:9b:
92:c4:bf:aa:90:d1:5b:d5:39:da:56:86:47:f0:f0:
a3:c8:ec:db:2a:65:ce:20:55:e7:d4:71:c2:f2:2a:
42:d9:d7:5b:52:d1:fd:3b:b1:5e:ea:c5:3c:0a:94:
87:b1:04:da:cf:2b:dd:83:0c:a3:bb:7f:03:58:2e:
69:e1:f7:16:4e:1a:df:f9:08:f9:58:6b:70:12:35:
03:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:19:E1:12:88:BD:48:17:42:6B:95:53:4F:3A:18:A2:5C:3F:A8:05
X509v3 Authority Key Identifier:
keyid:8F:A3:ED:E9:B9:03:53:75:79:B1:EF:41:A3:7F:03:C0:41:E7:CD:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB2D3/801BEE324DA011EAA418D03BC4F9AE02/j6Pt6bkDU3V5se9Bo38DwEHnzfA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6Pt6bkDU3V5se9Bo38DwEHnzfA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB2D3/801BEE324DA011EAA418D03BC4F9AE02/FFA9A93AC2C211EBB3EDE748C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.137.86.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:70:9e:11:81:5f:70:4d:41:c8:7d:ae:84:92:ad:53:4a:bf:
be:47:19:77:ce:3a:eb:77:aa:c5:57:75:c9:c8:22:a7:49:ec:
b5:81:dc:2d:9f:da:85:17:7e:20:7e:40:c9:b2:42:79:0b:12:
16:87:4c:ee:d3:75:13:a6:37:7c:2e:03:09:57:ff:18:31:39:
f2:70:5f:ec:02:4a:42:13:52:8d:c1:04:a8:a2:dd:5c:47:17:
6b:4a:df:b5:64:37:a1:ed:de:88:b4:d0:72:6d:74:33:9c:03:
db:2d:36:bb:1b:44:55:39:6d:c9:7c:e1:41:4a:46:78:8a:38:
77:ff:df:ad:dd:e0:2a:88:de:04:97:d1:b0:ce:c9:2e:cf:97:
f7:d7:de:04:02:2b:13:7f:a4:0b:28:2f:6a:70:61:6e:69:e7:
2f:e0:c5:f5:50:99:e8:68:3e:ec:e9:d9:24:46:46:36:ca:b3:
67:a3:5d:b3:bb:e3:6b:95:ba:1a:9f:c0:d7:8f:13:57:59:74:
df:59:86:dc:f9:96:84:48:92:cd:63:81:17:76:0e:c3:86:93:
24:d4:b2:82:29:c8:39:ec:8c:7d:39:4a:57:47:21:49:78:42:
5e:5f:bc:f9:2e:7b:bd:94:a9:72:5c:0b:4d:e8:33:13:49:26:
bf:20:ed:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:39 2024 by rpki-client on console-fra.rpki-client.org