Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCAC5/1E19EED8E1E611E6AB075D80C4F9AE02/FEBDE9DE562211E7B9EF6536C4F9AE02.roa
File: FEBDE9DE562211E7B9EF6536C4F9AE02.roa (raw, json)
Hash identifier: BVqY/ABrUuRjjcF8qB34qZ23EShkkOY/OLZtUzahvss=
Subject key identifier: 42:4A:58:8F:7E:4C:16:11:D9:E0:48:2F:CE:79:29:4B:2B:79:27:DD
Certificate issuer: /CN=A91BCAC5/serialNumber=0C37FC5F1D4B36D6109DBA8D699AA5F6407E8239
Certificate serial: 1A67
Authority key identifier: 0C:37:FC:5F:1D:4B:36:D6:10:9D:BA:8D:69:9A:A5:F6:40:7E:82:39
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DDf8Xx1LNtYQnbqNaZql9kB-gjk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BCAC5/1E19EED8E1E611E6AB075D80C4F9AE02/FEBDE9DE562211E7B9EF6536C4F9AE02.roa
Signing time: Tue 18 Oct 2022 17:03:29 +0000
ROA not before: Tue 18 Oct 2022 17:03:29 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 132858
IP address blocks: 103.29.172.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6759 (0x1a67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BCAC5/serialNumber=0C37FC5F1D4B36D6109DBA8D699AA5F6407E8239
Validity
Not Before: Oct 18 17:03:29 2022 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=634edc60-46bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9e:86:f7:0f:5c:f5:20:93:12:71:b1:7f:a1:
ca:ce:7c:09:43:5e:3e:b3:ab:a8:87:b4:a4:ae:6f:
42:4c:f5:b2:cb:90:46:8f:57:6d:24:0b:f9:43:06:
e9:48:6f:1f:cc:8f:0e:78:8c:3f:b7:74:da:23:e2:
4a:7b:09:b0:a0:e1:48:28:38:ca:a4:43:c7:22:0c:
53:c6:e3:14:c6:fb:b2:ec:35:08:81:8c:be:25:c8:
38:88:b8:01:30:e4:7c:f1:53:64:d9:64:3a:22:f7:
42:76:b0:8a:ad:d9:05:de:21:fb:c0:47:c4:09:c3:
28:f8:c2:14:af:3e:f0:6e:34:fb:f6:20:47:11:18:
99:8c:d4:33:24:1c:cf:f3:fb:dd:3d:32:87:9a:8e:
57:44:ed:e8:6a:9e:38:78:fe:9a:b5:69:e7:80:17:
fc:ca:b4:f4:4b:a4:33:58:e8:5f:47:58:99:74:06:
83:71:a6:c2:93:ae:1a:a8:a2:df:f7:b8:89:b9:d8:
e7:9e:49:f3:92:a8:91:4c:70:e6:46:e9:68:5d:b8:
e7:db:12:e0:8e:7f:a5:84:7f:ac:0b:31:cf:18:4b:
0a:fc:ad:fb:b5:44:e3:bf:54:63:41:aa:51:42:1e:
6f:67:c8:05:76:8f:50:6d:20:d4:42:fd:13:b3:3b:
6e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:4A:58:8F:7E:4C:16:11:D9:E0:48:2F:CE:79:29:4B:2B:79:27:DD
X509v3 Authority Key Identifier:
keyid:0C:37:FC:5F:1D:4B:36:D6:10:9D:BA:8D:69:9A:A5:F6:40:7E:82:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BCAC5/1E19EED8E1E611E6AB075D80C4F9AE02/DDf8Xx1LNtYQnbqNaZql9kB-gjk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DDf8Xx1LNtYQnbqNaZql9kB-gjk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCAC5/1E19EED8E1E611E6AB075D80C4F9AE02/FEBDE9DE562211E7B9EF6536C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.29.172.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:75:e3:5c:4f:5e:43:eb:2a:7a:40:25:0a:95:3c:7d:10:d0:
4d:78:8e:e0:6a:e3:fd:8f:54:e2:82:a0:e4:46:79:27:86:d8:
38:48:43:a3:9e:7b:77:53:aa:5e:e2:72:07:d5:44:7b:e5:59:
5c:30:74:a4:01:dd:58:17:7c:4c:60:f6:2d:69:12:ba:4c:bb:
22:54:fc:bb:61:56:9c:77:59:78:bd:1b:53:a6:ad:0c:c4:60:
f1:64:9f:48:89:8a:27:8e:38:7b:9a:88:30:d6:93:34:49:2e:
20:b7:b6:ad:fa:31:17:24:43:57:17:4a:c1:79:6f:b0:9d:7b:
a2:85:37:29:af:4f:c3:a5:39:35:9b:9d:19:41:bf:66:8e:da:
6f:c0:85:42:a3:06:ab:ec:5b:a0:53:6b:47:15:09:92:e9:8f:
d1:e1:5a:f5:eb:35:97:b7:d8:ae:21:d4:10:3d:96:19:f5:89:
5f:7b:4e:49:7e:99:16:30:6e:52:e6:ae:44:c7:69:c1:44:53:
aa:6d:3a:3e:2f:9e:e3:40:de:a5:dd:31:4b:ee:de:eb:00:95:
96:9e:6e:d1:ac:5a:24:a1:5a:26:09:df:4c:90:92:19:cc:1b:
2c:51:a8:be:ca:2b:b8:c4:df:f6:f9:51:7d:55:cb:76:65:4a:
e1:81:5b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:24 2024 by rpki-client on console-ams.rpki-client.org