Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDA0E/BF94AB6C0AD711E7AD6FE621C4F9AE02/FBCCC2868FD311ED8AB0B97AC4F9AE02.roa
File: FBCCC2868FD311ED8AB0B97AC4F9AE02.roa (raw, json)
Hash identifier: X4UaU+y+lEhLsHLkSSKwPJMEU4Dfd7BhnSxl9eXIILM=
Subject key identifier: A7:3D:60:C3:3C:E4:D3:EC:17:AC:5F:AA:7E:E3:29:49:F6:98:BB:03
Certificate issuer: /CN=A91BDA0E/serialNumber=18B879EB8186F34920686ACE8BDB8F3C143C8501
Certificate serial: 1A99
Authority key identifier: 18:B8:79:EB:81:86:F3:49:20:68:6A:CE:8B:DB:8F:3C:14:3C:85:01
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GLh564GG80kgaGrOi9uPPBQ8hQE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BDA0E/BF94AB6C0AD711E7AD6FE621C4F9AE02/FBCCC2868FD311ED8AB0B97AC4F9AE02.roa
Signing time: Wed 06 Dec 2023 16:43:51 +0000
ROA not before: Wed 06 Dec 2023 16:43:51 +0000
ROA not after: Fri 31 Jan 2025 00:00:00 +0000
asID: 64098
IP address blocks: 59.153.8.0/22 maxlen: 22
59.153.8.0/24 maxlen: 25
59.153.9.0/24 maxlen: 24
59.153.10.0/24 maxlen: 24
59.153.11.0/24 maxlen: 24
103.197.232.0/22 maxlen: 22
103.197.232.0/24 maxlen: 24
103.197.233.0/24 maxlen: 24
103.197.234.0/24 maxlen: 24
103.197.235.0/24 maxlen: 24
103.197.235.128/25 maxlen: 25
2403:780::/32 maxlen: 32
2403:780::/35 maxlen: 40
2403:780:f::/48 maxlen: 48
2403:780:2000::/35 maxlen: 40
2403:780:4000::/35 maxlen: 40
2403:780:6000::/35 maxlen: 40
2403:780:8000::/35 maxlen: 40
2403:780:a000::/35 maxlen: 40
2403:780:c000::/35 maxlen: 40
2403:780:e000::/35 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6809 (0x1a99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDA0E/serialNumber=18B879EB8186F34920686ACE8BDB8F3C143C8501
Validity
Not Before: Dec 6 16:43:51 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=6570a4c7-bbaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3b:b3:5e:72:2b:e6:60:9a:71:e8:c3:04:ce:
75:2f:8e:7a:32:1d:d4:ba:ed:45:e9:74:93:48:ad:
47:43:9a:cf:8f:96:75:e9:ec:2b:31:91:99:2b:30:
ec:bb:35:e5:76:71:6b:b6:22:af:52:4c:24:21:dd:
b4:4c:e7:21:8f:f3:9b:83:c1:0e:52:41:7b:f4:63:
70:cb:ea:e9:35:ee:22:ec:48:c6:c9:b5:e0:00:52:
92:6b:e5:09:dc:c3:31:30:cf:5d:ea:ee:e2:97:12:
94:f7:f2:92:11:a0:ed:8f:a7:87:c1:f1:da:66:4d:
2e:2b:da:e5:e8:d2:c6:97:b7:4c:ae:5a:dc:8a:6e:
7b:71:38:db:0f:af:6a:ed:08:a0:5d:e0:e7:8f:07:
b4:d5:63:ba:91:49:35:f5:26:e1:92:d8:cd:2f:26:
2b:c4:a1:04:78:ea:8a:ac:ee:aa:f1:49:db:e4:73:
54:a1:28:0e:1d:db:2f:6f:86:78:0a:f9:17:a1:82:
05:c9:f0:df:76:6d:4b:c2:27:4e:57:c5:ac:cc:f5:
55:07:af:1a:d3:3d:4e:ac:80:b4:3e:2b:c1:d0:2a:
be:d3:a9:47:bb:1b:57:28:ba:73:64:7b:c0:67:47:
d4:cc:55:de:90:fa:7b:a3:0a:95:0d:b3:70:62:46:
c9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:3D:60:C3:3C:E4:D3:EC:17:AC:5F:AA:7E:E3:29:49:F6:98:BB:03
X509v3 Authority Key Identifier:
keyid:18:B8:79:EB:81:86:F3:49:20:68:6A:CE:8B:DB:8F:3C:14:3C:85:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BDA0E/BF94AB6C0AD711E7AD6FE621C4F9AE02/GLh564GG80kgaGrOi9uPPBQ8hQE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GLh564GG80kgaGrOi9uPPBQ8hQE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDA0E/BF94AB6C0AD711E7AD6FE621C4F9AE02/FBCCC2868FD311ED8AB0B97AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
59.153.8.0/22
103.197.232.0/22
IPv6:
2403:780::/32
Signature Algorithm: sha256WithRSAEncryption
06:ff:5a:2a:cf:75:66:37:09:c8:f8:f6:a6:6e:23:9a:a7:50:
41:93:7f:6f:4d:dc:f6:68:4f:47:93:58:d6:45:30:b4:fd:0f:
5a:ac:d1:8c:33:eb:52:26:b3:dd:da:b5:32:0d:b7:c4:81:24:
a9:e5:b1:ef:22:db:ef:d6:09:6a:cd:52:ff:37:ef:e3:bd:94:
8c:d4:13:c5:48:a4:42:f2:15:b6:fb:0d:ac:51:41:15:34:f9:
fc:ad:c7:6e:2f:0b:b2:2e:65:fe:6d:c4:b4:c4:93:34:c5:2f:
32:a9:0b:65:c1:df:88:cf:44:46:1d:4c:73:2d:6c:f5:ae:69:
55:e4:14:a2:d7:24:45:a7:1b:86:d6:86:2b:d6:be:e6:af:dc:
12:76:a7:11:4a:8b:27:53:b1:64:a9:9a:a9:3a:9d:da:ee:eb:
b5:c9:7d:97:a9:b0:10:f4:26:80:6d:5a:06:2b:9e:15:8e:50:
d2:ef:10:f9:de:16:6a:6f:b3:47:52:0d:0d:ad:cb:a6:69:80:
54:25:d2:22:6b:0b:32:f1:47:47:c0:31:e1:80:a7:ab:6d:4c:
31:cf:db:2f:07:33:e4:c1:ce:ce:d3:3d:7b:98:ca:77:1e:6d:
47:8a:00:96:73:a1:73:d8:7e:50:3d:82:bb:50:bf:8b:6b:0d:
9e:95:9a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:39 2024 by rpki-client on console-fra.rpki-client.org