Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3418/3EB31A68F7EC11EBBC942A38C4F9AE02/55636B70F7EF11EBBCB1FF81C4F9AE02.roa
File: 55636B70F7EF11EBBCB1FF81C4F9AE02.roa (raw, json)
Hash identifier: f/VuCjLlOVjr59efL4Y4rH6dxKJaRR8pZ0OA1pX9q80=
Subject key identifier: 66:3D:CB:8C:16:C1:F9:77:C7:A6:D5:99:49:A6:92:64:04:71:FB:7B
Certificate issuer: /CN=A91C3418/serialNumber=C5FF85B8047AB29224D7ECA5D855B05D3630117C
Certificate serial: D9
Authority key identifier: C5:FF:85:B8:04:7A:B2:92:24:D7:EC:A5:D8:55:B0:5D:36:30:11:7C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xf-FuAR6spIk1-yl2FWwXTYwEXw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C3418/3EB31A68F7EC11EBBC942A38C4F9AE02/55636B70F7EF11EBBCB1FF81C4F9AE02.roa
Signing time: Tue 23 Nov 2021 15:31:22 +0000
ROA not before: Tue 23 Nov 2021 15:31:22 +0000
ROA not after: Fri 30 Dec 2022 00:00:00 +0000
asID: 132908
IP address blocks: 103.74.240.0/22 maxlen: 22
103.74.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 217 (0xd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C3418/serialNumber=C5FF85B8047AB29224D7ECA5D855B05D3630117C
Validity
Not Before: Nov 23 15:31:22 2021 GMT
Not After : Dec 30 00:00:00 2022 GMT
Subject: CN=619d094a-149c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:88:5b:cd:e7:65:92:c0:8c:7e:ff:5d:a1:5c:
3f:c7:46:e4:0c:ea:38:88:0c:f4:84:c2:7a:82:0c:
ef:d0:16:3e:12:03:b1:8b:a5:ab:22:15:17:e8:6c:
e4:09:82:02:b8:4a:d1:80:78:0b:80:a9:99:34:99:
43:ed:4d:73:97:c3:d6:b8:31:53:ec:5e:96:3f:99:
16:65:da:ef:bd:3a:98:c8:01:b3:08:13:dd:71:44:
47:4a:98:28:43:e8:5d:98:8a:59:f8:e7:83:4d:9a:
4f:6e:4e:aa:c6:96:ac:55:4f:bc:62:94:29:03:3a:
71:fc:49:c3:44:c5:72:ee:f3:28:72:35:18:a1:da:
b1:9c:90:3a:13:ea:62:6b:7d:c1:19:fc:4c:b5:f7:
83:9c:28:e3:33:08:44:63:42:90:e3:38:09:17:ef:
81:b0:b0:9b:1f:34:4d:e5:9c:52:29:86:b3:cc:a2:
0c:3b:7f:85:e8:b9:2f:42:02:e7:f7:c1:46:5f:3e:
3f:0d:1c:a8:ad:64:77:7e:15:4e:50:f4:2d:36:a7:
a0:68:c2:ae:35:63:86:56:b0:7b:a0:25:f7:f0:9e:
bd:7a:bb:8f:f4:f6:5c:b9:23:1c:c1:43:55:f4:ad:
b0:ed:74:20:df:c8:ad:e9:3c:38:e5:33:c8:e1:2e:
b0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:3D:CB:8C:16:C1:F9:77:C7:A6:D5:99:49:A6:92:64:04:71:FB:7B
X509v3 Authority Key Identifier:
keyid:C5:FF:85:B8:04:7A:B2:92:24:D7:EC:A5:D8:55:B0:5D:36:30:11:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C3418/3EB31A68F7EC11EBBC942A38C4F9AE02/xf-FuAR6spIk1-yl2FWwXTYwEXw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xf-FuAR6spIk1-yl2FWwXTYwEXw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3418/3EB31A68F7EC11EBBC942A38C4F9AE02/55636B70F7EF11EBBCB1FF81C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.74.240.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:99:94:93:b1:9c:20:42:e3:8a:c1:2e:f4:70:e1:b6:81:25:
1d:af:36:20:bb:9f:ed:99:96:7d:7b:74:6f:c7:4b:90:6b:d1:
58:ea:05:00:9f:eb:39:86:a1:02:3c:49:5f:61:57:a0:9a:0c:
d4:9e:c6:86:1e:e0:bf:61:a4:90:46:a7:e7:db:e0:5c:e9:93:
7d:75:61:cb:c3:06:dc:e3:cb:2b:ce:fd:1f:bb:15:6d:56:ca:
89:b1:59:a5:71:90:80:05:e5:b2:35:93:37:76:a0:d4:f8:ee:
b8:51:1d:96:c6:c2:b5:c8:cc:4c:d6:bd:50:fa:d9:ff:79:18:
e4:fb:09:f0:22:10:1a:9e:2a:7b:b1:15:4c:8f:ad:5c:92:92:
5b:f9:b6:04:9b:5d:60:67:f8:11:da:d2:30:b3:15:0d:b6:96:
eb:66:5b:5f:d1:2a:92:8a:5c:c5:84:54:8f:0f:2d:7d:8a:2a:
80:7f:cf:44:ba:ec:3c:7d:09:0c:c4:3c:cb:fe:f0:29:9d:af:
4d:e9:bf:f0:99:b2:aa:4e:0c:55:bc:12:90:2a:28:2e:5c:e8:
f9:04:b5:4c:ac:3b:be:cc:52:2d:9f:cd:cb:b6:39:4e:79:f2:
a2:31:6e:d8:43:b5:a0:f1:48:32:de:a3:6c:11:5d:d7:17:5c:
ae:93:38:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:24 2024 by rpki-client on console-ams.rpki-client.org