Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3418/3EB31A68F7EC11EBBC942A38C4F9AE02/560E472AF7EF11EBBCB1FF81C4F9AE02.roa
File: 560E472AF7EF11EBBCB1FF81C4F9AE02.roa (raw, json)
Hash identifier: JXP06kQ+x4LCqmnk4j8LmYAE9xxKo+LQakpKhrDH5AY=
Subject key identifier: B8:3B:1B:A5:30:8E:55:CE:61:B0:BF:24:1D:D8:52:66:69:0A:51:DD
Certificate issuer: /CN=A91C3418/serialNumber=C5FF85B8047AB29224D7ECA5D855B05D3630117C
Certificate serial: DA
Authority key identifier: C5:FF:85:B8:04:7A:B2:92:24:D7:EC:A5:D8:55:B0:5D:36:30:11:7C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xf-FuAR6spIk1-yl2FWwXTYwEXw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C3418/3EB31A68F7EC11EBBC942A38C4F9AE02/560E472AF7EF11EBBCB1FF81C4F9AE02.roa
Signing time: Tue 23 Nov 2021 15:31:23 +0000
ROA not before: Tue 23 Nov 2021 15:31:23 +0000
ROA not after: Fri 30 Dec 2022 00:00:00 +0000
asID: 63922
IP address blocks: 103.74.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 218 (0xda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C3418/serialNumber=C5FF85B8047AB29224D7ECA5D855B05D3630117C
Validity
Not Before: Nov 23 15:31:23 2021 GMT
Not After : Dec 30 00:00:00 2022 GMT
Subject: CN=619d094b-5c9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:07:f9:2a:56:7b:de:e4:1d:8e:78:1b:20:ea:
3e:59:d9:a0:32:ff:ce:36:f2:36:fc:44:9d:93:e6:
0c:3a:64:10:96:9d:3f:96:04:7e:3f:35:63:50:a5:
80:77:43:cd:dd:cd:2c:46:3b:f8:be:43:ec:b4:3e:
c5:d9:6a:4e:41:78:6f:7c:c7:bd:6f:70:87:68:a0:
47:61:78:d0:46:aa:26:b3:d6:ae:1c:9e:bc:82:57:
3b:db:7c:8f:73:fe:2e:f8:8d:63:ac:c5:a8:b0:32:
2c:60:6c:01:51:e2:83:df:a6:32:76:70:fe:f0:2c:
e0:f4:30:5a:2f:ba:90:2a:e1:d3:8a:81:08:88:ba:
4f:fa:c4:a0:39:01:9f:71:31:4b:a1:8d:05:8d:95:
21:6c:12:3c:01:45:a3:47:ed:00:d8:3b:1c:57:d9:
59:30:e9:9d:9e:23:24:03:0c:fc:f8:d7:78:65:62:
95:04:a7:00:86:00:6d:a7:7c:68:60:a8:0a:ad:9a:
69:51:a8:3f:5a:3e:ba:08:65:22:b0:2e:21:dc:bc:
99:b0:63:43:ca:59:76:fe:38:98:8e:ac:db:57:cb:
e2:d1:a9:dd:a6:6d:94:a3:a7:9d:fc:8b:17:df:9c:
6b:6c:9d:0e:7c:71:d2:e6:6c:44:13:5a:d2:95:cc:
44:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:3B:1B:A5:30:8E:55:CE:61:B0:BF:24:1D:D8:52:66:69:0A:51:DD
X509v3 Authority Key Identifier:
keyid:C5:FF:85:B8:04:7A:B2:92:24:D7:EC:A5:D8:55:B0:5D:36:30:11:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C3418/3EB31A68F7EC11EBBC942A38C4F9AE02/xf-FuAR6spIk1-yl2FWwXTYwEXw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xf-FuAR6spIk1-yl2FWwXTYwEXw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3418/3EB31A68F7EC11EBBC942A38C4F9AE02/560E472AF7EF11EBBCB1FF81C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.74.240.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:04:9b:3a:0f:25:db:30:3b:66:ab:8d:39:6f:b1:46:2d:6e:
78:43:e6:23:a3:b6:7b:3b:5a:a0:b6:87:50:cc:a1:f7:cb:9f:
d5:2b:8c:38:78:d3:d9:b6:d1:8d:e7:1f:e5:56:1c:11:2b:b1:
05:5e:c2:ec:8f:a2:86:93:e1:e2:5f:3b:ac:e8:43:fa:3c:e3:
73:de:22:d8:57:df:88:4d:ce:ee:47:48:b3:12:08:3c:53:f4:
9c:1b:d4:c6:77:86:55:3d:75:0d:b7:cc:dc:4b:e2:06:b7:26:
93:65:62:12:b4:40:1a:0b:1b:6d:35:7a:66:0d:80:f9:43:36:
29:87:b4:a1:0a:8f:98:f8:6e:c8:5c:b2:00:db:c4:6c:36:d2:
22:e2:02:5f:07:6a:95:75:93:bf:8d:38:17:e8:05:ad:0b:3b:
f7:04:37:9a:88:79:f3:ee:2d:b9:99:83:8e:8b:96:c3:f9:33:
b0:57:b9:5f:c5:4a:9b:aa:de:35:15:15:3d:3c:47:68:ea:b0:
49:b4:3e:df:66:75:c8:fa:66:6d:e1:59:62:56:1e:f3:e5:fd:
ab:25:ad:4f:6a:51:54:d4:0a:f4:fb:e7:bb:0f:80:44:53:09:
f6:77:54:96:4e:d3:50:b0:4e:8c:d3:be:c2:a1:36:f1:8e:d2:
71:9b:0d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:39 2024 by rpki-client on console-fra.rpki-client.org