Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7D3C/A043F856092311EA8D8C2F6CC4F9AE02/6E7069F6E09D11EB8CE28858C4F9AE02.roa
File: 6E7069F6E09D11EB8CE28858C4F9AE02.roa (raw, json)
Hash identifier: l2vVphkX740n+gTs/XstyZ9727QKKHy7aQ1dAfkaem8=
Subject key identifier: 43:AC:75:28:A1:3A:55:13:57:2E:D5:44:46:2F:4A:BC:2F:C9:AC:55
Certificate issuer: /CN=A91C7D3C/serialNumber=FFADB56806FB93B16C5EC32B81E56E99DCC3C9A3
Certificate serial: 0726
Authority key identifier: FF:AD:B5:68:06:FB:93:B1:6C:5E:C3:2B:81:E5:6E:99:DC:C3:C9:A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_621aAb7k7FsXsMrgeVumdzDyaM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7D3C/A043F856092311EA8D8C2F6CC4F9AE02/6E7069F6E09D11EB8CE28858C4F9AE02.roa
Signing time: Thu 19 Aug 2021 08:35:51 +0000
ROA not before: Thu 19 Aug 2021 08:35:51 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 138346
IP address blocks: 103.88.232.0/24 maxlen: 24
103.88.233.0/24 maxlen: 24
103.88.234.0/24 maxlen: 24
103.88.235.0/24 maxlen: 24
116.204.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1830 (0x726)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7D3C/serialNumber=FFADB56806FB93B16C5EC32B81E56E99DCC3C9A3
Validity
Not Before: Aug 19 08:35:51 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=611e17e7-3ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:73:ab:76:c5:0f:8d:d3:18:b2:50:3c:01:21:
60:d9:c9:d6:bd:b3:89:a1:24:5e:ba:79:dd:28:1a:
6e:23:a9:1c:29:01:fb:ea:a9:a1:69:65:56:dc:e8:
74:f9:2c:1b:a6:e5:35:25:27:bf:49:12:d7:ac:2b:
c9:30:a4:4d:b5:a1:35:95:3e:fe:07:5a:04:2b:eb:
04:2b:0f:1a:b5:db:cd:c8:0f:9f:f0:d5:4f:92:1e:
99:ea:4c:7a:3c:8c:64:2d:23:34:82:0d:e8:d9:c3:
c1:79:48:f1:7c:2b:a8:5a:e7:9b:f9:5d:d4:0a:53:
26:2d:af:bb:7a:34:bd:61:c3:73:9c:37:8a:e7:b4:
e7:96:a7:ff:ec:f1:87:e4:14:fc:14:c4:bb:67:c8:
90:6f:24:54:29:d1:0e:b6:2b:e1:91:e6:7e:0f:4a:
db:98:7d:d3:13:df:6a:3d:c0:b7:25:36:ba:87:1e:
96:65:5a:5a:7d:86:fc:de:ff:9e:1b:df:e5:b0:23:
ee:a7:0c:5b:c2:9e:cc:ef:26:63:f6:3e:25:03:5c:
22:57:4b:57:2c:e3:be:8d:93:04:e8:6e:2e:b6:57:
c7:16:18:39:49:5d:eb:67:9b:ae:d7:cc:a4:a6:51:
e9:c5:98:50:5a:27:27:63:b5:ae:97:2e:7c:f2:0d:
93:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:AC:75:28:A1:3A:55:13:57:2E:D5:44:46:2F:4A:BC:2F:C9:AC:55
X509v3 Authority Key Identifier:
keyid:FF:AD:B5:68:06:FB:93:B1:6C:5E:C3:2B:81:E5:6E:99:DC:C3:C9:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7D3C/A043F856092311EA8D8C2F6CC4F9AE02/_621aAb7k7FsXsMrgeVumdzDyaM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_621aAb7k7FsXsMrgeVumdzDyaM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7D3C/A043F856092311EA8D8C2F6CC4F9AE02/6E7069F6E09D11EB8CE28858C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.88.232.0/22
116.204.252.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:f5:ff:6f:ed:1a:5e:5a:2b:20:85:f2:ec:77:8e:cd:31:30:
c6:bd:e9:e9:52:d7:94:14:e4:8e:45:17:29:b1:93:01:62:cd:
70:ff:1d:4b:d3:da:90:60:d8:01:7a:70:cf:d6:cd:ad:9c:f8:
cb:f9:ef:f2:37:07:e6:74:66:38:52:40:ea:6f:07:b4:bd:5b:
ea:53:c7:01:d6:65:1c:4f:42:1d:73:60:d4:5d:66:45:8b:0e:
fe:00:b0:d4:e9:c8:3e:43:9a:6f:e7:a7:6d:27:9c:d4:84:59:
85:7b:5b:6a:77:02:22:7d:cc:ba:e0:d9:db:b4:4f:9a:0c:ad:
5e:85:2b:3f:7c:9e:b7:6a:0f:f2:30:09:64:6b:67:c1:2b:86:
71:bf:ce:61:2a:5e:97:6c:7b:41:95:19:7c:75:dc:53:d9:9a:
9f:ae:d3:6b:a0:78:04:35:88:c0:b0:5d:33:5b:60:0f:b3:c1:
c8:3b:d2:e0:1f:29:03:19:88:b0:d1:b2:69:d6:5c:78:1d:be:
1a:2e:81:6e:62:11:21:e5:b5:84:fa:cb:9a:86:57:f6:c3:4b:
f4:b6:a1:84:77:5b:32:ee:e7:68:b4:6c:82:2d:33:e3:98:13:
d0:72:b9:14:4b:e6:bc:84:87:0a:4c:7b:40:e3:19:44:95:bd:
06:c5:37:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:25 2024 by rpki-client on console-ams.rpki-client.org