Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C87C6/CCF6E2BAF24211EA98A4A75CC4F9AE02/AAE88920F24311EAA9BBC15FC4F9AE02.roa
File: AAE88920F24311EAA9BBC15FC4F9AE02.roa (raw, json)
Hash identifier: +R5gXIOq2hmsBUMIRhxLZGO8a95SExMSUK/V9BLxq0M=
Subject key identifier: 3B:AA:55:7B:CF:11:F2:53:D1:0C:14:2D:2B:61:15:F3:4F:A9:78:75
Certificate issuer: /CN=A91C87C6/serialNumber=41B6C0D55B5D3D3DE206417905D57FD6A56BEB95
Certificate serial: 0661
Authority key identifier: 41:B6:C0:D5:5B:5D:3D:3D:E2:06:41:79:05:D5:7F:D6:A5:6B:EB:95
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QbbA1VtdPT3iBkF5BdV_1qVr65U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C87C6/CCF6E2BAF24211EA98A4A75CC4F9AE02/AAE88920F24311EAA9BBC15FC4F9AE02.roa
Signing time: Fri 09 Jun 2023 00:05:38 +0000
ROA not before: Fri 09 Jun 2023 00:05:38 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 133461
IP address blocks: 103.231.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1633 (0x661)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C87C6/serialNumber=41B6C0D55B5D3D3DE206417905D57FD6A56BEB95
Validity
Not Before: Jun 9 00:05:38 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=64826cd2-3109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:34:87:d5:09:51:90:b9:80:94:46:44:cb:e3:
ea:7d:e6:60:41:7b:f7:a2:fd:ff:32:87:29:bf:c4:
d0:c7:35:39:62:02:b7:e2:d1:dc:55:ac:b3:59:27:
ad:b2:80:f0:e7:2f:50:c5:3c:36:24:e3:db:86:77:
96:29:5b:e0:65:d5:1b:81:5f:f7:fb:9e:33:cf:93:
91:8d:1e:17:0d:0c:aa:de:9b:8b:49:50:06:91:31:
a3:a2:92:0d:47:a6:be:9b:f7:0a:26:82:6e:16:4a:
c2:fa:0b:3b:ec:23:c9:17:29:e8:0d:90:a4:3d:ab:
68:4e:72:4d:75:e5:b1:9d:15:fd:c2:62:3a:de:3a:
85:1c:b0:ef:95:84:6b:63:9f:8f:9c:2d:d3:c5:bf:
6e:7b:e5:42:42:db:e1:23:5e:d2:1f:53:d3:3a:93:
71:fd:45:14:22:d1:91:aa:6f:dd:88:87:55:6d:0c:
3a:d0:49:66:46:ca:39:e5:85:0c:ad:9a:bc:86:9b:
6f:39:b3:ac:33:a5:ed:14:05:6f:a4:09:8d:47:bf:
bf:52:10:e4:82:6a:69:eb:bd:66:34:a7:50:99:32:
4f:74:5e:69:40:c9:81:72:94:1a:21:45:9f:fa:c0:
90:91:fa:03:d0:37:e5:6e:05:85:87:80:67:e2:3e:
a9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:AA:55:7B:CF:11:F2:53:D1:0C:14:2D:2B:61:15:F3:4F:A9:78:75
X509v3 Authority Key Identifier:
keyid:41:B6:C0:D5:5B:5D:3D:3D:E2:06:41:79:05:D5:7F:D6:A5:6B:EB:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C87C6/CCF6E2BAF24211EA98A4A75CC4F9AE02/QbbA1VtdPT3iBkF5BdV_1qVr65U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QbbA1VtdPT3iBkF5BdV_1qVr65U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C87C6/CCF6E2BAF24211EA98A4A75CC4F9AE02/AAE88920F24311EAA9BBC15FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.231.224.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:5d:27:67:4a:28:80:cd:1f:ec:8d:4a:35:d8:77:01:33:77:
9a:cc:80:43:de:32:33:c8:e1:db:5f:0c:83:7d:95:d8:76:ea:
d6:23:bf:ca:b2:01:10:4d:20:ea:fb:16:59:98:48:a5:72:8c:
5f:df:7d:98:c8:f3:88:05:56:50:73:96:5f:1b:5c:6c:e9:c5:
34:ec:d1:df:1f:aa:3c:1b:d2:30:ff:95:85:24:74:d7:52:15:
8f:0c:f2:26:de:ed:8d:cc:78:3f:90:1d:d7:58:09:50:25:88:
ff:f3:7e:ae:87:04:35:8a:fe:d2:36:30:44:1b:23:29:dc:27:
c8:91:48:c0:ad:84:b1:76:c6:65:38:be:f8:85:0d:8f:fa:3c:
6c:5f:aa:9b:3a:22:49:de:fe:6f:62:8b:5f:4c:2b:c9:70:9f:
38:19:ea:c5:47:c9:f5:9c:50:50:6e:33:6c:42:14:ea:f2:d2:
8e:e2:f1:04:96:63:b6:89:3b:9d:a4:f8:7b:a8:92:d0:71:3e:
51:cc:62:7d:1b:b8:66:ed:ac:9e:55:37:60:b2:9e:20:05:05:
ab:b0:99:41:82:49:58:72:7b:b8:13:2c:c5:25:62:f1:e2:f2:
06:6c:15:13:78:07:fd:7a:bf:2f:83:03:73:ac:dc:74:84:f9:
cb:1b:e5:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 4 02:54:18 2024 by rpki-client on console-ams.rpki-client.org