Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAAF1/047AC768C1DE11EB9AD6E44BC4F9AE02/6F434B5879CD11EDB348325EC4F9AE02.roa
File: 6F434B5879CD11EDB348325EC4F9AE02.roa (raw, json)
Hash identifier: D5qMylC+23mJVnOp6d4IYOPURvZPnh1w/3CJbu3a00c=
Subject key identifier: 4E:C5:CE:06:E4:17:27:BF:90:D1:7C:61:63:7C:A3:3E:0B:AA:37:EA
Certificate issuer: /CN=A91CAAF1/serialNumber=DFA0AB749D94F264DC4CF6DAC8ABC32A6B626433
Certificate serial: 03F0
Authority key identifier: DF:A0:AB:74:9D:94:F2:64:DC:4C:F6:DA:C8:AB:C3:2A:6B:62:64:33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/36CrdJ2U8mTcTPbayKvDKmtiZDM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CAAF1/047AC768C1DE11EB9AD6E44BC4F9AE02/6F434B5879CD11EDB348325EC4F9AE02.roa
Signing time: Mon 12 Dec 2022 03:31:16 +0000
ROA not before: Mon 12 Dec 2022 03:31:16 +0000
ROA not after: Thu 02 Mar 2023 00:00:00 +0000
asID: 137549
IP address blocks: 103.80.120.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1008 (0x3f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CAAF1/serialNumber=DFA0AB749D94F264DC4CF6DAC8ABC32A6B626433
Validity
Not Before: Dec 12 03:31:16 2022 GMT
Not After : Mar 2 00:00:00 2023 GMT
Subject: CN=6396a084-2f7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0a:a8:06:a2:54:c9:b2:82:3b:16:ed:1a:83:
68:c8:3a:d5:5a:54:fd:3d:d2:a1:4c:b5:d8:18:b1:
a0:88:d8:2f:c5:90:de:70:a0:d5:14:b6:e1:23:50:
1a:9a:fb:fc:ed:b0:8d:53:50:de:e6:b4:a9:20:ff:
50:a0:0f:8c:fd:d1:38:d4:34:e0:e9:56:03:8d:e8:
b4:5c:ca:80:d7:45:a6:95:f4:38:2e:b0:24:df:8c:
ef:4e:f7:16:c3:7e:45:00:0d:25:eb:dc:69:ca:78:
a5:73:f6:f0:3b:18:83:29:70:2f:e7:c9:79:20:26:
c1:dd:31:14:ee:47:70:04:e5:1b:72:99:50:53:ee:
81:4a:4f:21:6d:b5:99:4a:96:c4:ea:61:e3:9f:fb:
66:6f:55:66:bb:ae:6e:c2:4f:e8:16:f3:bc:6f:4d:
1d:47:de:20:b7:5e:50:6f:89:b6:46:c1:71:1c:6a:
4d:d9:23:8f:61:02:3d:07:c0:f8:8e:57:e8:33:db:
bb:96:33:df:bd:94:c5:4f:e6:a8:5e:2a:71:64:81:
8f:48:ba:b3:49:1c:32:f2:94:5c:5f:ab:be:c0:19:
95:a8:fb:36:2a:4d:e1:3f:f8:cb:e0:d2:22:c8:db:
41:12:45:e6:44:73:b4:e6:89:2c:ec:f3:74:61:28:
1b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:C5:CE:06:E4:17:27:BF:90:D1:7C:61:63:7C:A3:3E:0B:AA:37:EA
X509v3 Authority Key Identifier:
keyid:DF:A0:AB:74:9D:94:F2:64:DC:4C:F6:DA:C8:AB:C3:2A:6B:62:64:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CAAF1/047AC768C1DE11EB9AD6E44BC4F9AE02/36CrdJ2U8mTcTPbayKvDKmtiZDM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/36CrdJ2U8mTcTPbayKvDKmtiZDM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAAF1/047AC768C1DE11EB9AD6E44BC4F9AE02/6F434B5879CD11EDB348325EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.80.120.0/22
Signature Algorithm: sha256WithRSAEncryption
c0:58:12:5a:66:2e:9d:6e:1f:8a:05:38:70:11:52:e7:f3:43:
58:72:8f:b8:b6:7b:ed:d8:60:a3:4d:da:f0:b7:e0:a9:dc:3e:
61:c0:a8:5f:0d:21:65:e3:8c:38:e8:a7:b4:b8:b0:84:c5:a1:
d3:13:65:e7:b5:9f:24:d9:88:d7:85:77:e2:b2:66:8f:ce:bc:
46:13:b2:66:34:cc:a9:d8:98:5a:c4:03:b7:e5:20:a9:63:3b:
d7:18:2e:06:de:d0:a8:1f:62:c5:00:d7:b5:ff:05:e3:fe:64:
f0:c6:58:e8:99:df:10:8e:f7:72:bf:42:08:96:1c:2a:83:7a:
57:6d:07:98:53:7b:e6:57:6a:1a:95:1f:ee:b2:f1:a4:2f:59:
8f:d1:01:5f:8d:27:53:55:6f:b5:b4:e1:cd:16:87:a3:20:36:
52:4d:fe:84:ae:5b:7b:bf:55:ec:d1:78:62:a2:14:7f:06:4c:
9a:c6:40:6a:a7:11:19:44:7a:2b:1b:88:e5:89:fd:c8:bb:a0:
d8:c2:47:23:20:c8:a9:f1:64:df:11:33:ae:22:70:d7:1e:fe:
ca:94:1f:7d:98:e3:e8:8d:64:24:5f:fe:be:3d:95:d4:38:2e:
40:a1:92:3e:fe:16:92:9f:e9:b3:42:f8:62:04:6d:d5:ab:36:
f3:48:bf:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:40 2024 by rpki-client on console-fra.rpki-client.org