Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDBFB/D67779541A6211EDBA67DE62C4F9AE02/EE91A0301A6411EDA3617163C4F9AE02.roa
File: EE91A0301A6411EDA3617163C4F9AE02.roa (raw, json)
Hash identifier: Krx3F0vakvwGMXTyg6rmqO4QouZxWlxe5B2+7Y6QZtY=
Subject key identifier: F8:CB:4D:2D:8F:A4:9F:39:78:93:B6:1A:D2:EE:67:46:3A:2E:8A:DF
Certificate issuer: /CN=A91CDBFB/serialNumber=C9C735B2D5685ACC603A0604D86B77513899053C
Certificate serial: B8
Authority key identifier: C9:C7:35:B2:D5:68:5A:CC:60:3A:06:04:D8:6B:77:51:38:99:05:3C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycc1stVoWsxgOgYE2Gt3UTiZBTw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CDBFB/D67779541A6211EDBA67DE62C4F9AE02/EE91A0301A6411EDA3617163C4F9AE02.roa
Signing time: Wed 01 Mar 2023 06:55:00 +0000
ROA not before: Wed 01 Mar 2023 06:55:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 103.160.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 184 (0xb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CDBFB/serialNumber=C9C735B2D5685ACC603A0604D86B77513899053C
Validity
Not Before: Mar 1 06:55:00 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63fef6c3-4f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:20:71:7f:ac:7e:55:68:5b:4f:cd:19:fb:d9:
a8:18:ab:cf:46:1d:d0:cd:3a:cd:2a:af:89:e5:6b:
61:d3:0f:5d:0d:69:4e:0f:59:c3:9b:45:70:c9:21:
c6:e0:a6:90:58:d1:8d:01:7d:28:a4:57:a5:ff:07:
0b:33:8e:84:a4:1c:06:a2:c0:87:e6:eb:22:78:b2:
81:80:2e:88:de:56:91:a7:4f:7c:42:fd:e6:d0:68:
e3:71:43:ce:9c:02:d4:b8:43:5d:1d:ce:b4:cf:bf:
8d:74:cf:b1:88:86:65:c9:be:ed:53:b1:fc:bf:14:
14:f7:bf:8f:9e:1d:e5:1d:83:01:63:a8:ac:97:b4:
7a:c2:4e:6f:c0:30:0c:78:7a:0a:19:ea:96:a2:ce:
36:28:e5:fe:5c:33:77:13:a6:55:62:2f:e5:96:fc:
24:6e:ae:83:8c:5a:27:f6:f3:46:e4:23:3a:16:17:
e0:4e:d1:2c:00:9f:0b:00:68:ae:1c:99:f6:4c:70:
c2:a0:37:5a:e5:14:4e:4e:50:e3:7c:93:f3:23:a6:
29:26:20:5d:78:0d:19:66:56:e3:3b:a5:af:4c:ed:
cf:b8:6f:68:32:c2:38:f8:f2:e7:a8:b8:15:df:e4:
74:93:23:f7:b8:e1:b9:3c:22:ea:40:66:50:38:18:
cf:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:CB:4D:2D:8F:A4:9F:39:78:93:B6:1A:D2:EE:67:46:3A:2E:8A:DF
X509v3 Authority Key Identifier:
keyid:C9:C7:35:B2:D5:68:5A:CC:60:3A:06:04:D8:6B:77:51:38:99:05:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CDBFB/D67779541A6211EDBA67DE62C4F9AE02/ycc1stVoWsxgOgYE2Gt3UTiZBTw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycc1stVoWsxgOgYE2Gt3UTiZBTw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDBFB/D67779541A6211EDBA67DE62C4F9AE02/EE91A0301A6411EDA3617163C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.160.11.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:5f:9f:6c:43:16:1a:a8:b5:62:51:1b:3f:c5:43:19:a0:34:
ce:87:92:97:d3:0e:8b:78:42:b2:09:18:0d:ef:4d:e0:24:7a:
39:6b:0e:82:42:1b:08:05:db:79:23:a9:8f:83:ea:83:ca:01:
8d:b7:1c:48:72:fc:cd:73:15:42:af:b8:e4:65:34:23:88:b6:
61:f7:10:b4:ba:f4:66:de:96:f1:d4:ef:c0:9a:82:30:4a:fa:
bb:84:4c:7b:d5:fb:b7:58:32:ca:49:4a:0d:47:8b:e0:02:2d:
bf:04:3f:6d:a6:17:96:1d:ae:ca:5d:54:ac:b5:81:46:d7:d2:
2c:65:eb:d3:1d:2c:7b:2b:1a:8b:02:92:ef:75:ab:01:66:bc:
13:64:00:97:cd:e4:33:48:ff:3d:c4:d2:4c:4c:bf:08:b2:a0:
48:6c:10:d7:d0:62:83:d2:84:70:e5:4f:9d:30:5f:a5:48:4d:
a5:d4:b4:b8:f7:c9:c2:d8:d4:ef:f1:c6:26:08:ef:b4:e9:3d:
53:b1:ea:1c:77:26:87:6f:69:68:b1:d4:bf:aa:42:e4:b0:50:
de:db:ce:41:c9:40:00:a3:76:4e:58:da:af:03:c3:6e:b9:c7:
63:07:d4:5f:51:f3:f1:54:0f:0f:78:4f:4d:97:e7:74:59:41:
fd:60:19:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:08 2023 by rpki-client on console-fra.rpki-client.org