Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF2B3/E7C2CB7E668B11EA90FC0422C4F9AE02/DF9BF84C757E11EAA923CA1EC4F9AE02.roa
File: DF9BF84C757E11EAA923CA1EC4F9AE02.roa (raw, json)
Hash identifier: FVqzCvTr/GIYm+M58RJBjrO1UoxT3jiC5kTffvBwPO8=
Subject key identifier: 75:AD:63:5F:87:0E:E4:FC:6E:E9:29:D7:11:66:0A:C9:8F:E1:A8:15
Certificate issuer: /CN=A91CF2B3/serialNumber=F7CEDDFB18EB390B421B58070BF210229F0E3A37
Certificate serial: 087C
Authority key identifier: F7:CE:DD:FB:18:EB:39:0B:42:1B:58:07:0B:F2:10:22:9F:0E:3A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/987d-xjrOQtCG1gHC_IQIp8OOjc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CF2B3/E7C2CB7E668B11EA90FC0422C4F9AE02/DF9BF84C757E11EAA923CA1EC4F9AE02.roa
Signing time: Wed 12 Oct 2022 14:27:56 +0000
ROA not before: Wed 12 Oct 2022 14:27:55 +0000
ROA not after: Fri 31 Mar 2023 00:00:00 +0000
asID: 139870
IP address blocks: 103.244.140.0/24 maxlen: 24
103.244.141.0/24 maxlen: 24
103.244.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2172 (0x87c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CF2B3/serialNumber=F7CEDDFB18EB390B421B58070BF210229F0E3A37
Validity
Not Before: Oct 12 14:27:55 2022 GMT
Not After : Mar 31 00:00:00 2023 GMT
Subject: CN=6346ceeb-52ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7b:06:fb:59:5a:89:b6:ab:e0:d0:d7:3a:df:
a8:89:27:b2:8d:28:81:d7:d0:5c:d8:de:88:e7:d7:
bd:4a:6b:eb:a6:3e:5c:37:79:07:c2:2c:db:c5:ee:
55:1a:aa:c2:35:69:57:77:21:31:66:be:34:e9:40:
76:8c:37:d2:6a:97:bf:ba:fc:2e:17:b7:bd:7f:a6:
37:83:ba:3f:72:9b:ef:15:e7:c7:ed:e3:b1:c9:75:
e6:94:89:2b:4e:2f:60:d1:17:d9:ca:49:b2:c8:e7:
6f:b2:1c:ba:c9:4b:4e:2f:7b:d2:87:90:4f:6a:4b:
3f:07:6e:45:eb:09:b3:c8:bc:7a:d8:6d:bc:ef:6a:
53:8e:e3:c8:c6:0f:5f:a7:1c:86:f0:3a:af:c6:0d:
cc:ef:6e:d8:f3:d6:9f:d1:3d:19:a7:50:fe:81:a5:
b7:d6:cf:d1:f0:d0:08:90:c2:6e:1d:ea:5c:bc:d8:
a7:3d:da:e3:59:c5:c6:7c:e1:8e:df:f1:cd:30:85:
cf:e2:4d:cf:e3:66:2d:27:65:da:1d:49:22:72:cf:
fa:67:b9:af:29:d1:4f:fd:9e:42:07:4d:c1:9b:0f:
1c:e9:40:e4:2d:4b:c0:c4:16:72:82:21:3a:c3:ef:
f1:86:d1:4f:65:1e:f2:94:2a:a5:aa:cf:62:71:65:
10:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:AD:63:5F:87:0E:E4:FC:6E:E9:29:D7:11:66:0A:C9:8F:E1:A8:15
X509v3 Authority Key Identifier:
keyid:F7:CE:DD:FB:18:EB:39:0B:42:1B:58:07:0B:F2:10:22:9F:0E:3A:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CF2B3/E7C2CB7E668B11EA90FC0422C4F9AE02/987d-xjrOQtCG1gHC_IQIp8OOjc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/987d-xjrOQtCG1gHC_IQIp8OOjc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF2B3/E7C2CB7E668B11EA90FC0422C4F9AE02/DF9BF84C757E11EAA923CA1EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.244.140.0-103.244.142.255
Signature Algorithm: sha256WithRSAEncryption
0a:0b:16:d1:ea:5b:37:ea:71:77:de:f4:95:06:5e:38:b1:52:
7a:47:4b:7e:70:c0:4a:41:c3:7c:62:48:56:8a:71:50:3a:73:
8d:d3:d9:a0:78:20:48:f7:28:00:f4:46:bd:02:9e:a3:cd:a8:
94:91:a3:c2:a9:52:5e:04:5a:a5:79:b2:2d:5d:2d:f7:eb:f3:
55:01:3b:93:f5:43:e4:3e:a5:bb:eb:dd:6b:f3:fb:e7:fd:42:
ef:9a:56:0d:57:f7:1f:6b:bc:ee:d4:85:09:3a:10:91:a3:db:
6d:a7:e0:60:7c:98:72:0e:ce:55:f7:be:be:ca:79:df:b8:86:
c5:53:d6:f5:26:c5:3f:40:4e:9e:33:31:7f:6e:de:55:fb:ca:
fd:b0:e1:38:f6:98:12:0b:39:15:08:19:78:0b:1e:6d:8f:40:
56:52:71:90:2e:fa:71:41:ca:fa:ef:03:4a:78:7b:5f:b5:ea:
61:7d:75:ce:4f:25:f7:bf:3a:79:0b:65:0a:30:80:7b:40:c9:
8f:df:3f:d0:49:1a:cd:bd:3e:73:eb:8d:8f:c3:85:67:a1:05:
1e:2f:fb:5b:15:d4:8e:50:f5:9d:ef:ed:22:ad:a0:79:38:44:
9e:a6:74:1e:68:6f:33:90:4f:d9:da:7f:a7:a3:c7:3c:6b:bc:
5a:48:12:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:27 2024 by rpki-client on console-ams.rpki-client.org