Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D253A/E0EB8380BE1811ED9C216D64C4F9AE02/02F1BDCA0C4B11EE97019769C4F9AE02.roa
File: 02F1BDCA0C4B11EE97019769C4F9AE02.roa (raw, json)
Hash identifier: l7GMAlN+mWe+8AImEX4vB+6XW8SKsTOPrXzrz6Do+PU=
Subject key identifier: 1B:7C:8A:32:19:6A:78:43:02:1E:19:3B:A0:B1:28:EC:56:1D:E8:B4
Certificate issuer: /CN=A91D253A/serialNumber=D73797618E855FAC96221B83719D5ADEA47F9829
Certificate serial: 47
Authority key identifier: D7:37:97:61:8E:85:5F:AC:96:22:1B:83:71:9D:5A:DE:A4:7F:98:29
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1zeXYY6FX6yWIhuDcZ1a3qR_mCk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D253A/E0EB8380BE1811ED9C216D64C4F9AE02/02F1BDCA0C4B11EE97019769C4F9AE02.roa
Signing time: Fri 16 Jun 2023 13:38:01 +0000
ROA not before: Fri 16 Jun 2023 13:38:01 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 57097
IP address blocks: 103.54.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71 (0x47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D253A/serialNumber=D73797618E855FAC96221B83719D5ADEA47F9829
Validity
Not Before: Jun 16 13:38:01 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=648c65b8-fc92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:12:69:55:77:99:08:ae:b7:30:83:3f:73:d9:
99:ec:b9:97:fb:b5:08:4a:01:a4:26:21:b8:64:e9:
5f:c6:33:ba:63:6e:71:50:93:ea:41:4f:3b:f6:bb:
6b:e1:00:88:5b:e5:70:06:59:00:87:a1:a1:92:75:
a7:a2:26:dd:6d:ed:47:a2:3e:b4:6b:01:a7:d0:ac:
e7:b3:2e:98:5f:bd:cb:29:bc:7c:7c:fd:76:18:a6:
7b:8b:45:35:9b:6a:62:44:07:47:36:aa:02:34:fd:
3b:a8:cc:a1:62:6a:10:66:ad:a6:1b:64:5a:80:3e:
05:5a:7e:dc:6f:60:c0:67:45:f9:00:f8:d5:fa:80:
e2:7a:5f:59:b4:d9:d9:80:08:83:c0:48:ff:00:2a:
8a:84:ce:33:4a:44:ea:a2:46:e9:73:87:ff:54:78:
cd:d6:25:12:a2:47:0d:82:b2:4c:52:fe:ea:50:56:
05:d2:24:01:7d:6b:76:29:68:bb:55:f9:47:15:1a:
e4:3b:35:8d:c2:e7:c5:c6:92:b8:5e:0d:18:61:ce:
5b:ec:35:5a:16:00:c7:0e:b4:b0:a7:c1:c8:18:9f:
a3:49:ce:cc:04:4c:a6:33:26:a9:dc:b5:e6:48:51:
05:28:5e:73:46:b6:c2:e4:09:54:09:f4:f6:8f:2a:
c4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:7C:8A:32:19:6A:78:43:02:1E:19:3B:A0:B1:28:EC:56:1D:E8:B4
X509v3 Authority Key Identifier:
keyid:D7:37:97:61:8E:85:5F:AC:96:22:1B:83:71:9D:5A:DE:A4:7F:98:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D253A/E0EB8380BE1811ED9C216D64C4F9AE02/1zeXYY6FX6yWIhuDcZ1a3qR_mCk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1zeXYY6FX6yWIhuDcZ1a3qR_mCk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D253A/E0EB8380BE1811ED9C216D64C4F9AE02/02F1BDCA0C4B11EE97019769C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.54.121.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:1a:d6:1d:f8:8e:3f:99:e0:94:24:f7:86:74:9f:f3:d1:d7:
f6:40:f5:59:42:e9:cc:b1:71:17:13:9a:93:81:21:8a:fe:6c:
98:92:fd:c3:9c:25:4e:89:aa:40:26:32:24:9c:83:af:5f:52:
c4:bf:10:34:5b:ed:89:f4:2b:3a:47:4b:70:39:e3:6a:10:19:
34:76:e7:b6:b2:dd:5c:5a:f4:62:41:6a:20:15:32:8d:5f:18:
f4:dc:a5:8f:0e:92:37:26:a0:c5:c6:f7:6a:c9:23:2f:8b:b3:
ce:92:87:b4:46:44:ac:54:24:9d:35:92:7e:a0:7a:20:21:27:
0f:f7:bb:a7:ca:ef:04:f7:bc:7f:f4:67:b8:45:ed:90:f7:16:
67:3c:24:1f:52:fd:65:b5:59:51:ed:75:49:25:be:66:d8:2f:
84:2b:98:a6:92:f7:7c:41:87:ba:0b:00:3e:86:a3:f8:21:1d:
72:cb:f1:0b:33:2f:eb:2d:a9:b1:cc:55:80:06:e8:92:5f:73:
c0:43:9c:e3:3f:1e:03:fc:f1:a5:0f:3f:57:8a:c5:cf:1a:75:
24:93:26:3e:39:59:1d:60:6f:07:88:08:6c:8f:6b:8a:ba:45:
66:8e:bf:28:5f:72:f8:4e:40:bb:6f:88:85:82:69:c5:c1:d0:
12:ab:0f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:42 2024 by rpki-client on console-fra.rpki-client.org