Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D253A/E0EB8380BE1811ED9C216D64C4F9AE02/074C000A3B3611EE8FB06F62C4F9AE02.roa
File: 074C000A3B3611EE8FB06F62C4F9AE02.roa (raw, json)
Hash identifier: JdCDLJBXHzjC0pxRBg632VIuAH2HK3F605prl/GqiJ0=
Subject key identifier: 3C:00:6F:22:A1:D0:CE:63:EC:30:2A:B0:DB:43:C0:ED:3C:E0:F9:7E
Certificate issuer: /CN=A91D253A/serialNumber=D73797618E855FAC96221B83719D5ADEA47F9829
Certificate serial: 6C
Authority key identifier: D7:37:97:61:8E:85:5F:AC:96:22:1B:83:71:9D:5A:DE:A4:7F:98:29
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1zeXYY6FX6yWIhuDcZ1a3qR_mCk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D253A/E0EB8380BE1811ED9C216D64C4F9AE02/074C000A3B3611EE8FB06F62C4F9AE02.roa
Signing time: Tue 15 Aug 2023 06:36:13 +0000
ROA not before: Tue 15 Aug 2023 06:36:13 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 17941
IP address blocks: 103.54.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108 (0x6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D253A/serialNumber=D73797618E855FAC96221B83719D5ADEA47F9829
Validity
Not Before: Aug 15 06:36:13 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=64db1cdd-7939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:4d:ea:cd:be:d1:48:9e:8a:63:94:82:32:31:
84:c4:22:27:d3:77:82:3b:0a:bc:eb:5c:1b:b1:35:
61:54:53:5a:10:c2:3a:a3:61:3c:8f:a8:51:59:7a:
ff:b9:09:02:9b:51:63:17:70:56:90:18:7e:56:77:
7a:a5:62:90:80:14:44:c7:97:8c:93:be:92:c6:29:
9e:c8:3b:d8:d9:12:7b:0e:12:4e:af:22:df:97:47:
5c:22:f8:0b:cc:1c:9d:b6:a8:d6:b7:ad:6d:78:8b:
55:4e:14:81:6b:76:51:b6:3b:d0:6e:40:91:b8:63:
2a:ad:1a:4c:49:d3:72:bb:32:3a:7b:08:82:90:17:
eb:8f:2c:83:5c:d5:f0:5e:d2:a5:a8:d1:ee:2b:b3:
e8:00:47:ce:08:bb:51:78:07:82:96:ad:35:36:7a:
c9:39:9c:4e:c7:ef:f1:a1:d2:3b:0d:c9:6b:08:24:
a8:04:87:89:70:43:3a:99:50:79:2a:11:ea:98:ed:
a5:64:00:69:3f:9a:17:ee:49:1b:b6:6c:78:b5:eb:
42:06:15:5c:56:e7:1e:15:32:ce:ac:14:2f:fa:74:
72:84:00:26:f0:68:57:91:85:c3:5c:e0:b5:2d:ab:
3e:7f:76:c6:41:ea:03:e1:70:de:0c:f7:59:0c:f5:
23:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:00:6F:22:A1:D0:CE:63:EC:30:2A:B0:DB:43:C0:ED:3C:E0:F9:7E
X509v3 Authority Key Identifier:
keyid:D7:37:97:61:8E:85:5F:AC:96:22:1B:83:71:9D:5A:DE:A4:7F:98:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D253A/E0EB8380BE1811ED9C216D64C4F9AE02/1zeXYY6FX6yWIhuDcZ1a3qR_mCk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1zeXYY6FX6yWIhuDcZ1a3qR_mCk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D253A/E0EB8380BE1811ED9C216D64C4F9AE02/074C000A3B3611EE8FB06F62C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.54.122.0/24
Signature Algorithm: sha256WithRSAEncryption
24:4a:35:f0:d7:bb:22:b4:ac:fe:56:8b:df:4b:4f:e3:83:6e:
83:99:51:a7:dd:74:60:28:cd:9d:a2:a1:f0:89:13:5c:5a:9e:
17:01:de:44:24:2c:01:49:ac:1c:20:b0:29:c5:97:2b:16:a9:
1f:76:d8:84:5c:4f:60:1a:aa:da:91:49:31:e6:19:b4:b3:95:
0b:6d:9f:79:97:1b:dc:73:e2:9f:6e:08:5c:8b:8f:0f:dd:90:
7a:2a:89:64:e1:e1:02:46:10:c4:a6:58:97:c9:b4:5c:59:0c:
b4:1b:ff:a7:2b:66:4f:1e:04:4a:32:16:73:d2:ca:04:95:05:
e9:8a:c6:9a:87:7a:a5:83:65:cd:91:7d:7a:28:5f:5f:8a:4a:
24:90:76:3c:8a:86:6a:e5:c2:83:db:59:77:0d:60:d3:a6:51:
e2:ca:b9:b5:82:89:2d:97:0d:46:b4:8f:f7:45:2c:75:77:35:
66:0e:7f:58:ab:f6:a8:78:2a:e1:d8:b3:85:96:3f:93:3c:b7:
51:a1:4a:a2:b7:b2:c7:a9:11:0b:23:11:28:9d:33:ef:e0:ad:
eb:79:a6:df:e5:b3:d6:0b:89:45:b6:9f:ea:fb:f2:77:ee:11:
c3:eb:2f:cf:12:76:bf:39:3c:e6:f9:f7:eb:2b:4e:14:59:0e:
d5:a0:8c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:29 2024 by rpki-client on console-ams.rpki-client.org