Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D253A/E0EB8380BE1811ED9C216D64C4F9AE02/304FAE203B3611EE93E2A762C4F9AE02.roa
File: 304FAE203B3611EE93E2A762C4F9AE02.roa (raw, json)
Hash identifier: bdjoD1PbA8lcA+IuaF+Lj8Em6L8A91tzy9q2Y2mVv3Y=
Subject key identifier: 07:90:8B:62:03:38:92:86:56:73:35:C9:E9:F1:98:6F:0C:C4:DF:9D
Certificate issuer: /CN=A91D253A/serialNumber=D73797618E855FAC96221B83719D5ADEA47F9829
Certificate serial: 6E
Authority key identifier: D7:37:97:61:8E:85:5F:AC:96:22:1B:83:71:9D:5A:DE:A4:7F:98:29
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1zeXYY6FX6yWIhuDcZ1a3qR_mCk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D253A/E0EB8380BE1811ED9C216D64C4F9AE02/304FAE203B3611EE93E2A762C4F9AE02.roa
Signing time: Tue 15 Aug 2023 06:37:22 +0000
ROA not before: Tue 15 Aug 2023 06:37:22 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 399471
IP address blocks: 103.54.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110 (0x6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D253A/serialNumber=D73797618E855FAC96221B83719D5ADEA47F9829
Validity
Not Before: Aug 15 06:37:22 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=64db1d22-8572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:13:db:3a:71:ab:4a:36:f1:23:e4:6c:49:32:
ad:24:70:ed:05:36:1d:b2:1b:f7:77:93:28:9f:cb:
22:ae:a4:93:d1:08:b0:dd:0c:c4:a6:a0:9f:b5:bd:
9d:68:ba:65:8c:6d:ff:b4:47:fe:ec:af:3b:3d:2d:
68:a7:93:df:f0:bc:45:a5:1e:85:12:60:7b:bb:19:
2d:7f:35:e2:93:42:f8:ca:e8:e9:5a:c0:dd:6b:42:
6b:f1:01:af:9a:71:02:51:5f:60:b1:45:b2:64:ab:
76:9a:80:2b:05:a9:b2:a7:3e:4b:3e:43:2a:73:03:
69:65:6b:e6:24:83:15:b0:73:10:f6:f6:40:49:ee:
41:e9:da:68:48:54:2c:8a:be:7c:05:55:f3:64:08:
39:16:5e:a0:5b:f5:68:e2:e3:ad:a2:10:9f:2b:70:
a3:e0:dc:44:81:45:5c:24:e5:82:4a:93:49:6c:87:
57:74:de:c3:e7:a9:ce:bb:6c:3d:92:a2:2b:b3:b8:
7d:70:af:da:41:93:e9:9b:1e:04:b1:cb:85:9f:f2:
c8:2d:81:43:b7:59:4c:56:c4:3c:8c:92:36:d9:a5:
40:a8:9b:f9:9b:f2:cd:1d:c3:22:8e:e4:2b:ce:dc:
74:1d:36:06:bd:41:45:fb:b5:da:97:81:7c:02:ec:
9a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:90:8B:62:03:38:92:86:56:73:35:C9:E9:F1:98:6F:0C:C4:DF:9D
X509v3 Authority Key Identifier:
keyid:D7:37:97:61:8E:85:5F:AC:96:22:1B:83:71:9D:5A:DE:A4:7F:98:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D253A/E0EB8380BE1811ED9C216D64C4F9AE02/1zeXYY6FX6yWIhuDcZ1a3qR_mCk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1zeXYY6FX6yWIhuDcZ1a3qR_mCk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D253A/E0EB8380BE1811ED9C216D64C4F9AE02/304FAE203B3611EE93E2A762C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.54.120.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:67:d3:fd:e2:18:2d:8a:8a:dd:72:62:83:0e:52:f1:0c:8f:
c6:c2:df:e0:8c:d6:fb:e7:9d:70:46:33:b7:58:f8:86:17:dc:
43:13:d2:27:6f:d9:b9:d5:9b:ee:cd:ab:77:d2:be:82:ca:55:
9a:08:93:c2:21:2f:3e:3d:30:cd:de:61:61:cc:6a:26:15:4f:
44:2c:e3:f8:04:38:cf:48:7a:ba:6e:db:1f:9e:3d:2a:9c:b7:
46:52:be:40:34:9c:4e:8b:d1:c8:e6:5c:1e:f9:00:57:fb:df:
c1:9c:0a:00:d8:b8:09:48:f6:2f:88:20:fa:43:6c:2c:9e:e7:
c7:ee:3b:82:17:57:a8:de:80:4b:68:ae:73:ee:67:f4:90:5c:
80:31:76:5a:46:54:df:3e:25:9e:b4:36:e6:0d:6f:a1:d8:9c:
eb:46:4d:5a:41:a0:be:ef:26:7c:97:30:32:89:a4:a7:e8:fe:
f4:b1:1b:c7:7b:d7:f4:95:58:23:20:98:47:04:0e:c0:a9:8e:
56:64:6c:ea:e2:c2:f8:d2:2f:54:97:36:92:60:be:79:4e:28:
dd:7c:4b:d7:df:b2:44:30:2b:3c:61:02:7b:d7:57:4a:40:06:
b9:34:35:ef:d5:31:66:68:4f:83:ad:5e:c9:ef:ef:6f:49:48:
11:e4:31:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:29 2024 by rpki-client on console-ams.rpki-client.org