Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D253A/E0EB8380BE1811ED9C216D64C4F9AE02/38B107AA3CC411EE8444CF79C4F9AE02.roa
File: 38B107AA3CC411EE8444CF79C4F9AE02.roa (raw, json)
Hash identifier: xW1g9CbyewiQubI8BnE4igRDMqSNFKH2tKb4H6Cw9Nw=
Subject key identifier: E0:E6:21:8F:64:C3:EE:83:AC:C9:CB:5B:31:F6:BB:60:F4:C3:FF:A1
Certificate issuer: /CN=A91D253A/serialNumber=D73797618E855FAC96221B83719D5ADEA47F9829
Certificate serial: 74
Authority key identifier: D7:37:97:61:8E:85:5F:AC:96:22:1B:83:71:9D:5A:DE:A4:7F:98:29
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1zeXYY6FX6yWIhuDcZ1a3qR_mCk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D253A/E0EB8380BE1811ED9C216D64C4F9AE02/38B107AA3CC411EE8444CF79C4F9AE02.roa
Signing time: Thu 17 Aug 2023 06:07:37 +0000
ROA not before: Thu 17 Aug 2023 06:07:37 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 21082
IP address blocks: 103.54.122.0/24 maxlen: 24
103.54.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116 (0x74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D253A/serialNumber=D73797618E855FAC96221B83719D5ADEA47F9829
Validity
Not Before: Aug 17 06:07:37 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=64ddb929-c4bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:15:99:8b:ac:3c:d2:dd:72:4c:47:b3:59:f6:
29:ba:94:09:bb:9d:11:eb:66:7b:2d:01:54:a6:f4:
e8:f8:ba:d8:c5:35:2d:97:09:81:67:40:53:ae:34:
7a:4e:3f:67:fe:75:46:34:b6:5f:e6:73:d0:03:b2:
fa:9c:94:bd:47:d2:94:d9:1f:a4:09:9a:c4:60:49:
73:f1:58:25:7c:fb:28:70:45:e4:3b:c5:71:50:c6:
d7:90:65:50:64:34:da:c2:44:70:5f:94:a5:55:ef:
f5:93:f8:27:1e:15:5f:41:2b:8a:a2:4d:3d:ab:6e:
07:0c:28:d9:e4:ef:7e:4a:90:27:6e:5c:4e:3e:a0:
13:60:c5:e1:63:be:85:77:4d:7f:3b:cd:cf:cf:52:
a9:4a:7d:d0:f2:25:1f:09:ef:64:a4:9a:10:ff:d4:
68:ff:6f:b4:4a:5a:8a:39:82:fd:0a:e2:3e:40:ab:
07:81:7e:f0:da:c6:21:29:8a:93:52:1f:fc:1d:1d:
da:b5:99:e7:c9:9d:d3:59:f5:0b:c5:d6:d0:2d:48:
59:fc:98:94:f5:d9:5c:4d:d6:d1:2a:d9:4d:dd:9f:
fe:a7:36:74:42:56:2f:b8:62:50:7d:08:d9:99:ff:
48:a8:77:b1:8b:05:ae:57:ee:92:74:c6:0c:44:ae:
13:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E6:21:8F:64:C3:EE:83:AC:C9:CB:5B:31:F6:BB:60:F4:C3:FF:A1
X509v3 Authority Key Identifier:
keyid:D7:37:97:61:8E:85:5F:AC:96:22:1B:83:71:9D:5A:DE:A4:7F:98:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D253A/E0EB8380BE1811ED9C216D64C4F9AE02/1zeXYY6FX6yWIhuDcZ1a3qR_mCk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1zeXYY6FX6yWIhuDcZ1a3qR_mCk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D253A/E0EB8380BE1811ED9C216D64C4F9AE02/38B107AA3CC411EE8444CF79C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.54.122.0/23
Signature Algorithm: sha256WithRSAEncryption
73:40:73:c1:2e:d1:41:bf:7e:88:75:19:71:94:83:80:31:b8:
46:0c:70:36:82:b6:de:c9:e0:b5:a0:6b:4e:7c:9a:3f:ef:de:
05:59:4e:e6:9c:0b:b0:66:fc:76:b1:15:59:a3:c9:15:76:07:
22:f9:4e:3c:fe:9d:27:9e:41:c9:92:92:ed:00:e8:74:b7:c2:
39:0f:b2:86:61:a3:1e:06:d9:d0:16:f1:47:0d:b2:8a:21:d2:
87:d0:9c:ea:7c:d1:0e:ef:16:e9:e7:21:cb:a8:02:bd:a7:de:
2e:42:90:3e:ae:52:c6:20:e0:46:e9:59:ba:c0:76:f3:00:d2:
cf:3b:a3:28:39:93:c3:e4:81:2f:97:04:fa:39:a1:c2:34:dd:
ad:ed:b2:44:2e:e7:83:ec:cf:a8:32:a4:91:d4:aa:1b:d7:36:
df:59:32:d6:ce:a8:0d:e0:f4:1e:10:cc:a4:84:33:ba:05:a5:
c2:47:58:19:f7:00:ce:0c:3b:a7:08:60:16:79:13:bc:76:e5:
ca:79:9a:e5:05:fb:6f:f3:6e:ba:fa:a6:49:bf:a0:a4:bf:ed:
91:7a:51:7b:43:67:69:0b:4e:2a:3a:02:7a:3f:b5:9f:c8:a5:
b5:0e:19:6e:64:85:f9:6c:2d:91:cf:7b:25:49:0d:cb:5e:95:
ad:6f:8c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:29 2024 by rpki-client on console-ams.rpki-client.org