Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D253A/E0EB8380BE1811ED9C216D64C4F9AE02/6DBE869C51EC11EEA751C92BC4F9AE02.roa
File: 6DBE869C51EC11EEA751C92BC4F9AE02.roa (raw, json)
Hash identifier: ExKYTnEamjgL6t5iIOHe3fcPlacKlyUl6hDYtdgMuDU=
Subject key identifier: 54:FF:52:68:58:95:4A:0A:03:2B:AC:28:22:4C:B9:CF:F3:DA:F3:CB
Certificate issuer: /CN=A91D253A/serialNumber=D73797618E855FAC96221B83719D5ADEA47F9829
Certificate serial: 85
Authority key identifier: D7:37:97:61:8E:85:5F:AC:96:22:1B:83:71:9D:5A:DE:A4:7F:98:29
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1zeXYY6FX6yWIhuDcZ1a3qR_mCk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D253A/E0EB8380BE1811ED9C216D64C4F9AE02/6DBE869C51EC11EEA751C92BC4F9AE02.roa
Signing time: Wed 13 Sep 2023 04:17:19 +0000
ROA not before: Wed 13 Sep 2023 04:17:19 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 32402
IP address blocks: 103.54.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133 (0x85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D253A/serialNumber=D73797618E855FAC96221B83719D5ADEA47F9829
Validity
Not Before: Sep 13 04:17:19 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=650137cf-d18c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d9:15:83:36:d7:0e:77:1f:18:bd:1a:41:23:
19:48:4e:1d:b6:f1:b7:2c:3c:92:fe:57:db:5d:25:
12:26:8d:b3:42:80:11:29:5d:70:bf:72:4f:d8:dd:
dc:f5:b5:7d:d4:c2:3e:8a:c6:ee:a1:ab:9e:e1:05:
bc:11:df:67:48:2f:b2:13:4c:91:8c:01:39:3e:df:
55:1b:34:a3:1b:99:6d:11:d6:7e:35:9e:66:cb:08:
42:df:03:ea:91:f6:ff:e6:57:9c:af:71:98:88:13:
ad:dc:ec:e3:9c:b9:89:bd:47:da:97:f7:d4:d6:6a:
07:86:a0:18:39:61:b1:06:dd:2c:93:c0:11:4c:13:
ad:4a:7d:47:d8:4e:63:77:e7:24:3c:1c:97:62:e6:
eb:a2:d3:d3:42:c6:9d:25:18:63:87:26:ba:b8:61:
f9:78:c8:3a:d0:7c:2c:6e:bf:96:ff:d2:8f:c5:f3:
df:0e:c5:13:f5:7e:14:c7:dd:1a:15:01:dc:9d:5b:
0f:ef:de:d8:a0:36:d6:20:7e:0d:bf:1a:59:00:61:
ee:ce:58:ba:71:b6:5d:2c:31:6f:27:ee:12:6b:63:
b5:e4:4c:ad:c2:4c:d6:cc:ac:c9:e2:00:e3:ac:11:
ef:f0:02:ef:ad:d7:33:8c:77:a1:90:c0:d0:65:85:
f5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:FF:52:68:58:95:4A:0A:03:2B:AC:28:22:4C:B9:CF:F3:DA:F3:CB
X509v3 Authority Key Identifier:
keyid:D7:37:97:61:8E:85:5F:AC:96:22:1B:83:71:9D:5A:DE:A4:7F:98:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D253A/E0EB8380BE1811ED9C216D64C4F9AE02/1zeXYY6FX6yWIhuDcZ1a3qR_mCk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1zeXYY6FX6yWIhuDcZ1a3qR_mCk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D253A/E0EB8380BE1811ED9C216D64C4F9AE02/6DBE869C51EC11EEA751C92BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.54.121.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:1f:ed:58:5f:57:a6:4e:04:ba:14:a9:06:d4:ca:2a:25:45:
f2:ab:5e:a9:14:21:a3:3b:c3:f5:0f:81:ca:0b:de:c9:f4:15:
7f:48:6f:34:46:ba:21:65:a4:55:49:eb:2b:5a:ab:77:e5:af:
b7:f0:a3:1a:9b:f0:55:6a:25:13:e8:95:7c:9a:94:34:f4:cf:
e0:6a:75:3b:84:ad:56:5c:2a:ff:66:34:a4:0f:c9:b9:3d:4a:
a4:94:f7:2f:b8:20:99:a0:39:9f:23:46:20:29:3a:a4:24:79:
0e:e7:f8:56:d0:3f:0f:0b:30:72:20:66:23:bb:a8:1f:39:5c:
0c:89:8e:c9:ae:b6:de:ed:17:b2:c2:37:59:fe:e7:86:56:9c:
40:e8:80:23:3f:cf:0e:3e:0d:d1:e3:f6:52:1c:f0:b9:c9:1b:
6b:94:a0:07:d4:12:a5:33:c2:65:5e:ad:10:8c:04:e0:05:14:
c8:d4:7f:25:09:15:e4:ed:12:3f:c4:b6:52:bf:ea:58:e0:2e:
b6:ca:7d:38:ab:59:b3:54:b2:d9:3d:80:0d:c6:f9:22:36:90:
97:35:17:c9:5e:be:49:26:60:19:45:a5:29:ad:c6:f5:e3:6a:
09:8e:a3:84:af:62:9a:96:90:f7:de:61:84:e3:d6:1b:1b:74:
47:6b:93:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:29 2024 by rpki-client on console-ams.rpki-client.org