Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D253A/E0EB8380BE1811ED9C216D64C4F9AE02/9060105EC20811EDB4BDAC48C4F9AE02.roa
File: 9060105EC20811EDB4BDAC48C4F9AE02.roa (raw, json)
Hash identifier: Unj5AtjSSYeR5ybmqwgluEFnaGDNv1tCwAP70lGVDuE=
Subject key identifier: 62:87:13:E9:70:F5:54:F2:DD:F5:9C:32:D2:3B:9C:A5:47:BE:86:16
Certificate issuer: /CN=A91D253A/serialNumber=D73797618E855FAC96221B83719D5ADEA47F9829
Certificate serial: 36
Authority key identifier: D7:37:97:61:8E:85:5F:AC:96:22:1B:83:71:9D:5A:DE:A4:7F:98:29
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1zeXYY6FX6yWIhuDcZ1a3qR_mCk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D253A/E0EB8380BE1811ED9C216D64C4F9AE02/9060105EC20811EDB4BDAC48C4F9AE02.roa
Signing time: Tue 23 May 2023 08:20:05 +0000
ROA not before: Tue 23 May 2023 08:20:05 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 136923
IP address blocks: 103.54.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54 (0x36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D253A/serialNumber=D73797618E855FAC96221B83719D5ADEA47F9829
Validity
Not Before: May 23 08:20:05 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=646c7734-647e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:59:74:5d:a4:b7:ad:3a:32:37:bf:f4:10:04:
ee:19:e4:3a:09:f6:43:d9:6a:5d:52:fc:45:42:d6:
23:39:54:75:6b:c6:75:a9:aa:89:16:28:a4:35:c2:
d8:bc:39:19:0d:87:7c:c4:9a:3b:6c:eb:bb:b8:33:
aa:33:ff:53:7f:a5:2b:73:87:de:0c:97:bb:66:be:
6d:c8:60:5e:f5:47:b4:e6:11:3a:a4:b9:85:8b:ae:
23:c8:f5:83:28:cd:f5:08:52:04:0f:1b:3c:1d:04:
72:f6:af:2b:78:19:a3:ca:5b:92:a8:92:72:0d:4a:
0b:18:97:5e:40:fc:5f:0d:e0:74:d2:45:d8:3a:52:
6f:d3:1d:02:93:31:f0:ad:02:51:53:4e:86:7f:d2:
3d:e4:14:1f:00:fa:56:01:f9:04:71:05:ca:80:a6:
5b:b0:0c:09:18:83:63:7f:e6:66:ba:2b:4b:81:a3:
32:e2:fc:b0:41:46:4e:bc:a1:26:b5:9a:dc:38:7c:
34:f4:66:a9:fe:1d:f5:36:8e:f6:8c:24:37:fd:97:
7b:99:b6:65:f1:c1:92:40:6e:fc:92:e1:c5:ca:1d:
ab:48:46:35:f2:c1:e7:b6:8c:34:0b:74:5c:6f:c5:
bb:ab:d2:fb:7f:6d:2c:da:58:24:8e:ae:8d:34:d5:
ee:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:87:13:E9:70:F5:54:F2:DD:F5:9C:32:D2:3B:9C:A5:47:BE:86:16
X509v3 Authority Key Identifier:
keyid:D7:37:97:61:8E:85:5F:AC:96:22:1B:83:71:9D:5A:DE:A4:7F:98:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D253A/E0EB8380BE1811ED9C216D64C4F9AE02/1zeXYY6FX6yWIhuDcZ1a3qR_mCk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1zeXYY6FX6yWIhuDcZ1a3qR_mCk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D253A/E0EB8380BE1811ED9C216D64C4F9AE02/9060105EC20811EDB4BDAC48C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.54.121.0/24
Signature Algorithm: sha256WithRSAEncryption
46:cd:d4:3e:fa:df:18:a8:f8:23:7c:ee:9c:a2:5f:ff:02:28:
48:19:7d:eb:de:03:bc:20:68:a6:97:57:fe:2f:7c:03:14:d4:
72:09:e4:21:f5:44:fc:64:b1:ba:8d:c5:f4:d2:b6:9f:72:04:
8d:85:85:b5:c0:7a:bc:55:e8:0b:de:71:61:37:5c:d0:4f:f2:
17:64:22:53:16:4f:4b:f8:1f:f6:f3:47:17:46:93:69:1d:65:
dd:39:91:f8:9e:71:56:3c:f8:e4:f9:70:c5:6a:b6:e3:a5:b7:
e3:9a:30:33:1f:08:54:09:b3:82:f7:c6:3b:bb:24:74:50:6e:
00:4d:79:c4:08:8b:78:30:72:c0:3d:70:f5:1e:28:61:2f:1c:
c0:88:ea:c1:0f:f1:81:f5:d5:c7:a9:37:c9:b5:fa:8e:37:33:
3e:0e:0b:46:5e:23:95:4b:27:bf:a0:a0:e9:85:ec:6e:26:09:
3f:13:76:03:a0:9a:9c:f3:f5:f0:26:15:12:38:7e:92:3a:e8:
a0:bc:50:a7:a2:75:06:0f:e8:b8:d9:d4:cd:7a:d3:84:2d:72:
60:da:97:e1:b1:ad:78:a5:60:94:93:44:73:e5:b1:42:b4:3d:
1b:26:78:af:8f:3d:d9:b1:6c:79:c4:f5:31:03:9f:30:76:32:
5d:f3:20:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:29 2024 by rpki-client on console-ams.rpki-client.org