Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D253A/E0EB8380BE1811ED9C216D64C4F9AE02/91997E58D75A11EDA33F380DC4F9AE02.roa
File: 91997E58D75A11EDA33F380DC4F9AE02.roa (raw, json)
Hash identifier: hz7HMqFIcpgK0cKWIZLZ0JdVoesOgK1YJTaKQizLSJ0=
Subject key identifier: 3A:C0:33:E7:F6:DB:09:36:59:A8:F9:62:04:97:2A:EF:82:8C:4D:9D
Certificate issuer: /CN=A91D253A/serialNumber=D73797618E855FAC96221B83719D5ADEA47F9829
Certificate serial: 19
Authority key identifier: D7:37:97:61:8E:85:5F:AC:96:22:1B:83:71:9D:5A:DE:A4:7F:98:29
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1zeXYY6FX6yWIhuDcZ1a3qR_mCk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D253A/E0EB8380BE1811ED9C216D64C4F9AE02/91997E58D75A11EDA33F380DC4F9AE02.roa
Signing time: Mon 10 Apr 2023 04:45:51 +0000
ROA not before: Mon 10 Apr 2023 04:45:51 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 17447
IP address blocks: 103.54.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25 (0x19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D253A/serialNumber=D73797618E855FAC96221B83719D5ADEA47F9829
Validity
Not Before: Apr 10 04:45:51 2023 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=6433947f-5929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:ba:09:9a:d3:e4:a9:ae:65:00:4d:e5:11:cb:
52:60:e8:8d:5b:8a:07:cb:80:e1:91:79:46:d6:45:
9a:3a:53:db:98:c8:f2:0c:a9:94:d0:b2:bc:34:6f:
d3:99:b5:b6:46:44:c7:9e:05:9c:7e:ad:bd:61:9c:
ae:e0:7a:e0:c3:4e:e7:7b:7f:51:0a:98:58:5d:13:
b1:6d:01:fb:73:e3:60:18:4d:b9:c0:8e:d8:73:40:
3b:34:f6:98:cb:ff:4f:2e:78:c8:77:6f:2d:a4:cf:
87:b7:4a:b7:3a:f9:f7:da:25:e2:90:01:0c:31:ab:
7f:70:b4:a9:a8:75:c8:83:6f:eb:cd:19:70:6a:0c:
08:25:4a:93:a1:a1:c0:73:6c:d8:02:1f:93:68:f7:
d0:5c:aa:28:3f:fa:30:43:16:b0:d7:06:27:38:54:
50:6b:b4:ae:fe:ed:b8:01:01:ae:6e:d1:34:22:79:
5c:3a:55:07:f8:02:9f:7b:d3:98:e3:82:76:41:28:
a9:84:bd:1e:ad:0d:58:14:2e:a1:5e:8a:b6:30:3f:
22:a4:37:03:15:b5:36:52:d7:6e:f7:f8:59:36:ba:
2e:3d:e8:6f:3d:3a:05:4d:55:90:47:d4:9e:7e:b8:
f5:5c:87:d2:0e:b8:60:ff:0f:76:19:fe:96:38:3f:
cd:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C0:33:E7:F6:DB:09:36:59:A8:F9:62:04:97:2A:EF:82:8C:4D:9D
X509v3 Authority Key Identifier:
keyid:D7:37:97:61:8E:85:5F:AC:96:22:1B:83:71:9D:5A:DE:A4:7F:98:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D253A/E0EB8380BE1811ED9C216D64C4F9AE02/1zeXYY6FX6yWIhuDcZ1a3qR_mCk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1zeXYY6FX6yWIhuDcZ1a3qR_mCk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D253A/E0EB8380BE1811ED9C216D64C4F9AE02/91997E58D75A11EDA33F380DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.54.120.0/24
Signature Algorithm: sha256WithRSAEncryption
92:2a:96:9e:dd:0d:fb:b3:41:4a:c5:16:54:ef:8b:eb:95:fe:
a2:21:3a:2e:1b:87:48:ec:e9:cd:05:ea:bf:89:df:ba:89:09:
df:24:b6:5f:57:7c:05:e7:bf:b5:9f:bc:b6:ff:71:17:3e:02:
a0:61:63:46:97:d8:67:41:1a:d2:03:29:0a:89:21:9e:a2:4b:
24:cb:a3:23:23:48:0d:55:c8:5f:58:61:2c:da:ec:76:c1:8a:
30:16:b7:af:22:69:dd:66:83:3d:2a:7c:cb:f8:21:ea:03:53:
8e:e7:15:40:3a:02:c5:5e:34:8f:74:fe:40:0c:e9:50:d6:65:
4a:63:41:25:09:70:fa:54:69:23:ef:f3:b0:55:61:69:27:25:
0c:d5:82:73:22:3e:0e:8f:d1:fd:8a:ba:14:fa:ae:e1:71:a5:
6c:ff:71:98:8c:65:14:cd:7c:48:c6:31:8c:66:e9:3f:ef:98:
7b:10:ba:b5:07:23:90:57:2d:ac:12:91:38:4a:2a:f4:39:b7:
4b:bf:1f:ca:56:69:9f:35:df:0a:89:43:52:2f:fb:b7:07:22:
17:68:ab:fc:fc:c6:2d:05:72:27:99:da:bb:ae:25:91:f9:e8:
dc:0d:48:01:d9:16:46:59:12:4c:ec:73:13:d3:a3:ce:c8:57:
75:e1:31:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:29 2024 by rpki-client on console-ams.rpki-client.org