Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3906/05818646553D11EB98E84873C4F9AE02/57634A58554C11EB87AB9070C4F9AE02.roa
File: 57634A58554C11EB87AB9070C4F9AE02.roa (raw, json)
Hash identifier: Z8c/3KxTKWgJ0cxlft2WIISYbaNsWzpl2q6y100b8Ug=
Subject key identifier: 1D:EB:DB:4B:CA:F8:50:C0:9A:45:F3:0E:AF:5A:DA:0B:3B:82:9B:04
Certificate issuer: /CN=A91D3906/serialNumber=EA8E71A07D90F9A6D521B3010057B6B31ADFE2D7
Certificate serial: 02D8
Authority key identifier: EA:8E:71:A0:7D:90:F9:A6:D5:21:B3:01:00:57:B6:B3:1A:DF:E2:D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6o5xoH2Q-abVIbMBAFe2sxrf4tc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D3906/05818646553D11EB98E84873C4F9AE02/57634A58554C11EB87AB9070C4F9AE02.roa
Signing time: Wed 12 Jan 2022 13:19:54 +0000
ROA not before: Wed 12 Jan 2022 13:19:54 +0000
ROA not after: Fri 31 Mar 2023 00:00:00 +0000
asID: 9381
IP address blocks: 103.19.236.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 728 (0x2d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D3906/serialNumber=EA8E71A07D90F9A6D521B3010057B6B31ADFE2D7
Validity
Not Before: Jan 12 13:19:54 2022 GMT
Not After : Mar 31 00:00:00 2023 GMT
Subject: CN=61ded57a-ac07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bb:86:0a:f3:53:3b:6f:a3:2f:eb:03:be:30:
d3:85:75:c0:3b:dc:d2:d3:85:66:63:d7:1e:91:67:
e6:da:84:d0:10:17:5b:b7:83:c1:39:b5:e6:ec:e9:
ed:ac:66:a1:de:bd:28:f1:c7:0d:d0:59:a1:34:cf:
b7:00:70:4c:09:90:bf:9d:9f:15:ca:90:7b:38:29:
fa:08:f6:d5:0f:d5:c6:fb:ee:fb:4b:19:ce:79:29:
dc:ab:21:44:fa:99:7d:4a:1c:17:85:89:d3:e2:0f:
8a:b2:aa:f4:61:1e:78:74:73:c3:09:38:1d:8a:51:
b6:a7:ba:b1:b5:14:0a:57:e1:a4:cc:5a:a3:8b:65:
d2:7a:1e:f1:9c:6a:4c:9e:44:89:0a:3d:ef:b7:84:
16:04:aa:ec:7b:42:32:74:3a:4d:cd:46:4b:1c:84:
d1:fa:ee:c8:33:73:85:aa:cc:40:22:95:f6:e1:e4:
5d:8e:04:74:9c:ac:8d:43:60:f2:93:a5:54:b0:28:
04:be:6d:51:a4:42:77:ba:24:24:17:b1:42:19:07:
71:35:13:f1:a4:08:84:c5:0e:94:61:39:13:a2:1c:
1b:d1:c1:0f:7a:c9:28:29:54:93:ea:be:52:14:8e:
15:ca:70:6c:c3:65:2b:70:23:7f:4d:ae:80:d5:19:
5c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:EB:DB:4B:CA:F8:50:C0:9A:45:F3:0E:AF:5A:DA:0B:3B:82:9B:04
X509v3 Authority Key Identifier:
keyid:EA:8E:71:A0:7D:90:F9:A6:D5:21:B3:01:00:57:B6:B3:1A:DF:E2:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D3906/05818646553D11EB98E84873C4F9AE02/6o5xoH2Q-abVIbMBAFe2sxrf4tc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6o5xoH2Q-abVIbMBAFe2sxrf4tc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3906/05818646553D11EB98E84873C4F9AE02/57634A58554C11EB87AB9070C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.19.236.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:ad:4a:d1:89:af:4b:a9:21:c8:de:c7:1d:a6:03:b2:90:ed:
08:c5:53:7a:a1:cb:87:21:a7:91:10:02:30:66:a7:dc:be:3d:
a6:0a:aa:84:b0:69:6d:ce:d0:f8:a8:9d:c7:37:49:2d:1f:d0:
cf:52:3a:89:a3:86:ae:95:94:e3:50:57:e4:8f:a2:1f:b9:90:
a9:29:c5:1d:9a:8d:22:b6:d0:5e:4e:be:15:55:e7:55:e9:22:
6d:37:a0:83:3b:8a:f2:9f:17:3d:51:9f:19:10:4d:49:75:70:
86:45:c4:4e:93:68:f5:c2:e4:37:83:5c:0e:ee:29:27:c8:c7:
23:ab:97:c3:ff:b3:90:e0:ec:0c:81:15:01:29:87:b6:22:b9:
ac:47:44:61:8e:92:fd:76:ae:f0:48:a3:bb:79:f0:93:98:36:
bf:18:b9:42:dd:e1:60:5c:78:65:1a:b8:bc:8f:46:5a:38:d3:
24:8b:b3:9a:93:d6:36:f6:de:97:61:38:cb:d5:76:96:f7:10:
6f:fb:c3:e8:11:5c:39:55:50:27:d7:48:02:04:7f:26:58:72:
d4:d4:b7:28:01:2b:70:6c:da:f7:bd:ec:70:de:77:e0:55:44:
7d:3c:04:1a:d8:d5:61:51:d4:13:56:ae:18:c8:6f:7b:27:3c:
47:13:5e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:42 2024 by rpki-client on console-fra.rpki-client.org