Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D91BF/02688B56AD3E11E9801EF62CC4F9AE02/1171688837AF11EA80400D83C4F9AE02.roa
File: 1171688837AF11EA80400D83C4F9AE02.roa (raw, json)
Hash identifier: ZH5c4aaWCIlu9s5Xk03JjMZiqE/uB9nea4L19MC0+IE=
Subject key identifier: B8:D2:52:0B:11:83:F7:37:42:D2:D6:75:F7:34:FF:5D:6A:08:D2:7D
Certificate issuer: /CN=A91D91BF/serialNumber=C719EC9FBE5BD9383C789341F5E55BEA8C9B38A5
Certificate serial: 0A93
Authority key identifier: C7:19:EC:9F:BE:5B:D9:38:3C:78:93:41:F5:E5:5B:EA:8C:9B:38:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xxnsn75b2Tg8eJNB9eVb6oybOKU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D91BF/02688B56AD3E11E9801EF62CC4F9AE02/1171688837AF11EA80400D83C4F9AE02.roa
Signing time: Wed 16 Mar 2022 07:25:52 +0000
ROA not before: Wed 16 Mar 2022 07:25:52 +0000
ROA not after: Sun 28 May 2023 00:00:00 +0000
asID: 138979
IP address blocks: 103.109.70.0/24 maxlen: 24
103.109.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2707 (0xa93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D91BF/serialNumber=C719EC9FBE5BD9383C789341F5E55BEA8C9B38A5
Validity
Not Before: Mar 16 07:25:52 2022 GMT
Not After : May 28 00:00:00 2023 GMT
Subject: CN=623190ff-ff37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:64:69:9e:73:7f:64:dc:45:71:96:76:75:c5:
3d:d1:ec:62:21:35:ef:f5:7f:a8:f6:29:89:2a:37:
92:fb:da:31:2a:1a:da:7c:bb:75:43:e7:08:49:ee:
60:71:ae:f5:09:0f:b1:d0:0e:70:f9:c0:31:5c:07:
a7:01:30:36:79:d9:43:45:66:d8:b8:39:bd:ff:96:
a5:5a:7e:db:2c:7b:da:1e:85:f5:2f:8e:70:18:14:
ea:b5:c1:d0:ca:0b:3d:ac:ee:21:db:df:2f:10:95:
c1:cd:ff:29:19:5e:02:75:7a:74:39:a0:90:bc:e2:
7d:8f:08:a6:54:fc:f7:d5:21:c2:a7:b0:d7:90:23:
ef:d4:6f:e0:f8:ac:f4:05:84:1c:9b:f4:6c:92:81:
26:29:f5:3a:63:f2:21:f6:27:88:ad:0d:13:2f:bf:
98:79:81:42:85:6c:bc:7a:37:d2:44:7e:30:75:e0:
8c:5d:d1:8b:02:1c:c8:4f:73:7c:b2:70:c5:10:df:
98:bc:bd:55:f9:3d:67:f6:a5:27:8f:db:3b:fc:5f:
30:0c:cc:87:1c:c9:54:90:89:ed:7c:90:78:b0:05:
e5:b1:78:bd:32:5f:8a:a2:e4:60:68:45:80:7d:76:
6a:4a:ac:b7:56:aa:3d:a8:1a:2a:46:d7:f3:5e:14:
af:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:D2:52:0B:11:83:F7:37:42:D2:D6:75:F7:34:FF:5D:6A:08:D2:7D
X509v3 Authority Key Identifier:
keyid:C7:19:EC:9F:BE:5B:D9:38:3C:78:93:41:F5:E5:5B:EA:8C:9B:38:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D91BF/02688B56AD3E11E9801EF62CC4F9AE02/xxnsn75b2Tg8eJNB9eVb6oybOKU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xxnsn75b2Tg8eJNB9eVb6oybOKU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D91BF/02688B56AD3E11E9801EF62CC4F9AE02/1171688837AF11EA80400D83C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.109.70.0/23
Signature Algorithm: sha256WithRSAEncryption
12:c3:51:0c:66:83:d3:13:e7:c7:cb:0c:ba:b4:d4:4b:7b:c6:
f1:25:ad:97:1a:c2:37:cf:b7:10:c4:5d:b7:16:3a:69:f8:9e:
6a:e9:d8:99:86:fd:e1:0c:56:f1:5a:68:5c:68:01:46:5e:52:
aa:36:04:26:5d:ff:f8:c5:b1:ac:e0:92:a0:c5:7f:92:57:3b:
1c:06:e6:79:de:54:57:d1:5b:b5:da:dd:10:41:0d:cb:25:7a:
38:5c:1e:d9:01:2e:b3:74:b9:97:b5:6b:d8:74:6e:28:6d:02:
ba:6b:35:09:48:84:44:a0:ea:d7:b8:57:0b:9a:73:0a:0b:1a:
fa:a3:f3:63:25:91:d7:ee:d8:03:2f:ae:0b:ba:3c:eb:a1:01:
e8:e1:2e:65:3b:78:f0:b8:79:ae:e3:a8:7b:ff:b6:25:a0:73:
ea:f4:b5:f1:77:43:ce:03:94:0d:07:6e:b4:7d:ae:3c:43:bf:
eb:1b:63:d0:99:87:b7:3c:ff:61:8a:90:33:c2:7b:32:31:74:
f2:7d:22:2f:a7:08:77:40:14:72:8f:19:89:d4:8a:37:f3:bc:
0f:6b:30:bb:83:0a:69:cb:21:b0:84:ae:37:19:b0:d9:c4:e3:
39:14:eb:b9:91:3c:09:50:8d:5e:98:cd:a7:da:5a:2b:47:f4:
28:29:41:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:30 2024 by rpki-client on console-ams.rpki-client.org