Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D91BF/02688B56AD3E11E9801EF62CC4F9AE02/716F58F011EB11EBA58CA43AC4F9AE02.roa
File: 716F58F011EB11EBA58CA43AC4F9AE02.roa (raw, json)
Hash identifier: ZepJXMRyAtQFNxMzx5ySFiXZzj/TZ0JBxZyMPTOZoq4=
Subject key identifier: CD:90:93:3D:66:15:A1:12:6B:9E:D9:D4:D2:12:A3:11:86:F7:B5:4B
Certificate issuer: /CN=A91D91BF/serialNumber=C719EC9FBE5BD9383C789341F5E55BEA8C9B38A5
Certificate serial: 0A92
Authority key identifier: C7:19:EC:9F:BE:5B:D9:38:3C:78:93:41:F5:E5:5B:EA:8C:9B:38:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xxnsn75b2Tg8eJNB9eVb6oybOKU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D91BF/02688B56AD3E11E9801EF62CC4F9AE02/716F58F011EB11EBA58CA43AC4F9AE02.roa
Signing time: Wed 16 Mar 2022 07:25:51 +0000
ROA not before: Wed 16 Mar 2022 07:25:51 +0000
ROA not after: Sun 28 May 2023 00:00:00 +0000
asID: 138570
IP address blocks: 103.109.68.0/24 maxlen: 24
103.109.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2706 (0xa92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D91BF/serialNumber=C719EC9FBE5BD9383C789341F5E55BEA8C9B38A5
Validity
Not Before: Mar 16 07:25:51 2022 GMT
Not After : May 28 00:00:00 2023 GMT
Subject: CN=623190fe-d57a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b1:16:aa:f4:57:6b:22:e4:09:fe:12:73:48:
2f:a8:cd:45:b0:89:ad:c4:c6:f1:fc:e9:d7:ff:fc:
13:fc:ac:a2:8e:23:06:ca:b6:ed:a5:c6:99:db:88:
71:ae:43:0e:a3:c6:a9:d2:0f:af:41:ae:c0:7b:0b:
56:72:c9:86:00:91:4a:0b:a1:89:a4:ca:64:6a:60:
8b:48:d3:cd:2a:a9:03:17:7c:70:5d:b8:05:27:5c:
c0:f2:13:30:2c:93:9d:5d:9b:05:cf:b6:ed:a9:8d:
e1:63:87:93:0c:f6:cc:36:93:61:96:37:de:6b:32:
c0:53:25:6a:ce:03:e7:0c:fa:99:aa:5b:89:7c:44:
85:9a:88:0a:1d:a3:47:be:6c:64:ed:6f:e2:0e:37:
f4:9b:31:e6:3e:43:4b:44:e9:7d:06:6f:61:73:77:
95:66:89:a3:25:11:52:85:cd:9c:50:6d:f5:eb:da:
11:bb:76:0e:39:88:13:bb:ff:2b:e1:3a:0d:c2:8e:
be:be:02:d0:06:28:6d:de:8f:b3:c8:db:32:a6:55:
4e:b1:91:9d:5b:39:a6:f0:95:3e:c5:32:a6:7a:cb:
fc:f8:b0:d6:8f:85:a7:f7:51:df:1f:c3:79:17:ca:
82:b9:73:fa:93:9d:8e:b3:0a:6a:2b:6a:f3:b3:d4:
2f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:90:93:3D:66:15:A1:12:6B:9E:D9:D4:D2:12:A3:11:86:F7:B5:4B
X509v3 Authority Key Identifier:
keyid:C7:19:EC:9F:BE:5B:D9:38:3C:78:93:41:F5:E5:5B:EA:8C:9B:38:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D91BF/02688B56AD3E11E9801EF62CC4F9AE02/xxnsn75b2Tg8eJNB9eVb6oybOKU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xxnsn75b2Tg8eJNB9eVb6oybOKU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D91BF/02688B56AD3E11E9801EF62CC4F9AE02/716F58F011EB11EBA58CA43AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.109.68.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:b5:30:5e:b1:4d:df:cf:d5:e4:6b:c2:9e:bb:c5:f4:a2:5b:
1d:bd:56:d1:d6:d5:66:89:53:7b:ae:76:c4:54:55:5d:0f:1c:
c7:87:ef:bc:e5:e5:36:cb:ce:2a:a0:ab:de:ea:d4:6f:fa:44:
a0:3f:35:6a:56:7f:9b:ce:f9:a5:7a:a2:52:27:9a:5b:6d:e0:
8b:cd:f3:51:96:3b:96:a8:b8:25:6a:28:15:c5:3c:b0:ab:27:
5e:f3:42:7f:e6:2c:8e:88:d0:83:e8:a1:8f:c6:4e:98:b8:81:
01:f5:6f:e4:45:1f:86:76:58:27:7c:59:2d:8c:9c:eb:2a:8f:
99:a3:04:f2:63:0c:5b:bd:df:93:fd:0d:63:ad:5d:08:5b:e9:
e3:4b:33:7f:3b:43:7a:34:1d:b2:1d:a7:2d:61:2d:e1:84:5c:
d3:8e:4f:89:67:c6:e7:2b:9c:57:5c:ad:23:4f:6b:ee:19:5d:
0a:b1:cf:77:61:01:db:2f:8e:01:f5:41:19:f4:ed:b1:cf:11:
2a:d1:63:fa:d3:a0:72:c6:e0:d4:d7:c3:97:c5:77:89:f1:37:
7a:b4:14:b6:55:20:56:a8:6a:7b:09:fe:2d:41:f4:bf:ca:54:
91:ab:a6:63:ab:a0:b3:a7:ae:a4:74:9c:17:8a:5d:92:6c:3d:
e6:dc:34:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:07 2023 by rpki-client on console-ams.rpki-client.org