Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3E1C/433BA6F29D7811E99620087CC4F9AE02/615B509E9D8A11E9ADA31235C4F9AE02.roa
File: 615B509E9D8A11E9ADA31235C4F9AE02.roa (raw, json)
Hash identifier: G+v+o29JoPrVT7PmjtYzcBfeJMq+oaVGZUwQwwf4yZc=
Subject key identifier: 78:42:83:C2:FD:53:BF:F3:68:D0:58:1A:9C:CC:DD:0F:5C:2C:42:32
Certificate issuer: /CN=A91E3E1C/serialNumber=081282BDF7A0919BC6A42809766215F6D4BD7D8F
Certificate serial: 094B
Authority key identifier: 08:12:82:BD:F7:A0:91:9B:C6:A4:28:09:76:62:15:F6:D4:BD:7D:8F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CBKCvfegkZvGpCgJdmIV9tS9fY8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3E1C/433BA6F29D7811E99620087CC4F9AE02/615B509E9D8A11E9ADA31235C4F9AE02.roa
Signing time: Fri 27 Aug 2021 07:35:41 +0000
ROA not before: Fri 27 Aug 2021 07:35:41 +0000
ROA not after: Mon 31 Oct 2022 00:00:00 +0000
asID: 135383
IP address blocks: 103.140.169.0/24 maxlen: 24
103.141.76.0/24 maxlen: 24
2001:df0:ee80::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2379 (0x94b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3E1C/serialNumber=081282BDF7A0919BC6A42809766215F6D4BD7D8F
Validity
Not Before: Aug 27 07:35:41 2021 GMT
Not After : Oct 31 00:00:00 2022 GMT
Subject: CN=612895cd-6c6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e4:14:39:a7:c9:33:29:15:bd:c5:0b:b2:e5:
aa:08:d7:47:76:63:fa:8c:81:eb:f7:5d:d1:c4:09:
a3:a3:3f:62:48:a1:91:d5:b2:d2:e3:79:09:fe:a3:
b1:de:0e:a5:dc:71:8c:e2:d2:6b:40:c6:01:9a:bf:
27:80:c1:81:4e:43:1b:ec:08:80:b3:eb:d5:57:1e:
c0:d8:5b:5d:f9:2b:fa:a8:0b:f0:da:93:d2:c8:67:
f3:13:8f:90:09:00:07:3d:44:53:08:02:72:ac:5c:
99:14:6e:e4:39:15:09:e2:56:cb:fa:33:23:bf:73:
b9:c4:48:5e:f3:c0:fd:c2:08:2e:e3:51:9a:4d:6c:
cd:7a:64:50:63:e1:78:7e:35:03:62:66:75:04:e8:
b2:86:60:d7:2f:bb:a9:c5:1d:b5:6b:32:32:4c:0f:
66:ce:97:0c:c1:00:bc:8f:f1:b4:84:3a:68:de:7a:
cc:34:b5:7a:04:b8:de:96:c9:63:87:31:ef:68:49:
4d:58:75:48:69:7e:33:67:07:91:c6:d1:41:da:39:
cc:ca:01:e5:6d:b1:f6:63:c9:dc:69:ed:59:25:ab:
23:c7:96:23:93:d8:c2:55:0d:04:46:5b:c3:e6:d4:
46:31:f7:61:64:6a:33:4d:77:77:56:37:43:a8:33:
a0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:42:83:C2:FD:53:BF:F3:68:D0:58:1A:9C:CC:DD:0F:5C:2C:42:32
X509v3 Authority Key Identifier:
keyid:08:12:82:BD:F7:A0:91:9B:C6:A4:28:09:76:62:15:F6:D4:BD:7D:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3E1C/433BA6F29D7811E99620087CC4F9AE02/CBKCvfegkZvGpCgJdmIV9tS9fY8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CBKCvfegkZvGpCgJdmIV9tS9fY8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E1C/433BA6F29D7811E99620087CC4F9AE02/615B509E9D8A11E9ADA31235C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.140.169.0/24
103.141.76.0/24
IPv6:
2001:df0:ee80::/48
Signature Algorithm: sha256WithRSAEncryption
89:7b:e8:28:5e:e8:50:1d:e8:79:28:cb:0e:8e:4b:4c:fd:1f:
35:f8:00:48:98:1f:fd:21:bf:9c:8a:95:8a:bf:6d:47:c7:03:
a0:ef:a7:82:0c:cc:dd:91:ce:56:e3:de:19:d7:77:1b:33:4d:
be:06:bb:95:bc:63:a7:74:dc:19:82:e5:46:d3:64:23:e9:88:
90:1a:df:c0:0a:d6:85:44:1a:a6:a0:c8:44:c1:e9:d9:3c:2c:
b3:da:86:f2:65:47:ad:8a:00:57:e4:92:81:d2:51:fb:d9:47:
a1:eb:34:6f:2f:ed:9f:99:45:6e:b6:1a:ee:cd:0c:59:26:41:
ee:49:e2:a8:8c:cc:6c:d0:4d:0e:f8:45:a4:00:94:b1:5c:c7:
c6:cc:ca:f3:75:6a:66:af:b0:71:18:62:ad:43:98:5b:a9:8a:
4e:88:1b:fd:5d:05:f4:a2:29:42:4a:e4:87:bb:e8:38:05:fb:
5d:38:72:9b:b5:2f:a2:9e:a3:27:93:64:00:ce:85:28:eb:ae:
43:7e:82:c1:00:e3:0d:cc:f1:4a:6f:a3:a3:1e:1e:97:2a:43:
06:38:3e:f8:c3:c0:e2:ba:82:46:b3:3a:b9:0f:33:c0:ff:43:
b3:82:41:39:5d:13:b5:d1:94:0f:0b:e5:01:87:36:86:73:6b:
de:fb:05:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:32 2024 by rpki-client on console-ams.rpki-client.org