Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8340/444486A8833711EB9B491025C4F9AE02/74E7C188833911EB891A6727C4F9AE02.roa
File: 74E7C188833911EB891A6727C4F9AE02.roa (raw, json)
Hash identifier: bvW6ZJ8heJvycs6PwZTAyFG/5vcjSgymYVEy5zAacPA=
Subject key identifier: 42:67:D9:64:A0:26:F6:AE:3C:EB:E0:68:EA:D8:87:40:8E:C2:36:D8
Certificate issuer: /CN=A91E8340/serialNumber=BD9F63CC7A1E10E5223102CBAE6C292442EE856C
Certificate serial: 02
Authority key identifier: BD:9F:63:CC:7A:1E:10:E5:22:31:02:CB:AE:6C:29:24:42:EE:85:6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZ9jzHoeEOUiMQLLrmwpJELuhWw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8340/444486A8833711EB9B491025C4F9AE02/74E7C188833911EB891A6727C4F9AE02.roa
Signing time: Fri 12 Mar 2021 13:47:17 +0000
ROA not before: Fri 12 Mar 2021 13:47:17 +0000
ROA not after: Sun 01 May 2022 00:00:00 +0000
asID: 136479
IP address blocks: 103.161.156.0/24 maxlen: 24
103.161.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8340/serialNumber=BD9F63CC7A1E10E5223102CBAE6C292442EE856C
Validity
Not Before: Mar 12 13:47:17 2021 GMT
Not After : May 1 00:00:00 2022 GMT
Subject: CN=604b70e4-0a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ce:fc:b8:91:31:af:f2:71:fa:cc:8b:24:69:
af:1c:48:4e:b2:ee:7c:ee:45:f9:44:67:4d:35:c6:
56:aa:b7:88:df:b5:fc:9f:27:6d:ad:b1:3a:3e:3c:
23:e8:b4:77:4f:33:1f:a6:41:80:9d:7f:f1:02:83:
0e:3e:e4:2d:c7:f5:95:94:3a:73:cd:c3:81:be:72:
d2:58:78:91:aa:41:11:07:8c:b0:df:f6:ab:ad:1d:
e0:be:60:02:b1:b2:94:58:58:bb:2c:23:88:97:02:
51:a3:9e:d4:22:51:cd:40:ab:39:fc:2d:2d:f7:26:
21:14:f4:74:cd:c1:8d:f9:27:b7:97:b8:de:ef:53:
f7:aa:10:17:ee:64:f3:e5:05:de:db:ef:d3:13:2e:
a3:fc:32:18:e7:d2:ab:2f:d4:e9:b7:58:04:e0:9a:
68:39:f3:79:78:4e:ac:ce:13:f8:f5:37:17:28:20:
5f:f6:46:8d:ae:51:e0:63:ea:df:f0:62:8b:35:68:
35:49:c1:a5:c3:c8:6d:3d:c7:72:3e:fc:da:21:f1:
81:c2:18:c9:e0:10:cc:af:b4:13:0f:9c:f8:27:9d:
b1:d6:1d:64:9f:e9:50:86:b1:d4:ed:28:5e:6f:1c:
a0:1d:03:da:47:64:cd:fe:90:2b:0a:dc:d0:76:20:
5e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:67:D9:64:A0:26:F6:AE:3C:EB:E0:68:EA:D8:87:40:8E:C2:36:D8
X509v3 Authority Key Identifier:
keyid:BD:9F:63:CC:7A:1E:10:E5:22:31:02:CB:AE:6C:29:24:42:EE:85:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8340/444486A8833711EB9B491025C4F9AE02/vZ9jzHoeEOUiMQLLrmwpJELuhWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZ9jzHoeEOUiMQLLrmwpJELuhWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8340/444486A8833711EB9B491025C4F9AE02/74E7C188833911EB891A6727C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.161.156.0/23
Signature Algorithm: sha256WithRSAEncryption
95:59:99:28:c5:a4:f1:fa:48:7b:34:ad:c4:b9:fa:a7:f4:74:
72:fe:99:f1:1b:00:fb:d3:f8:de:d5:90:76:a2:72:43:a7:50:
c5:cd:d3:50:fe:ea:d3:8f:87:ac:d8:eb:d9:7b:6b:40:eb:88:
1a:f1:2b:8d:00:de:f7:10:70:2b:f3:fe:68:33:c3:3a:02:22:
f7:ee:03:cc:c7:e0:21:74:39:d0:67:e7:0a:7e:c1:78:ce:4c:
77:80:40:2b:0a:29:5d:12:fb:09:fa:c6:9d:7f:69:55:89:e2:
84:eb:c6:a8:ec:df:a2:8e:46:56:8d:c2:a6:6a:e4:31:0e:08:
28:b8:c0:d2:f1:ba:cc:20:9f:b9:b6:44:c1:d2:0e:9e:0a:f9:
e2:11:51:63:5d:a8:8c:1a:a3:e2:39:69:a1:7d:89:83:d1:3f:
38:d9:75:c4:7b:29:fd:f7:1e:51:a1:78:67:ba:1a:86:9d:d1:
86:c3:c3:4c:04:e3:52:47:48:77:f7:5b:76:2e:ad:f0:ee:1a:
92:a0:c2:87:01:d8:71:1d:82:55:de:52:e3:67:dc:3b:24:8f:
2c:d5:8c:cf:93:9e:46:11:ec:8c:82:5e:7d:8f:47:91:f5:7e:
30:58:75:36:e0:6b:55:a1:ec:24:79:ee:15:45:77:93:9c:31:
be:24:b5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:36 2024 by rpki-client on console-ams.rpki-client.org