Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E94A6/691B1FEAC08B11ECAE218555C4F9AE02/C35C2FFEC08F11ECAE864A71C4F9AE02.roa
File: C35C2FFEC08F11ECAE864A71C4F9AE02.roa (raw, json)
Hash identifier: ZexBph41QPvB4aw3DdJWmRc+EORzhkA+3CF9zEZfFsk=
Subject key identifier: 33:05:19:84:C6:22:17:55:48:61:02:B8:73:D5:58:20:96:DE:5A:17
Certificate issuer: /CN=A91E94A6/serialNumber=BE5EC4B83F26BBA0FFA23B3620944E43FC7211C4
Certificate serial: 01F8
Authority key identifier: BE:5E:C4:B8:3F:26:BB:A0:FF:A2:3B:36:20:94:4E:43:FC:72:11:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vl7EuD8mu6D_ojs2IJROQ_xyEcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E94A6/691B1FEAC08B11ECAE218555C4F9AE02/C35C2FFEC08F11ECAE864A71C4F9AE02.roa
Signing time: Tue 05 Sep 2023 02:33:43 +0000
ROA not before: Tue 05 Sep 2023 02:33:43 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 132836
IP address blocks: 103.98.86.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 504 (0x1f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E94A6/serialNumber=BE5EC4B83F26BBA0FFA23B3620944E43FC7211C4
Validity
Not Before: Sep 5 02:33:43 2023 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=64f69386-3fff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8d:d1:de:37:32:08:2c:7e:99:6b:ae:dc:32:
96:49:93:1b:82:81:17:b0:86:4b:d0:af:be:0a:1a:
b8:7d:c6:24:52:cd:60:69:89:aa:ef:64:82:34:cb:
12:12:03:ef:30:2d:d1:47:76:b8:6d:f3:1a:3b:d4:
c0:e5:72:9b:60:b2:51:a6:49:f3:6b:f4:5c:76:e9:
3f:57:4d:4f:7f:2a:eb:a1:5d:c7:24:d0:2b:46:fb:
89:48:77:75:1f:ef:5e:93:01:63:5d:96:75:de:cf:
33:7f:ca:c9:02:49:d7:1b:6b:92:d8:e9:67:96:7c:
1d:d5:7c:a1:b2:ca:c4:cf:ee:2d:06:99:e1:db:d7:
ca:f6:20:46:f0:04:66:f7:96:51:9e:ab:6f:c6:a8:
a4:29:3a:e7:dc:21:0b:79:00:53:dc:1c:8e:ed:21:
db:35:20:f7:53:e9:61:33:d8:a8:1b:38:fd:8e:b5:
2a:e5:16:09:e2:90:b4:aa:bb:ac:9c:03:4d:02:e2:
21:8c:5b:35:bd:e9:7e:42:81:a3:f7:7d:b4:68:48:
18:e8:46:0b:71:3d:ed:61:93:d5:d0:6d:16:c1:38:
02:7f:a2:9e:cf:7c:64:63:6a:b5:a9:c8:56:82:93:
83:58:24:78:35:50:20:53:a6:bc:18:ce:42:1b:74:
fb:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:05:19:84:C6:22:17:55:48:61:02:B8:73:D5:58:20:96:DE:5A:17
X509v3 Authority Key Identifier:
keyid:BE:5E:C4:B8:3F:26:BB:A0:FF:A2:3B:36:20:94:4E:43:FC:72:11:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E94A6/691B1FEAC08B11ECAE218555C4F9AE02/vl7EuD8mu6D_ojs2IJROQ_xyEcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vl7EuD8mu6D_ojs2IJROQ_xyEcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E94A6/691B1FEAC08B11ECAE218555C4F9AE02/C35C2FFEC08F11ECAE864A71C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.98.86.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:b1:ba:8c:ae:37:ca:95:73:9f:0c:aa:af:76:85:c5:00:fc:
0a:a8:75:94:ce:aa:ee:00:79:13:4e:1d:25:29:66:69:0b:87:
8e:3d:52:08:c6:c5:2f:1f:02:64:84:60:b8:c4:9e:43:cc:3b:
82:b7:bd:4d:b2:62:60:fa:a7:14:66:9b:dc:87:7b:61:04:8a:
09:a9:4c:f8:4b:60:91:14:fb:8d:75:cd:0e:e2:bf:79:d1:c5:
f6:3b:b9:f9:f0:52:f8:24:5b:5e:74:17:5d:d4:47:87:40:a8:
6f:e1:f1:e9:d2:ff:e2:75:01:16:04:76:79:ce:85:ac:4e:59:
74:d7:e5:36:a8:3f:ab:b5:68:b0:be:5d:74:22:da:62:a9:52:
eb:e3:67:99:00:92:7e:14:72:31:d0:7e:9b:ef:76:22:48:48:
63:aa:2d:e5:e5:d3:cd:96:d4:2f:f4:bd:f4:89:dd:1b:75:54:
92:ed:1c:f7:e7:7c:fd:e8:5c:49:b2:b1:fc:38:d8:6c:72:7a:
72:ef:23:c6:ef:4d:42:17:0d:5a:3f:a3:fd:8f:a3:cb:8f:8e:
59:3a:ac:ed:6d:1c:b1:f6:2a:67:87:40:05:3d:28:0c:01:60:
bb:08:53:82:46:93:e5:47:00:c1:99:b5:70:d3:a4:74:de:12:
2d:83:d4:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 22 20:38:27 2023 by rpki-client on console-fra.rpki-client.org