Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAE47/974D6D7E48F011EA886EB445C4F9AE02/00E256B6834411EC8B56E409C4F9AE02.roa
File: 00E256B6834411EC8B56E409C4F9AE02.roa (raw, json)
Hash identifier: 8ScoP4Wm2doypIaOeR+6jwPQTno+/x4xS7fmJvGum5U=
Subject key identifier: CF:73:F5:63:AB:D3:C9:9F:C6:23:11:52:78:B3:5F:9F:22:5B:BF:B2
Certificate issuer: /CN=A91FAE47/serialNumber=22F303C4AE2BBDCC1E9765106D235E9F32FF54FD
Certificate serial: 0964
Authority key identifier: 22:F3:03:C4:AE:2B:BD:CC:1E:97:65:10:6D:23:5E:9F:32:FF:54:FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IvMDxK4rvcwel2UQbSNenzL_VP0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FAE47/974D6D7E48F011EA886EB445C4F9AE02/00E256B6834411EC8B56E409C4F9AE02.roa
Signing time: Mon 30 Jan 2023 21:48:03 +0000
ROA not before: Mon 30 Jan 2023 21:48:03 +0000
ROA not after: Fri 02 Jun 2023 00:00:00 +0000
asID: 138623
IP address blocks: 103.106.0.0/24 maxlen: 24
103.106.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2404 (0x964)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FAE47/serialNumber=22F303C4AE2BBDCC1E9765106D235E9F32FF54FD
Validity
Not Before: Jan 30 21:48:03 2023 GMT
Not After : Jun 2 00:00:00 2023 GMT
Subject: CN=63d83b12-a4e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:4e:e4:6b:72:e1:4b:24:09:fc:5a:9d:69:2f:
ea:e9:dd:ae:96:98:a6:6f:53:38:f9:65:27:46:14:
8a:a9:ec:77:36:d5:08:d2:3a:c8:96:38:67:f9:d4:
2d:d4:30:b0:d4:26:87:69:7b:4d:82:dc:2c:93:4d:
05:82:27:65:0e:44:ad:f4:3a:99:64:3a:33:45:b5:
fe:86:75:69:92:89:2c:e6:ce:e5:04:c3:55:33:95:
59:e9:f5:e8:ad:c7:9f:e9:a9:be:0b:1f:79:da:81:
03:04:fc:c4:b4:e5:a9:63:6a:99:e7:ca:c9:e9:b8:
d8:87:e0:7c:1b:f2:74:73:b9:c8:15:c2:95:49:e8:
a0:bc:c1:80:f8:8b:b2:94:a8:d6:15:d2:8e:12:3f:
d6:66:fe:1f:e7:92:ed:34:d4:46:d4:57:27:2f:1a:
e5:42:30:ad:c9:6c:67:8b:a7:07:f7:a5:0c:a2:95:
5e:c0:12:a4:9b:45:54:7d:2a:93:76:ef:46:0d:e5:
0a:19:74:bc:1d:c3:96:b7:76:75:0d:29:bf:17:d5:
58:98:c5:c3:ac:8e:5e:12:77:b6:55:67:a2:51:a1:
fa:4a:b0:2e:22:ff:f2:db:18:04:06:fb:ce:3f:ed:
5e:d2:cb:7e:a6:89:26:51:28:ca:25:8f:0e:6d:0e:
87:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:73:F5:63:AB:D3:C9:9F:C6:23:11:52:78:B3:5F:9F:22:5B:BF:B2
X509v3 Authority Key Identifier:
keyid:22:F3:03:C4:AE:2B:BD:CC:1E:97:65:10:6D:23:5E:9F:32:FF:54:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FAE47/974D6D7E48F011EA886EB445C4F9AE02/IvMDxK4rvcwel2UQbSNenzL_VP0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IvMDxK4rvcwel2UQbSNenzL_VP0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAE47/974D6D7E48F011EA886EB445C4F9AE02/00E256B6834411EC8B56E409C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.106.0.0/23
Signature Algorithm: sha256WithRSAEncryption
25:c9:ad:bb:e8:60:6a:2c:33:33:77:14:21:10:57:40:39:22:
2a:bc:10:1f:22:51:5f:af:75:52:0e:c0:32:24:5f:f8:b5:28:
07:50:9d:1f:be:06:bb:27:24:93:e7:5d:ec:69:bd:20:f8:2c:
4d:a3:d7:31:5e:bd:bd:d5:c1:cc:d6:fa:7d:ee:7e:e0:1b:a6:
f4:e9:0e:9a:a3:98:a5:ee:94:7d:17:56:1e:79:74:b3:1d:1e:
65:3a:48:eb:22:be:cf:99:cb:c0:67:3f:ec:92:0f:4e:f2:dd:
6e:82:cb:4f:af:3f:56:e8:c1:d4:a3:c9:bf:df:08:9f:c9:75:
5a:2e:16:0d:f3:3b:31:0f:44:98:92:43:14:3c:93:fb:57:9b:
f8:af:fb:a5:4d:44:b1:49:34:eb:9f:a1:8b:1b:35:4e:68:af:
64:b1:5f:48:0a:1a:22:c3:b5:e5:3b:df:3e:a6:a5:ee:05:69:
95:13:88:4f:f5:19:54:ea:d6:65:8a:a3:d2:34:22:26:8a:d6:
d5:f1:5d:b3:b3:5e:85:3d:0a:36:a7:e4:9d:74:8f:f8:a0:20:
0c:a5:16:91:47:4a:75:c0:2c:47:32:3e:f5:d6:f4:57:22:e8:
11:c2:2b:5f:f5:88:54:d3:b6:0d:1d:0a:47:f7:b9:09:91:2e:
6a:92:e7:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:40 2024 by rpki-client on console-ams.rpki-client.org