Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBBDA/1A1B6058BF3911EAB5CFBD78C4F9AE02/06C7959CBF3B11EA9322207CC4F9AE02.roa
File: 06C7959CBF3B11EA9322207CC4F9AE02.roa (raw, json)
Hash identifier: Y64DkAhcfbmjf00gKfkbwz18lNzi219QJI2tcUviHa4=
Subject key identifier: F3:49:E6:B3:DA:D8:A2:9D:F3:16:CD:4C:22:9A:71:92:AB:44:0A:2D
Certificate issuer: /CN=A91FBBDA/serialNumber=B712D01CE6CDF98CE5C15B87F14C9577A59CCC1B
Certificate serial: 0783
Authority key identifier: B7:12:D0:1C:E6:CD:F9:8C:E5:C1:5B:87:F1:4C:95:77:A5:9C:CC:1B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/txLQHObN-YzlwVuH8UyVd6WczBs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FBBDA/1A1B6058BF3911EAB5CFBD78C4F9AE02/06C7959CBF3B11EA9322207CC4F9AE02.roa
Signing time: Tue 02 Jan 2024 21:59:36 +0000
ROA not before: Tue 02 Jan 2024 21:59:36 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 132827
IP address blocks: 103.28.28.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1923 (0x783)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FBBDA/serialNumber=B712D01CE6CDF98CE5C15B87F14C9577A59CCC1B
Validity
Not Before: Jan 2 21:59:36 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=65948748-77cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9d:4f:12:01:ef:b0:f4:c7:a7:10:65:a9:53:
b7:6d:d6:aa:78:b6:02:26:58:23:52:0d:5c:c1:00:
4c:20:d5:0e:26:e5:fb:5b:9e:50:52:1b:ff:86:02:
64:07:a1:bf:1e:0a:b5:3f:8d:17:a8:90:67:03:c2:
4f:cf:12:d0:11:ed:b5:ce:10:99:8c:71:1b:f8:96:
67:3a:ba:f9:b1:95:ff:a5:c6:60:ef:fc:44:84:6a:
2a:b8:4b:2b:ee:cd:11:36:f4:61:34:66:a8:4c:b2:
53:9a:34:37:f9:3a:da:ec:db:81:46:11:8b:97:34:
70:30:60:a5:8c:e8:ba:2c:12:8d:08:55:d8:cc:23:
f7:dd:44:37:4a:0a:57:0a:d7:f5:62:56:12:0b:16:
73:bd:bd:4a:6b:66:ed:81:dd:50:64:83:00:5d:f2:
66:a0:42:13:a3:d9:59:e5:56:b2:f8:9c:19:47:da:
7c:50:a3:08:5c:3b:bf:8b:da:aa:d9:4a:6c:38:2e:
ed:04:6d:11:d9:18:50:8d:ae:50:57:24:3b:51:fe:
31:d6:30:e8:8e:3b:42:71:d2:76:51:39:e7:8b:06:
6c:f9:76:ea:00:20:60:67:e8:7f:32:d5:a7:5e:cf:
0e:23:e3:5b:95:ab:01:59:6c:f1:77:a2:a5:c3:e2:
a0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:49:E6:B3:DA:D8:A2:9D:F3:16:CD:4C:22:9A:71:92:AB:44:0A:2D
X509v3 Authority Key Identifier:
keyid:B7:12:D0:1C:E6:CD:F9:8C:E5:C1:5B:87:F1:4C:95:77:A5:9C:CC:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FBBDA/1A1B6058BF3911EAB5CFBD78C4F9AE02/txLQHObN-YzlwVuH8UyVd6WczBs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/txLQHObN-YzlwVuH8UyVd6WczBs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBBDA/1A1B6058BF3911EAB5CFBD78C4F9AE02/06C7959CBF3B11EA9322207CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.28.28.0/22
Signature Algorithm: sha256WithRSAEncryption
28:d0:34:35:76:03:6f:7b:78:fb:32:1b:21:cd:4e:e4:fc:2b:
29:3c:71:a5:fe:05:b0:e2:a4:0a:37:e0:36:70:05:47:89:a7:
1d:41:aa:40:1f:59:f2:04:0f:99:53:72:59:f4:5b:98:49:bc:
99:75:66:b4:20:20:a0:c6:88:10:e9:44:cc:c5:9f:ca:a6:9e:
a2:32:30:a7:00:b6:9f:49:9f:c6:32:f9:36:f6:ae:48:c7:ec:
e5:a9:3e:29:6d:38:7d:48:c6:dd:a6:c0:2b:7b:da:4b:d4:5d:
13:08:05:cd:4f:64:ae:db:52:56:50:44:8e:5b:db:a4:c2:91:
29:ef:e9:db:e6:82:b5:6b:04:f7:15:56:f2:7c:f2:a0:38:38:
ce:06:d0:92:80:01:c6:3b:3c:71:dd:4f:10:b8:bb:ee:f0:41:
26:a9:6e:9f:51:69:82:41:20:d0:85:9b:96:94:8e:3c:d5:32:
12:66:66:db:b9:e2:64:03:8d:eb:39:c7:ad:ec:47:57:ae:b9:
66:54:4c:87:d4:d4:69:90:1f:09:b7:ca:71:cd:f4:4c:e1:dc:
0f:46:3d:40:06:c6:ea:84:e0:90:ad:23:74:e7:af:e3:b8:6e:
e7:1a:05:26:db:73:1f:b1:c1:f9:e7:f5:dd:bd:ce:4f:09:69:
c8:8a:f0:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 2 14:46:16 2024 by rpki-client on console-fra.rpki-client.org