Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBECF/C064F8C8183C11EBB945EC0BC4F9AE02/79352EC8C83111EB9207DA5DC4F9AE02.roa
File: 79352EC8C83111EB9207DA5DC4F9AE02.roa (raw, json)
Hash identifier: myA5sTmG1XZ3Bk5vguDisDus/lueT7PgGlocq2VV/jc=
Subject key identifier: EB:05:51:8E:92:54:EA:49:01:83:61:7E:A4:1D:02:A3:03:1E:95:E2
Certificate issuer: /CN=A91FBECF/serialNumber=BF44A2B72233FF48BA793028AC5FAFA02ADCFFD0
Certificate serial: 05A1
Authority key identifier: BF:44:A2:B7:22:33:FF:48:BA:79:30:28:AC:5F:AF:A0:2A:DC:FF:D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v0SityIz_0i6eTAorF-voCrc_9A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FBECF/C064F8C8183C11EBB945EC0BC4F9AE02/79352EC8C83111EB9207DA5DC4F9AE02.roa
Signing time: Thu 08 Dec 2022 12:31:10 +0000
ROA not before: Thu 08 Dec 2022 12:31:10 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 59243
IP address blocks: 103.254.36.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1441 (0x5a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FBECF/serialNumber=BF44A2B72233FF48BA793028AC5FAFA02ADCFFD0
Validity
Not Before: Dec 8 12:31:10 2022 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=6391d90e-5b30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d8:df:38:ea:9b:83:b3:fb:78:d9:8c:9c:9f:
18:db:a7:19:95:14:ff:ee:b4:d8:f4:76:90:16:39:
f1:b9:82:bc:97:f9:16:d4:cc:f5:e0:99:fb:a2:88:
fa:9c:89:3b:8d:b0:f8:96:ac:10:00:da:c6:fb:e9:
cf:44:65:3e:0f:0d:78:c5:58:25:c4:01:46:54:31:
4d:c8:50:3f:c1:03:18:4d:db:90:62:d9:3f:30:56:
98:41:77:0d:b0:f6:6d:d2:4c:69:06:d2:e2:d2:3a:
2a:59:6a:1d:94:2d:d0:f1:82:4c:96:54:98:54:cc:
fd:35:04:a7:11:ba:95:7d:53:58:28:14:39:76:fa:
84:9f:b9:b1:b3:a1:66:6d:f0:50:61:bc:ee:9e:6e:
0c:ed:56:d0:4c:dd:4e:f9:f4:32:fe:1b:78:84:3a:
f7:8e:48:89:4b:4d:b0:2b:c3:45:99:4f:0e:12:2f:
16:4f:b3:c2:a5:4f:50:d7:b2:52:c8:ed:c2:13:6b:
e5:b6:a3:7c:ad:dd:fe:79:0c:1b:eb:ac:49:6c:75:
ba:5e:db:4b:f6:88:ff:1b:52:f9:96:e4:71:d0:76:
54:58:39:21:dd:76:ad:8a:ee:50:41:ff:8a:45:f5:
d8:57:e0:87:57:9f:c5:50:47:8c:78:b1:44:89:d3:
4f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:05:51:8E:92:54:EA:49:01:83:61:7E:A4:1D:02:A3:03:1E:95:E2
X509v3 Authority Key Identifier:
keyid:BF:44:A2:B7:22:33:FF:48:BA:79:30:28:AC:5F:AF:A0:2A:DC:FF:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FBECF/C064F8C8183C11EBB945EC0BC4F9AE02/v0SityIz_0i6eTAorF-voCrc_9A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v0SityIz_0i6eTAorF-voCrc_9A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBECF/C064F8C8183C11EBB945EC0BC4F9AE02/79352EC8C83111EB9207DA5DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.254.36.0/22
Signature Algorithm: sha256WithRSAEncryption
60:bd:99:19:7a:4a:7d:14:e0:da:19:5e:2e:f9:b7:d3:21:59:
00:e1:2d:28:4b:19:b3:10:f6:59:b8:71:cb:29:54:d8:23:9a:
25:48:5c:78:60:94:20:d8:16:1b:c1:b1:34:28:d8:06:26:04:
b4:4c:f7:02:1e:0a:bc:ba:e7:f2:4b:94:2f:bd:04:7b:e3:e2:
53:09:39:08:63:4b:f8:68:14:ec:90:b4:b9:dc:77:79:da:6f:
5d:62:da:aa:56:02:4e:66:dd:25:6f:a4:c4:12:d2:61:62:c6:
a1:18:10:ba:65:dd:9d:f7:ea:f7:79:d2:c6:42:b1:f2:9a:2e:
cb:07:2b:46:25:b0:b9:6c:99:fc:f3:c4:cf:86:cc:30:5a:62:
3e:a7:b6:1a:85:c0:a9:a2:75:a4:8f:4c:5b:6c:f3:b8:8b:cb:
92:76:ee:e4:1b:11:93:04:2c:4a:e2:99:2c:1c:5e:fd:19:24:
ca:35:6a:21:7a:96:7a:a8:e3:85:6b:9e:e0:77:b9:1e:2a:1c:
a9:21:2d:23:14:5a:61:10:4a:31:06:a9:d6:aa:29:c4:59:80:
ea:36:bc:27:00:2e:8d:46:91:d1:8d:09:dc:46:97:c4:10:c0:
b7:1c:54:c9:47:e6:e6:ef:b7:4d:83:56:3e:37:aa:3a:7b:bf:
19:7a:27:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:52 2024 by rpki-client on console-fra.rpki-client.org