Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD4CC/4C8EBEE2279311EAA00E9724C4F9AE02/DD87AE52FBC011EABD414749C4F9AE02.roa
File: DD87AE52FBC011EABD414749C4F9AE02.roa (raw, json)
Hash identifier: /K5Ttb7ERxO1bKjqi0pZZ7agd6vw6jBytN06KEQ1z5c=
Subject key identifier: 42:17:19:68:83:48:9B:4A:0A:C2:56:57:09:AE:23:BF:41:EB:15:EE
Certificate issuer: /CN=A91FD4CC/serialNumber=77692363E02CD579EC52E18148A72ADEC9968753
Certificate serial: 0705
Authority key identifier: 77:69:23:63:E0:2C:D5:79:EC:52:E1:81:48:A7:2A:DE:C9:96:87:53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d2kjY-As1XnsUuGBSKcq3smWh1M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD4CC/4C8EBEE2279311EAA00E9724C4F9AE02/DD87AE52FBC011EABD414749C4F9AE02.roa
Signing time: Tue 26 Oct 2021 21:06:47 +0000
ROA not before: Tue 26 Oct 2021 21:06:47 +0000
ROA not after: Thu 01 Dec 2022 00:00:00 +0000
asID: 43959
IP address blocks: 103.121.208.0/24 maxlen: 24
103.121.209.0/24 maxlen: 24
2403:71c0::/48 maxlen: 48
2403:71c0:1000::/48 maxlen: 48
2403:71c0:3000::/48 maxlen: 48
2403:71c0:5000::/48 maxlen: 48
2403:71c0:6000::/48 maxlen: 48
2403:71c0:7000::/48 maxlen: 48
2403:71c0:8000::/48 maxlen: 48
2403:71c0:9000::/48 maxlen: 48
2403:71c0:ff00::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1797 (0x705)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD4CC/serialNumber=77692363E02CD579EC52E18148A72ADEC9968753
Validity
Not Before: Oct 26 21:06:47 2021 GMT
Not After : Dec 1 00:00:00 2022 GMT
Subject: CN=61786de6-aee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cf:c8:c3:8e:b4:88:e8:66:3b:3a:13:9c:be:
6e:26:50:4b:a2:2e:c8:13:b6:35:db:ac:b2:43:4a:
da:b8:37:67:10:72:a5:58:09:d2:91:8c:a5:b4:e6:
82:37:40:a8:9e:dd:51:19:2d:da:24:7f:6c:e7:86:
fc:b1:e7:7b:00:ef:d1:40:21:77:02:34:ca:c7:59:
99:57:35:21:3c:c0:e4:5a:83:6c:61:29:82:58:37:
fa:a2:f1:9c:3e:b7:22:17:bf:74:f6:88:50:22:c9:
d1:13:b3:2e:fa:fe:d1:bf:7a:b6:d1:a2:e4:cc:1e:
8d:7b:43:e9:e9:28:cd:71:0c:7b:6e:0f:79:3c:04:
82:16:da:f0:a2:45:60:34:45:c0:f0:80:dc:94:d8:
0b:43:35:30:c3:15:d9:d5:4f:9a:7f:e9:4d:d2:c3:
2e:2c:80:84:9f:b6:8f:af:da:e0:97:e2:7e:fd:56:
eb:f1:9e:9b:e4:c4:20:71:76:3a:7f:94:24:9a:a3:
e2:c2:0b:4b:91:b6:d3:e9:00:69:e7:35:c1:f4:07:
70:67:7d:03:d9:c3:5a:8b:a5:cc:c4:21:18:f0:99:
b7:eb:a0:8f:73:fd:2c:9c:7e:c0:00:5c:da:81:25:
9c:07:85:70:d3:a5:e9:6a:91:8f:00:e9:b7:05:6f:
e1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:17:19:68:83:48:9B:4A:0A:C2:56:57:09:AE:23:BF:41:EB:15:EE
X509v3 Authority Key Identifier:
keyid:77:69:23:63:E0:2C:D5:79:EC:52:E1:81:48:A7:2A:DE:C9:96:87:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD4CC/4C8EBEE2279311EAA00E9724C4F9AE02/d2kjY-As1XnsUuGBSKcq3smWh1M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d2kjY-As1XnsUuGBSKcq3smWh1M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD4CC/4C8EBEE2279311EAA00E9724C4F9AE02/DD87AE52FBC011EABD414749C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.121.208.0/23
IPv6:
2403:71c0::/48
2403:71c0:1000::/48
2403:71c0:3000::/48
2403:71c0:5000::/48
2403:71c0:6000::/48
2403:71c0:7000::/48
2403:71c0:8000::/48
2403:71c0:9000::/48
2403:71c0:ff00::/48
Signature Algorithm: sha256WithRSAEncryption
0c:2f:fa:31:50:bc:34:91:65:9b:ad:84:da:f4:a6:2e:f5:52:
3b:52:ab:f1:a0:da:59:3b:e4:53:24:bf:06:49:84:ca:4e:25:
db:40:13:ed:e8:1d:dc:3c:0b:3f:72:0f:99:1e:cf:72:a6:c6:
c9:ee:a9:53:bc:5f:5e:be:d6:50:fe:2f:7e:a3:51:5b:ff:d6:
0c:3f:c3:68:56:06:22:59:d9:d0:b8:07:1d:cf:ce:1a:ef:39:
1b:be:9e:6e:1f:e1:54:fc:48:00:96:5f:35:52:35:7a:b4:9e:
1e:0c:4d:d0:37:27:e9:85:16:33:24:c5:52:4a:13:de:75:59:
98:99:6c:cf:ac:05:91:3c:b1:e8:88:60:95:3e:92:ac:f3:83:
80:ca:3d:4e:39:f3:41:ab:26:48:e9:ad:79:dc:69:2e:05:70:
56:5f:78:75:80:0d:19:40:ef:8f:98:d0:2a:30:6a:82:94:16:
e1:7a:d6:67:39:fc:f7:69:eb:11:fc:74:53:d7:d1:c1:9a:08:
f0:f1:e6:d6:8c:4e:15:14:b3:64:ce:8e:97:58:63:95:b9:6a:
f5:12:28:7c:3b:7e:05:8c:8b:a6:98:c4:0d:23:3c:d1:99:32:
3c:8b:c8:f1:0e:55:19:60:b3:8b:19:5f:23:49:4b:e6:bb:28:
1e:1d:6b:0b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:40 2024 by rpki-client on console-ams.rpki-client.org