Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFE3F/4D794BD2176811EAA896FF79C4F9AE02/FBD97C08182311EB85A87020C4F9AE02.roa
File: FBD97C08182311EB85A87020C4F9AE02.roa (raw, json)
Hash identifier: B19NLuQc59qpAURHrVdowcdXUHpgurpMV54naWyGvlk=
Subject key identifier: 94:A6:35:8C:6D:28:0B:41:59:B5:00:BE:B0:CB:31:C1:2C:22:DF:5D
Certificate issuer: /CN=A91FFE3F/serialNumber=859F98591F512D5BD8EE3DDB3F570E883BFF0410
Certificate serial: 07DC
Authority key identifier: 85:9F:98:59:1F:51:2D:5B:D8:EE:3D:DB:3F:57:0E:88:3B:FF:04:10
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZ-YWR9RLVvY7j3bP1cOiDv_BBA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FFE3F/4D794BD2176811EAA896FF79C4F9AE02/FBD97C08182311EB85A87020C4F9AE02.roa
Signing time: Sat 01 Jan 2022 08:36:29 +0000
ROA not before: Sat 01 Jan 2022 08:36:29 +0000
ROA not after: Thu 02 Mar 2023 00:00:00 +0000
asID: 43959
IP address blocks: 103.201.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2012 (0x7dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FFE3F/serialNumber=859F98591F512D5BD8EE3DDB3F570E883BFF0410
Validity
Not Before: Jan 1 08:36:29 2022 GMT
Not After : Mar 2 00:00:00 2023 GMT
Subject: CN=61d0128d-c9f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b5:23:3b:c8:90:83:46:ae:31:02:30:58:59:
0a:67:bf:f2:39:4f:28:44:32:dd:d9:41:92:ec:58:
f9:63:1f:b8:40:27:82:aa:ba:a2:6d:9c:2a:77:00:
b6:1b:9d:c1:7f:d1:47:a5:5e:c7:0b:0f:4a:6e:a8:
0f:84:38:a8:11:07:00:6c:d8:b8:06:6f:5e:0e:94:
5c:57:00:0d:66:e4:22:b2:9f:24:1b:d0:e8:87:1a:
b7:0f:30:de:56:0a:eb:07:55:63:c4:f6:cf:d5:89:
c5:5b:3a:62:84:c9:f3:ea:d6:a1:b4:93:0c:9b:6d:
56:46:e4:8b:56:08:8d:b6:15:68:08:8b:57:52:4c:
c0:f6:ea:f2:ac:5f:f7:f3:97:0a:25:1d:ef:2e:41:
ff:be:92:f7:90:e1:d5:15:ec:5e:ec:74:50:dd:ae:
ed:a1:78:53:82:59:0d:5d:6a:09:77:80:88:07:e0:
31:19:94:9a:7c:dc:70:2e:6e:43:4a:25:88:52:28:
14:74:9a:57:20:5f:3a:6c:8e:89:03:3d:7d:e5:0a:
d2:83:e6:3f:c4:15:a8:e5:9a:d7:6a:00:7e:6e:60:
8e:e3:f0:0a:33:33:88:f3:24:76:85:48:4a:b7:4c:
85:9d:15:00:50:e7:65:fb:61:02:d3:92:19:96:84:
f3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A6:35:8C:6D:28:0B:41:59:B5:00:BE:B0:CB:31:C1:2C:22:DF:5D
X509v3 Authority Key Identifier:
keyid:85:9F:98:59:1F:51:2D:5B:D8:EE:3D:DB:3F:57:0E:88:3B:FF:04:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FFE3F/4D794BD2176811EAA896FF79C4F9AE02/hZ-YWR9RLVvY7j3bP1cOiDv_BBA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZ-YWR9RLVvY7j3bP1cOiDv_BBA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFE3F/4D794BD2176811EAA896FF79C4F9AE02/FBD97C08182311EB85A87020C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.201.128.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:de:e4:95:db:56:53:db:cf:3f:97:79:09:a1:d1:39:d9:15:
4f:82:06:e5:d5:48:c9:b2:04:b4:1e:fc:ee:02:b9:f7:9e:2e:
20:fc:2c:27:99:dc:1d:19:e6:e6:07:99:26:20:cc:ce:77:bf:
c8:b5:ba:7c:90:ea:a1:4b:63:a7:c6:ce:6b:e8:97:2b:d4:d0:
05:f2:1a:81:39:ef:2d:54:fe:00:b8:58:6a:25:e4:b6:53:19:
f5:b5:73:b4:43:60:a1:e3:5b:67:de:5e:83:55:a2:7e:ae:26:
a6:37:d2:b0:a0:3b:6e:fe:58:ee:34:52:7b:cc:39:77:c6:b6:
e5:68:c5:85:1b:d7:4f:fc:ab:ea:11:3e:8a:46:a2:43:6a:e1:
33:12:46:01:2d:24:68:da:f7:02:91:2c:90:33:32:21:3b:18:
0b:98:60:05:93:fb:09:86:2b:4b:f6:40:76:47:e9:48:76:18:
50:7e:0a:76:02:53:c5:4a:7c:f1:29:51:ce:de:6f:ca:92:02:
98:ec:7d:70:3d:ef:bd:48:82:c5:68:99:6c:3c:ac:46:b2:f5:
64:b8:9f:58:35:e2:b2:16:03:6c:b7:f3:d7:87:cb:ad:f3:b2:
87:ff:2a:61:11:9b:58:84:0b:df:25:51:1b:c1:47:51:a3:43:
b8:73:6e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:52 2024 by rpki-client on console-fra.rpki-client.org