Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911035A/34E9DC9A7C6611EA8089F351C4F9AE02/B8DD75F67C6711EA822B5B57C4F9AE02.roa
File: B8DD75F67C6711EA822B5B57C4F9AE02.roa (raw, json)
Hash identifier: 38c/gykRRpe74NxpaNReriORCBwNWGwovDFHlfOkdns=
Subject key identifier: 01:26:F7:25:81:6F:A7:FD:95:72:B8:03:D2:C3:4D:19:1C:59:7C:68
Certificate issuer: /CN=A911035A/serialNumber=D293133448582D601C3011CB350BCFB3B6F3B320
Certificate serial: 0422
Authority key identifier: D2:93:13:34:48:58:2D:60:1C:30:11:CB:35:0B:CF:B3:B6:F3:B3:20
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0pMTNEhYLWAcMBHLNQvPs7bzsyA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911035A/34E9DC9A7C6611EA8089F351C4F9AE02/B8DD75F67C6711EA822B5B57C4F9AE02.roa
Signing time: Wed 02 Jun 2021 10:11:23 +0000
ROA not before: Wed 02 Jun 2021 10:11:23 +0000
ROA not after: Sat 30 Jul 2022 00:00:00 +0000
asID: 137549
IP address blocks: 67.213.140.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1058 (0x422)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911035A/serialNumber=D293133448582D601C3011CB350BCFB3B6F3B320
Validity
Not Before: Jun 2 10:11:23 2021 GMT
Not After : Jul 30 00:00:00 2022 GMT
Subject: CN=60b7594a-7c51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ec:7e:2e:b3:dc:d1:76:6c:0e:c5:1a:0e:19:
2c:e7:7f:6d:8f:8f:46:0f:b8:c8:98:ef:dd:25:4a:
92:12:a8:35:04:7d:2f:af:dd:9a:ae:3f:45:4f:c0:
2a:8e:78:8c:ff:a1:c0:6c:55:de:ea:0d:d8:3a:f4:
5b:7d:ff:43:d0:b7:35:17:55:2e:a7:2b:99:31:31:
29:fc:c9:a6:50:ae:fd:5c:63:3c:e6:9a:ea:93:4a:
a3:db:80:e3:eb:9c:f7:d3:cf:5d:b6:23:8f:29:c3:
78:32:49:ac:6e:9c:bc:e1:56:80:3c:ef:f1:9c:be:
ef:d3:e7:3f:81:41:bc:17:d4:96:ac:49:73:e1:48:
c8:33:b0:ea:2a:34:7c:12:03:1d:8c:c6:ad:0e:d9:
d4:b9:07:c7:de:13:b2:d9:d5:b9:19:ef:04:74:c8:
71:38:7f:43:de:b7:a0:a4:3a:d7:f1:b5:3c:35:51:
62:65:bd:12:8c:5f:29:57:c4:d7:35:85:69:6a:7f:
f0:5b:61:0d:0d:8c:d8:ae:62:32:a8:27:e1:53:75:
f9:1c:b8:c7:ed:44:21:46:4a:3a:54:c0:63:ba:3c:
e7:c7:ee:de:4a:03:4c:ae:73:ce:1a:92:47:2a:90:
66:c2:ea:7f:c4:9b:63:0b:80:49:82:f6:f2:f1:4f:
74:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:26:F7:25:81:6F:A7:FD:95:72:B8:03:D2:C3:4D:19:1C:59:7C:68
X509v3 Authority Key Identifier:
keyid:D2:93:13:34:48:58:2D:60:1C:30:11:CB:35:0B:CF:B3:B6:F3:B3:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911035A/34E9DC9A7C6611EA8089F351C4F9AE02/0pMTNEhYLWAcMBHLNQvPs7bzsyA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0pMTNEhYLWAcMBHLNQvPs7bzsyA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911035A/34E9DC9A7C6611EA8089F351C4F9AE02/B8DD75F67C6711EA822B5B57C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
67.213.140.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:70:1a:c0:15:21:54:a9:38:64:ad:81:75:2e:59:16:bb:ce:
45:87:53:0b:5a:be:30:5d:92:7a:c5:f5:9e:0c:93:94:f0:43:
21:21:37:df:0b:b5:22:14:46:c9:46:75:6a:dc:a2:f1:5e:ac:
05:19:3a:ee:0d:12:ce:49:bc:9e:77:d1:ce:87:b8:e2:8e:d2:
c5:12:b4:75:47:b8:a9:00:fc:df:d3:29:19:7f:10:61:8a:ba:
79:47:aa:e5:13:32:00:51:4e:90:77:d0:b4:be:b4:b0:f8:b3:
df:46:25:9e:d8:8e:4d:dd:99:2d:cf:f2:43:b4:78:c5:f7:ba:
6f:ce:dc:d7:10:04:98:c3:85:d1:41:50:d3:11:ee:9d:52:cb:
8e:0b:d7:cf:dc:4c:79:52:b9:2b:09:f8:40:58:3c:de:5a:2d:
3b:93:fc:6e:c8:dc:69:32:c8:76:ff:a4:d5:59:17:70:cd:3b:
50:32:53:0f:fd:58:ec:ee:10:62:51:7f:62:92:c2:f9:26:26:
3f:ad:52:93:49:d4:5b:6f:f6:d5:3d:ca:15:d6:07:ec:f7:16:
8f:d6:15:11:9d:14:23:09:a3:5b:55:16:25:35:36:d8:74:ac:
88:e6:6f:2a:33:d9:ca:10:96:e2:93:55:11:ab:8b:bd:bf:47:
1b:78:1a:3b
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTAzNUExMTAvBgNVBAUTKEQyOTMxMzM0NDg1ODJENjAxQzMwMTFDQjM1MEJDRkIz
QjZGM0IzMjAwHhcNMjEwNjAyMTAxMTIzWhcNMjIwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02MGI3NTk0YS03YzUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwOx+LrPc0XZsDsUaDhks539tj49GD7jImO/dJUqSEqg1BH0vr92arj9FT8Aq
jniM/6HAbFXe6g3YOvRbff9D0Lc1F1UupyuZMTEp/MmmUK79XGM85prqk0qj24Dj
65z3089dtiOPKcN4Mkmsbpy84VaAPO/xnL7v0+c/gUG8F9SWrElz4UjIM7DqKjR8
EgMdjMatDtnUuQfH3hOy2dW5Ge8EdMhxOH9D3regpDrX8bU8NVFiZb0SjF8pV8TX
NYVpan/wW2ENDYzYrmIyqCfhU3X5HLjH7UQhRko6VMBjujznx+7eSgNMrnPOGpJH
KpBmwup/xJtjC4BJgvby8U90BwIDAQABo4IClTCCApEwHQYDVR0OBBYEFAEm9yWB
b6f9lXK4A9LDTRkcWXxoMB8GA1UdIwQYMBaAFNKTEzRIWC1gHDARyzULz7O287Mg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDM1QS8zNEU5REM5QTdD
NjYxMUVBODA4OUYzNTFDNEY5QUUwMi8wcE1UTkVoWUxXQWNNQkhMTlF2UHM3Ynpz
eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzBwTVRORWhZTFdBY01CSExOUXZQczdienN5QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTAzNUEvMzRFOURDOUE3QzY2MTFFQTgwODlGMzUxQzRGOUFFMDIvQjhERDc1RjY3
QzY3MTFFQTgyMkI1QjU3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJD1YwwDQYJKoZIhvcNAQELBQADggEBAA9wGsAVIVSpOGSt
gXUuWRa7zkWHUwtavjBdknrF9Z4Mk5TwQyEhN98LtSIURslGdWrcovFerAUZOu4N
Es5JvJ530c6HuOKO0sUStHVHuKkA/N/TKRl/EGGKunlHquUTMgBRTpB30LS+tLD4
s99GJZ7Yjk3dmS3P8kO0eMX3um/O3NcQBJjDhdFBUNMR7p1Sy44L18/cTHlSuSsJ
+EBYPN5aLTuT/G7I3GkyyHb/pNVZF3DNO1AyUw/9WOzuEGJRf2KSwvkmJj+tUpNJ
1Ftv9tU9yhXWB+z3Fo/WFRGdFCMJo1tVFiU1Nth0rIjmbyoz2coQluKTVRGri72/
Rxt4Gjs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:54 2024 by rpki-client on console-fra.rpki-client.org