Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911998B/4DC29F16C5AE11E78BE6842EC4F9AE02/034A46564E0911EA90DD2E0BC4F9AE02.roa
File: 034A46564E0911EA90DD2E0BC4F9AE02.roa (raw, json)
Hash identifier: ioK9rUYAZZ36TLMH5yOz5aFG4516uyo1sIlarYeAUac=
Subject key identifier: 46:3E:69:88:7E:DB:68:50:EF:6E:47:6F:57:47:7D:A6:FE:18:1A:D9
Certificate issuer: /CN=A911998B/serialNumber=3568AF5783C7A1C78CC9AA78DB2E9CC3AE45F780
Certificate serial: 1460
Authority key identifier: 35:68:AF:57:83:C7:A1:C7:8C:C9:AA:78:DB:2E:9C:C3:AE:45:F7:80
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NWivV4PHoceMyap42y6cw65F94A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911998B/4DC29F16C5AE11E78BE6842EC4F9AE02/034A46564E0911EA90DD2E0BC4F9AE02.roa
Signing time: Sun 03 Apr 2022 17:43:47 +0000
ROA not before: Sun 03 Apr 2022 17:43:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 139021
IP address blocks: 103.24.248.0/23 maxlen: 23
103.24.250.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5216 (0x1460)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911998B/serialNumber=3568AF5783C7A1C78CC9AA78DB2E9CC3AE45F780
Validity
Not Before: Apr 3 17:43:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6249dcd2-767d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:96:e8:f1:24:40:02:b8:20:3d:b1:8c:e6:f9:
38:e8:eb:04:b5:9a:e7:ca:4b:5e:b4:a7:40:db:07:
fa:81:a8:91:59:29:ff:35:47:12:9c:be:e9:77:a4:
b8:11:b3:c9:e4:b6:81:8e:f2:ca:27:a2:52:42:9f:
6b:fa:13:ca:48:5b:4c:7a:55:5e:e8:f1:8a:7f:63:
55:35:d1:68:34:26:18:6d:ba:d1:47:17:4f:78:a1:
1d:37:e7:10:01:e2:16:44:bd:2d:5e:c3:e6:5c:4a:
b1:90:34:23:81:01:f4:b9:e7:38:ed:5d:69:d9:76:
fe:f8:25:38:2e:20:c2:7d:cd:f3:6b:08:69:07:4c:
1b:50:16:6f:e7:73:6b:97:d3:f3:b8:e4:84:de:7d:
7a:85:ce:7f:49:74:b3:aa:70:8b:58:8e:d4:ad:99:
81:a7:2d:f9:bf:ce:ff:8b:20:70:c6:30:90:d5:96:
b1:a4:2c:99:5b:43:d2:28:fb:88:d8:d7:c6:41:99:
08:97:9f:9b:da:3a:b2:8b:5a:1d:59:c6:c2:2c:0a:
72:5d:ce:42:58:8d:b8:01:99:9f:c4:eb:90:90:e6:
25:6a:5b:54:10:7c:3e:52:ab:92:8e:de:2f:34:6f:
95:0c:92:6e:49:39:e0:bc:6b:16:49:67:5e:9d:d5:
73:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:3E:69:88:7E:DB:68:50:EF:6E:47:6F:57:47:7D:A6:FE:18:1A:D9
X509v3 Authority Key Identifier:
keyid:35:68:AF:57:83:C7:A1:C7:8C:C9:AA:78:DB:2E:9C:C3:AE:45:F7:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911998B/4DC29F16C5AE11E78BE6842EC4F9AE02/NWivV4PHoceMyap42y6cw65F94A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NWivV4PHoceMyap42y6cw65F94A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911998B/4DC29F16C5AE11E78BE6842EC4F9AE02/034A46564E0911EA90DD2E0BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.24.248.0/22
Signature Algorithm: sha256WithRSAEncryption
44:29:39:60:e7:83:d2:4e:93:4e:7f:07:64:ff:8e:3e:74:96:
3b:ec:65:64:fa:e5:89:36:f5:2f:66:52:63:1a:b7:91:59:63:
0f:8e:82:b1:38:c5:ad:22:95:01:af:df:16:7c:db:84:65:95:
11:cb:d4:0d:1c:bf:df:df:05:1b:ed:bd:17:15:f4:12:de:6c:
d2:4b:1b:7a:c3:82:66:98:39:09:63:14:a9:37:18:ba:2e:6e:
5b:64:25:71:42:0f:af:33:10:60:b3:e1:e9:75:b7:ee:54:1d:
5f:ca:d6:a8:ac:11:88:a8:16:bb:2a:6d:b5:00:18:b6:14:d2:
4e:26:fa:72:01:09:c1:96:41:ec:2b:6b:f2:32:93:ae:65:33:
bc:03:59:83:7a:e6:5b:bd:29:0d:ce:08:97:8a:a2:24:f7:2d:
56:4f:19:a7:bd:e7:f3:d3:01:f9:8b:9f:9f:39:7a:7b:8f:7a:
de:69:ed:25:91:83:56:0d:7d:d9:81:ef:93:63:bf:f6:6a:ec:
c4:f9:a2:6c:4a:39:d5:ab:b6:9a:29:ff:5a:65:75:7c:7a:d9:
72:9f:91:1f:27:6b:a7:17:84:ec:aa:82:0d:87:58:a5:1d:88:
29:44:ee:03:32:07:c1:14:b8:20:af:c0:92:d2:eb:eb:a8:9b:
42:05:94:0c
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICFGAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTk5OEIxMTAvBgNVBAUTKDM1NjhBRjU3ODNDN0ExQzc4Q0M5QUE3OERCMkU5Q0Mz
QUU0NUY3ODAwHhcNMjIwNDAzMTc0MzQ3WhcNMjMwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MjQ5ZGNkMi03NjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvpbo8SRAArggPbGM5vk46OsEtZrnyktetKdA2wf6gaiRWSn/NUcSnL7pd6S4
EbPJ5LaBjvLKJ6JSQp9r+hPKSFtMelVe6PGKf2NVNdFoNCYYbbrRRxdPeKEdN+cQ
AeIWRL0tXsPmXEqxkDQjgQH0uec47V1p2Xb++CU4LiDCfc3zawhpB0wbUBZv53Nr
l9PzuOSE3n16hc5/SXSzqnCLWI7UrZmBpy35v87/iyBwxjCQ1ZaxpCyZW0PSKPuI
2NfGQZkIl5+b2jqyi1odWcbCLApyXc5CWI24AZmfxOuQkOYlaltUEHw+UquSjt4v
NG+VDJJuSTngvGsWSWdendVzDQIDAQABo4IClTCCApEwHQYDVR0OBBYEFEY+aYh+
22hQ725Hb1dHfab+GBrZMB8GA1UdIwQYMBaAFDVor1eDx6HHjMmqeNsunMOuRfeA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTk4Qi80REMyOUYxNkM1
QUUxMUU3OEJFNjg0MkVDNEY5QUUwMi9OV2l2VjRQSG9jZU15YXA0Mnk2Y3c2NUY5
NEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05XaXZWNFBIb2NlTXlhcDQyeTZjdzY1Rjk0QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTk5OEIvNERDMjlGMTZDNUFFMTFFNzhCRTY4NDJFQzRGOUFFMDIvMDM0QTQ2NTY0
RTA5MTFFQTkwREQyRTBCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJnGPgwDQYJKoZIhvcNAQELBQADggEBAEQpOWDng9JOk05/
B2T/jj50ljvsZWT65Yk29S9mUmMat5FZYw+OgrE4xa0ilQGv3xZ824RllRHL1A0c
v9/fBRvtvRcV9BLebNJLG3rDgmaYOQljFKk3GLoubltkJXFCD68zEGCz4el1t+5U
HV/K1qisEYioFrsqbbUAGLYU0k4m+nIBCcGWQewra/Iyk65lM7wDWYN65lu9KQ3O
CJeKoiT3LVZPGae95/PTAfmLn585enuPet5p7SWRg1YNfdmB75Njv/Zq7MT5omxK
OdWrtpop/1pldXx62XKfkR8na6cXhOyqgg2HWKUdiClE7gMyB8EUuCCvwJLS6+uo
m0IFlAw=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:36 2023 by rpki-client on console-fra.rpki-client.org