Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D030/2E250032033711E9ACB9DB1FC4F9AE02/14A5CAEA033911E9A4439726C4F9AE02.roa
File: 14A5CAEA033911E9A4439726C4F9AE02.roa (raw, json)
Hash identifier: c83PMVFXVpdf4rM4frleDgCY3DxaqLKyXNzSUDUsMgA=
Subject key identifier: 21:8D:28:F0:0D:6B:15:0E:75:98:29:67:B8:14:7A:6B:97:E6:E3:A7
Certificate issuer: /CN=A912D030/serialNumber=9C7F43D9D8089642BA312AF7A22AE551E76005D0
Certificate serial: 0DD0
Authority key identifier: 9C:7F:43:D9:D8:08:96:42:BA:31:2A:F7:A2:2A:E5:51:E7:60:05:D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nH9D2dgIlkK6MSr3oirlUedgBdA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D030/2E250032033711E9ACB9DB1FC4F9AE02/14A5CAEA033911E9A4439726C4F9AE02.roa
Signing time: Tue 01 Mar 2022 07:05:15 +0000
ROA not before: Tue 01 Mar 2022 07:05:15 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 16509
IP address blocks: 103.126.232.0/24 maxlen: 24
103.126.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3536 (0xdd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D030/serialNumber=9C7F43D9D8089642BA312AF7A22AE551E76005D0
Validity
Not Before: Mar 1 07:05:15 2022 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=621dc5ab-ca36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c4:ed:e2:fb:e2:05:1d:13:67:c4:87:00:e3:
77:b5:b0:f6:90:1e:8d:cf:dc:3e:1c:cc:7a:87:e5:
f1:da:bd:a9:f8:40:61:a8:c2:29:1b:14:18:46:b1:
6f:83:5b:04:bf:b4:5d:36:9f:e9:01:ac:9f:04:f6:
32:64:17:1d:3d:d0:8a:a8:8c:ef:d6:8d:92:5c:26:
1d:d6:29:01:0a:7c:2f:e2:0a:05:1c:fa:5c:64:16:
ed:2d:07:82:a5:2e:58:15:aa:a7:18:ce:90:27:ac:
a5:5b:88:18:b9:47:b9:ca:f7:72:49:b8:fe:7a:8c:
e2:06:42:4f:94:5e:e5:23:e4:4c:c9:44:39:f9:cf:
1e:f6:72:16:4c:b4:e8:6b:7d:a1:e4:33:e6:2f:4f:
f4:f4:dd:a4:b5:27:16:84:67:77:14:2d:58:ee:7c:
44:82:ee:38:c3:dd:6f:a2:80:02:32:5d:8a:80:33:
75:27:63:db:a1:d2:6f:31:e0:89:c0:4e:91:2b:53:
29:b9:22:fc:d1:a3:40:b8:e2:da:2c:0f:26:42:98:
b7:0f:d3:d7:23:cc:9e:c7:61:ff:ff:8d:1b:81:79:
43:0c:74:f7:89:6e:5a:0a:3e:66:7f:3d:ed:5a:62:
43:63:cf:1a:ac:e3:1c:c6:aa:ae:19:b6:f8:fb:2d:
50:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:8D:28:F0:0D:6B:15:0E:75:98:29:67:B8:14:7A:6B:97:E6:E3:A7
X509v3 Authority Key Identifier:
keyid:9C:7F:43:D9:D8:08:96:42:BA:31:2A:F7:A2:2A:E5:51:E7:60:05:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D030/2E250032033711E9ACB9DB1FC4F9AE02/nH9D2dgIlkK6MSr3oirlUedgBdA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nH9D2dgIlkK6MSr3oirlUedgBdA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D030/2E250032033711E9ACB9DB1FC4F9AE02/14A5CAEA033911E9A4439726C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.126.232.0/24
103.126.234.0/24
Signature Algorithm: sha256WithRSAEncryption
82:96:a7:e5:be:61:72:c2:ab:a6:04:2e:a8:d3:5e:9b:dc:15:
4f:a8:2c:b2:58:0e:02:08:73:1e:1d:ca:dd:57:7c:d7:3e:18:
cf:ad:89:fc:6d:bd:5f:8f:92:ed:11:f1:38:1b:28:6f:55:42:
16:3b:a4:11:2c:e6:9a:a7:30:b3:1e:d6:41:4d:81:f1:e4:fe:
95:7a:d1:98:8e:59:d2:a4:28:46:51:77:9b:a3:34:b9:e2:c8:
88:68:28:f9:21:1a:3b:80:4f:74:b0:d2:cd:5f:6b:f7:31:11:
ec:e9:e6:19:05:91:b6:41:cb:da:de:12:2a:69:04:8c:60:1a:
89:70:f9:aa:a3:05:56:be:f1:53:d3:1a:ff:b7:8a:27:0a:d7:
90:a3:15:a3:f5:bf:ba:4f:2e:0f:96:5c:41:bb:15:5c:f7:e5:
43:24:6f:e5:a9:af:90:29:5f:15:91:15:3f:44:44:1b:9b:29:
14:57:de:a3:db:53:d7:9a:1f:3f:5a:8d:b2:71:22:74:2f:cb:
ba:9b:31:14:7e:51:8c:38:f9:3a:de:e4:cb:08:ef:b4:92:5a:
ed:9f:3a:64:78:13:e3:f5:a0:1e:e3:26:cb:c2:e7:85:f6:c8:
a6:9b:6b:16:0c:80:15:20:30:dd:9a:94:38:7c:b5:4d:51:9e:
71:a7:66:61
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICDdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkQwMzAxMTAvBgNVBAUTKDlDN0Y0M0Q5RDgwODk2NDJCQTMxMkFGN0EyMkFFNTUx
RTc2MDA1RDAwHhcNMjIwMzAxMDcwNTE1WhcNMjIwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MjFkYzVhYi1jYTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwsTt4vviBR0TZ8SHAON3tbD2kB6Nz9w+HMx6h+Xx2r2p+EBhqMIpGxQYRrFv
g1sEv7RdNp/pAayfBPYyZBcdPdCKqIzv1o2SXCYd1ikBCnwv4goFHPpcZBbtLQeC
pS5YFaqnGM6QJ6ylW4gYuUe5yvdySbj+eoziBkJPlF7lI+RMyUQ5+c8e9nIWTLTo
a32h5DPmL0/09N2ktScWhGd3FC1Y7nxEgu44w91vooACMl2KgDN1J2PbodJvMeCJ
wE6RK1MpuSL80aNAuOLaLA8mQpi3D9PXI8yex2H//40bgXlDDHT3iW5aCj5mfz3t
WmJDY88arOMcxqquGbb4+y1QxwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFCGNKPAN
axUOdZgpZ7gUemuX5uOnMB8GA1UdIwQYMBaAFJx/Q9nYCJZCujEq96Iq5VHnYAXQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDAzMC8yRTI1MDAzMjAz
MzcxMUU5QUNCOURCMUZDNEY5QUUwMi9uSDlEMmRnSWxrSzZNU3Izb2lybFVlZGdC
ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25IOUQyZGdJbGtLNk1TcjNvaXJsVWVkZ0JkQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkQwMzAvMkUyNTAwMzIwMzM3MTFFOUFDQjlEQjFGQzRGOUFFMDIvMTRBNUNBRUEw
MzM5MTFFOUE0NDM5NzI2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABnfugDBABnfuowDQYJKoZIhvcNAQELBQADggEBAIKWp+W+
YXLCq6YELqjTXpvcFU+oLLJYDgIIcx4dyt1XfNc+GM+tifxtvV+Pku0R8TgbKG9V
QhY7pBEs5pqnMLMe1kFNgfHk/pV60ZiOWdKkKEZRd5ujNLniyIhoKPkhGjuAT3Sw
0s1fa/cxEezp5hkFkbZBy9reEippBIxgGolw+aqjBVa+8VPTGv+3iicK15CjFaP1
v7pPLg+WXEG7FVz35UMkb+Wpr5ApXxWRFT9ERBubKRRX3qPbU9eaHz9ajbJxInQv
y7qbMRR+UYw4+Tre5MsI77SSWu2fOmR4E+P1oB7jJsvC54X2yKabaxYMgBUgMN2a
lDh8tU1RnnGnZmE=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:37 2023 by rpki-client on console-fra.rpki-client.org