Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9132275/308C471650D411E7AE665810C4F9AE02/11261E54510D11E796764E1EC4F9AE02.roa
File: 11261E54510D11E796764E1EC4F9AE02.roa (raw, json)
Hash identifier: OCFE5BySzJW889mEgVHA+ycX5we1ZZZuDZrMEmQS1wQ=
Subject key identifier: C9:71:8A:42:57:72:C2:42:1F:D3:9D:4A:BC:75:9B:09:10:4F:38:35
Certificate issuer: /CN=A9132275/serialNumber=48A7ADE78C136B0E7E5079C99BFFB81D21DC7A78
Certificate serial: 14D4
Authority key identifier: 48:A7:AD:E7:8C:13:6B:0E:7E:50:79:C9:9B:FF:B8:1D:21:DC:7A:78
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SKet54wTaw5-UHnJm_-4HSHceng.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132275/308C471650D411E7AE665810C4F9AE02/11261E54510D11E796764E1EC4F9AE02.roa
Signing time: Fri 30 Jul 2021 05:22:30 +0000
ROA not before: Fri 30 Jul 2021 05:22:30 +0000
ROA not after: Fri 30 Sep 2022 00:00:00 +0000
asID: 55408
IP address blocks: 202.70.39.0/24 maxlen: 24
202.70.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5332 (0x14d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132275/serialNumber=48A7ADE78C136B0E7E5079C99BFFB81D21DC7A78
Validity
Not Before: Jul 30 05:22:30 2021 GMT
Not After : Sep 30 00:00:00 2022 GMT
Subject: CN=61038c96-6ae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1e:c4:03:d4:d7:b7:2a:41:6f:83:8e:a2:f5:
f5:e4:ed:b0:5f:84:6a:ba:66:ff:59:20:b9:32:2d:
ed:8d:e5:81:78:57:ae:a3:ca:65:d4:7a:9e:2a:92:
12:14:c4:8b:12:b4:02:84:a1:bb:3a:21:0b:17:93:
be:6f:7a:af:b9:1c:bd:88:e0:f1:82:ce:be:d1:cf:
25:91:0f:4d:30:cd:b9:fc:a8:65:d7:53:26:84:4a:
69:26:5d:6b:84:dc:d1:03:79:88:e5:8a:1c:30:1a:
31:d4:d6:10:a8:aa:42:e5:21:a0:39:bc:52:90:9d:
a3:97:bd:d8:18:ae:34:f9:b8:8c:1d:f5:d5:c4:33:
63:91:0b:32:52:f4:e7:1a:d9:31:e6:21:ed:61:fe:
1e:13:16:b6:c9:72:50:a9:88:26:7c:cf:6e:2f:a4:
5a:5c:73:a2:1e:a7:3c:56:21:cf:06:14:af:47:9e:
2c:06:45:65:b8:70:a0:22:d7:22:4a:f2:af:2f:7e:
25:ab:95:5e:ae:75:0d:08:c5:f9:88:09:6c:43:60:
2a:6c:17:f6:9f:04:3f:96:ba:38:73:c4:74:a4:f3:
f2:2e:58:08:3d:ff:d9:a5:7a:2b:bc:bc:9a:22:4c:
fc:73:81:cc:5a:42:ba:ea:35:fe:2c:d5:fc:f5:e1:
a1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:71:8A:42:57:72:C2:42:1F:D3:9D:4A:BC:75:9B:09:10:4F:38:35
X509v3 Authority Key Identifier:
keyid:48:A7:AD:E7:8C:13:6B:0E:7E:50:79:C9:9B:FF:B8:1D:21:DC:7A:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132275/308C471650D411E7AE665810C4F9AE02/SKet54wTaw5-UHnJm_-4HSHceng.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SKet54wTaw5-UHnJm_-4HSHceng.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132275/308C471650D411E7AE665810C4F9AE02/11261E54510D11E796764E1EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.70.39.0/24
202.70.46.0/24
Signature Algorithm: sha256WithRSAEncryption
89:26:50:e3:d4:d9:75:a8:3a:16:ee:e6:d3:17:eb:70:30:76:
09:2e:09:19:0e:87:22:b8:8f:62:af:3a:a3:d3:25:e5:c8:b5:
b1:43:aa:04:83:d6:2a:62:26:38:c2:02:39:8c:11:a5:56:ff:
ec:1a:8c:19:28:e0:61:f4:50:65:9c:17:55:5b:a3:1c:74:be:
0a:28:20:68:74:be:35:e9:ea:5d:d0:e9:05:02:c4:14:02:ba:
30:06:98:a2:2a:a3:d0:df:57:17:2b:fa:57:c5:b9:a0:a7:8e:
6a:72:87:7c:fc:a5:f1:9f:92:51:31:cc:32:18:58:ad:43:af:
19:99:40:b5:d8:dd:41:55:fe:5d:0a:8f:e9:d8:41:28:5e:c7:
ff:20:80:93:4f:f6:80:31:bd:59:3f:e7:3f:82:1c:7f:fa:49:
f1:19:bd:f1:aa:30:7b:df:c6:d7:68:67:59:31:31:16:a0:8f:
3f:98:21:bc:49:a3:1c:05:1c:4c:7e:1b:6c:09:be:cf:07:21:
6b:0b:25:05:bc:ba:c0:b7:45:69:43:17:a6:0a:83:27:76:6a:
ef:4c:2a:ea:6a:ed:cd:b1:cf:d5:e4:8f:d1:91:6c:f1:8b:ab:
6d:02:67:19:aa:9c:56:b1:b3:cf:5c:db:de:bf:94:72:fb:ff:
4e:fb:49:67
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICFNQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzIyNzUxMTAvBgNVBAUTKDQ4QTdBREU3OEMxMzZCMEU3RTUwNzlDOTlCRkZCODFE
MjFEQzdBNzgwHhcNMjEwNzMwMDUyMjMwWhcNMjIwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02MTAzOGM5Ni02YWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyh7EA9TXtypBb4OOovX15O2wX4Rqumb/WSC5Mi3tjeWBeFeuo8pl1HqeKpIS
FMSLErQChKG7OiELF5O+b3qvuRy9iODxgs6+0c8lkQ9NMM25/Khl11MmhEppJl1r
hNzRA3mI5YocMBox1NYQqKpC5SGgObxSkJ2jl73YGK40+biMHfXVxDNjkQsyUvTn
Gtkx5iHtYf4eExa2yXJQqYgmfM9uL6RaXHOiHqc8ViHPBhSvR54sBkVluHCgItci
SvKvL34lq5VernUNCMX5iAlsQ2AqbBf2nwQ/lro4c8R0pPPyLlgIPf/ZpXorvLya
Ikz8c4HMWkK66jX+LNX89eGhawIDAQABo4ICmzCCApcwHQYDVR0OBBYEFMlxikJX
csJCH9OdSrx1mwkQTzg1MB8GA1UdIwQYMBaAFEinreeME2sOflB5yZv/uB0h3Hp4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjI3NS8zMDhDNDcxNjUw
RDQxMUU3QUU2NjU4MTBDNEY5QUUwMi9TS2V0NTR3VGF3NS1VSG5KbV8tNEhTSGNl
bmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NLZXQ1NHdUYXc1LVVIbkptXy00SFNIY2VuZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzIyNzUvMzA4QzQ3MTY1MEQ0MTFFN0FFNjY1ODEwQzRGOUFFMDIvMTEyNjFFNTQ1
MTBEMTFFNzk2NzY0RTFFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBADKRicDBADKRi4wDQYJKoZIhvcNAQELBQADggEBAIkmUOPU
2XWoOhbu5tMX63AwdgkuCRkOhyK4j2KvOqPTJeXItbFDqgSD1ipiJjjCAjmMEaVW
/+wajBko4GH0UGWcF1Vboxx0vgooIGh0vjXp6l3Q6QUCxBQCujAGmKIqo9DfVxcr
+lfFuaCnjmpyh3z8pfGfklExzDIYWK1DrxmZQLXY3UFV/l0Kj+nYQShex/8ggJNP
9oAxvVk/5z+CHH/6SfEZvfGqMHvfxtdoZ1kxMRagjz+YIbxJoxwFHEx+G2wJvs8H
IWsLJQW8usC3RWlDF6YKgyd2au9MKupq7c2xz9Xkj9GRbPGLq20CZxmqnFaxs89c
296/lHL7/077SWc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:58 2024 by rpki-client on console-fra.rpki-client.org