Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134956/021D42DC5EEE11EB8413C285C4F9AE02/A781717A5EEF11EBAD62E286C4F9AE02.roa
File: A781717A5EEF11EBAD62E286C4F9AE02.roa (raw, json)
Hash identifier: XQq6X3Qq6RCa45Uq2liS6ol6esa2om3kjuVR8NkEKSY=
Subject key identifier: 53:2D:AB:51:90:6E:A9:CD:3C:FA:73:F0:95:9B:50:48:07:DD:C5:1E
Certificate issuer: /CN=A9134956/serialNumber=859EF77686D73A6439CB21A328A144BF1F3DF69F
Certificate serial: 022C
Authority key identifier: 85:9E:F7:76:86:D7:3A:64:39:CB:21:A3:28:A1:44:BF:1F:3D:F6:9F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZ73dobXOmQ5yyGjKKFEvx899p8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134956/021D42DC5EEE11EB8413C285C4F9AE02/A781717A5EEF11EBAD62E286C4F9AE02.roa
Signing time: Mon 01 Nov 2021 13:49:34 +0000
ROA not before: Mon 01 Nov 2021 13:49:34 +0000
ROA not after: Fri 30 Dec 2022 00:00:00 +0000
asID: 57567
IP address blocks: 103.39.40.0/23 maxlen: 23
103.39.40.0/24 maxlen: 24
103.39.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 556 (0x22c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134956/serialNumber=859EF77686D73A6439CB21A328A144BF1F3DF69F
Validity
Not Before: Nov 1 13:49:34 2021 GMT
Not After : Dec 30 00:00:00 2022 GMT
Subject: CN=617ff06d-c16a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:76:e7:5e:c4:22:57:62:b9:93:b5:cd:55:93:
3b:47:88:d9:61:c2:c4:76:29:a3:13:26:2d:13:cb:
4f:33:c3:12:7a:51:36:f9:96:06:63:f8:0b:8e:05:
51:63:b0:8d:c9:3f:53:53:d8:0d:38:56:ba:e4:05:
2f:73:5c:70:d1:cb:fa:87:eb:23:3d:71:a6:d1:fb:
f1:f1:bb:eb:b2:20:58:c1:7c:6c:45:b7:fe:a3:9e:
4a:df:5c:fe:79:08:0c:ee:63:2c:4d:3a:57:41:db:
a2:db:a1:17:d7:13:ae:ff:14:58:a5:94:7f:f7:a9:
b9:18:67:c8:f2:b8:64:c4:fd:23:4c:92:22:ba:81:
a4:2c:ec:47:1e:eb:8d:6c:77:75:1f:27:14:6f:82:
c4:26:72:fb:ff:0a:51:d7:d6:46:9f:84:32:e9:c9:
bb:ad:66:d9:53:ee:ca:bc:e8:25:c2:de:68:67:8f:
f5:4a:2c:3d:24:de:e1:a1:cc:db:3a:32:88:1a:c5:
4e:7c:fc:69:32:69:4b:fc:b8:5d:1f:59:ca:2d:df:
eb:5f:fe:82:16:16:30:b7:96:31:7d:ba:f2:f8:e6:
88:83:15:e8:c9:22:5e:d7:18:5e:22:09:83:07:5f:
ac:18:74:a7:77:e5:ed:6f:14:24:2a:04:b4:dd:4e:
a3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:2D:AB:51:90:6E:A9:CD:3C:FA:73:F0:95:9B:50:48:07:DD:C5:1E
X509v3 Authority Key Identifier:
keyid:85:9E:F7:76:86:D7:3A:64:39:CB:21:A3:28:A1:44:BF:1F:3D:F6:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134956/021D42DC5EEE11EB8413C285C4F9AE02/hZ73dobXOmQ5yyGjKKFEvx899p8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZ73dobXOmQ5yyGjKKFEvx899p8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134956/021D42DC5EEE11EB8413C285C4F9AE02/A781717A5EEF11EBAD62E286C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.39.40.0/23
Signature Algorithm: sha256WithRSAEncryption
c9:ce:ff:42:e9:86:d9:05:a5:f1:75:f0:3c:fb:24:02:3c:66:
62:00:b3:9d:8c:73:66:55:29:84:f3:02:2d:06:48:1a:88:f7:
ef:53:47:e5:12:b9:fa:26:9d:eb:7a:e7:f8:92:d2:87:b5:0d:
ca:60:77:fd:77:36:41:66:3f:09:20:6f:9a:8f:fa:33:92:e4:
73:3b:fb:20:9e:1f:12:f3:d1:0e:72:2a:1f:d2:8c:4e:f0:11:
f7:7c:64:be:6b:e7:4a:c4:f9:dc:10:e0:f9:91:46:f9:15:9d:
05:fc:9d:cd:1f:75:9c:49:5d:e8:c9:54:1d:c5:bd:f9:56:9c:
71:c5:f5:9c:33:6f:3c:46:9c:87:e6:3c:1d:f1:71:8e:88:05:
7a:6a:c1:cf:a9:56:bf:4c:da:5b:3b:14:8c:60:6b:09:0f:0b:
c4:51:4c:91:36:01:22:a7:51:86:d8:b0:26:12:3e:33:f0:eb:
68:70:04:32:a0:b5:cf:aa:65:a6:92:18:5d:2f:5a:fd:eb:12:
30:50:27:b9:3d:b6:b0:38:e9:6f:4f:83:b9:a2:30:0f:be:e1:
83:22:73:54:00:b9:b0:9e:be:8b:74:e4:6e:88:9f:84:ea:56:
2f:0d:f2:bb:39:e8:1c:84:fe:a5:5f:25:f9:68:6c:94:7e:60:
3b:39:4a:5f
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzQ5NTYxMTAvBgNVBAUTKDg1OUVGNzc2ODZENzNBNjQzOUNCMjFBMzI4QTE0NEJG
MUYzREY2OUYwHhcNMjExMTAxMTM0OTM0WhcNMjIxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02MTdmZjA2ZC1jMTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAunbnXsQiV2K5k7XNVZM7R4jZYcLEdimjEyYtE8tPM8MSelE2+ZYGY/gLjgVR
Y7CNyT9TU9gNOFa65AUvc1xw0cv6h+sjPXGm0fvx8bvrsiBYwXxsRbf+o55K31z+
eQgM7mMsTTpXQdui26EX1xOu/xRYpZR/96m5GGfI8rhkxP0jTJIiuoGkLOxHHuuN
bHd1HycUb4LEJnL7/wpR19ZGn4Qy6cm7rWbZU+7KvOglwt5oZ4/1Siw9JN7hoczb
OjKIGsVOfPxpMmlL/LhdH1nKLd/rX/6CFhYwt5Yxfbry+OaIgxXoySJe1xheIgmD
B1+sGHSnd+XtbxQkKgS03U6jQQIDAQABo4IClTCCApEwHQYDVR0OBBYEFFMtq1GQ
bqnNPPpz8JWbUEgH3cUeMB8GA1UdIwQYMBaAFIWe93aG1zpkOcshoyihRL8fPfaf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDk1Ni8wMjFENDJEQzVF
RUUxMUVCODQxM0MyODVDNEY5QUUwMi9oWjczZG9iWE9tUTV5eUdqS0tGRXZ4ODk5
cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2haNzNkb2JYT21RNXl5R2pLS0ZFdng4OTlwOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzQ5NTYvMDIxRDQyREM1RUVFMTFFQjg0MTNDMjg1QzRGOUFFMDIvQTc4MTcxN0E1
RUVGMTFFQkFENjJFMjg2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnJygwDQYJKoZIhvcNAQELBQADggEBAMnO/0LphtkFpfF1
8Dz7JAI8ZmIAs52Mc2ZVKYTzAi0GSBqI9+9TR+USufomnet65/iS0oe1Dcpgd/13
NkFmPwkgb5qP+jOS5HM7+yCeHxLz0Q5yKh/SjE7wEfd8ZL5r50rE+dwQ4PmRRvkV
nQX8nc0fdZxJXejJVB3FvflWnHHF9ZwzbzxGnIfmPB3xcY6IBXpqwc+pVr9M2ls7
FIxgawkPC8RRTJE2ASKnUYbYsCYSPjPw62hwBDKgtc+qZaaSGF0vWv3rEjBQJ7k9
trA46W9Pg7miMA++4YMic1QAubCevot05G6In4TqVi8N8rs56ByE/qVfJflobJR+
YDs5Sl8=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:36 2023 by rpki-client on console-ams.rpki-client.org