Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913856D/237C80F4440311EDA06EE133C4F9AE02/4258B290440811EDB501483EC4F9AE02.roa
File: 4258B290440811EDB501483EC4F9AE02.roa (raw, json)
Hash identifier: 7aMydylj7Rdjy/vR/zz5iAP65UT+ZiBJMR9PAhEZ8l4=
Subject key identifier: 6A:C4:E7:12:9E:57:77:06:26:56:2B:30:58:C7:4C:4C:7F:B6:F7:69
Certificate issuer: /CN=A913856D/serialNumber=F1B2C820F536935A41EE9D6361EE5DD0CE467C87
Certificate serial: 02
Authority key identifier: F1:B2:C8:20:F5:36:93:5A:41:EE:9D:63:61:EE:5D:D0:CE:46:7C:87
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bLIIPU2k1pB7p1jYe5d0M5GfIc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913856D/237C80F4440311EDA06EE133C4F9AE02/4258B290440811EDB501483EC4F9AE02.roa
Signing time: Tue 04 Oct 2022 17:16:18 +0000
ROA not before: Tue 04 Oct 2022 17:16:18 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 55933
IP address blocks: 144.48.8.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913856D/serialNumber=F1B2C820F536935A41EE9D6361EE5DD0CE467C87
Validity
Not Before: Oct 4 17:16:18 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=633c6a62-a068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:e5:a8:c7:b8:00:59:8a:f9:ad:fa:af:c5:8a:
35:c1:bb:0d:68:70:e6:74:85:51:d1:fe:e9:f1:b9:
0f:ef:c2:85:b1:13:c3:22:24:15:f7:dc:ba:37:7a:
73:c9:8f:a5:d5:1b:86:d3:8f:f9:67:31:15:0f:58:
5a:94:c4:0b:74:c7:79:74:a1:07:0b:82:cb:14:d6:
00:20:37:3e:53:cd:8e:ec:59:d5:e0:a6:93:62:df:
c3:66:c3:da:83:1e:8a:4d:95:08:59:ce:86:d0:35:
02:9f:42:3e:ff:da:45:e6:ab:f7:e7:2c:dd:42:d4:
3e:3f:15:72:69:b5:1d:7f:37:2b:80:6e:f7:af:20:
9d:dc:cd:0b:9c:60:0c:a8:86:23:eb:c3:5b:70:ff:
15:3e:60:27:9a:17:4a:98:71:76:e2:d9:e1:f5:d8:
19:1e:1b:53:64:79:2e:ea:10:0d:a2:ae:e9:1b:00:
d4:42:af:33:91:f5:e0:9d:0f:10:63:4c:7b:95:50:
ee:d6:61:ab:02:0b:c8:9b:82:8d:40:93:9c:89:8e:
11:e7:89:8d:dc:52:26:78:41:c3:5b:41:82:32:17:
e9:be:cf:6b:d4:a9:88:64:e0:d3:6d:ea:73:cc:54:
be:f4:7f:f7:ba:0c:75:b9:dc:eb:91:ba:09:4e:4e:
2d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C4:E7:12:9E:57:77:06:26:56:2B:30:58:C7:4C:4C:7F:B6:F7:69
X509v3 Authority Key Identifier:
keyid:F1:B2:C8:20:F5:36:93:5A:41:EE:9D:63:61:EE:5D:D0:CE:46:7C:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913856D/237C80F4440311EDA06EE133C4F9AE02/8bLIIPU2k1pB7p1jYe5d0M5GfIc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bLIIPU2k1pB7p1jYe5d0M5GfIc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913856D/237C80F4440311EDA06EE133C4F9AE02/4258B290440811EDB501483EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
144.48.8.0/22
Signature Algorithm: sha256WithRSAEncryption
96:7d:59:43:73:33:67:58:16:ea:d2:aa:56:08:ab:98:da:e9:
f5:28:a3:e7:18:5b:7e:b7:6b:54:ae:b8:d1:e0:e5:e1:fa:2d:
a6:72:b8:97:b1:97:dd:ac:c6:f5:d5:32:14:30:63:a2:c3:4e:
e5:c3:c1:36:16:79:1e:e2:b6:d2:be:3e:60:56:ff:28:32:14:
6d:bf:8c:f8:a8:5c:11:8d:77:ef:fa:17:28:99:67:5e:ce:8c:
2c:9b:2a:1b:86:4f:32:93:34:3d:c9:51:d8:b9:57:c0:17:b3:
3f:4c:0d:4d:07:c6:18:32:de:54:09:1c:42:83:17:91:c4:8f:
69:4c:2e:a3:a3:1c:50:e6:77:8c:2f:87:d0:57:8b:b6:c4:b2:
67:cd:fa:fd:58:a6:77:9f:a7:2c:43:3d:ef:27:90:d7:8f:44:
89:5f:87:6f:d1:e5:bf:0e:01:f0:22:30:a3:91:13:5b:28:c1:
29:21:68:b0:f1:b1:9b:78:dc:44:47:a4:77:27:57:ac:27:b7:
30:10:29:7d:fa:5e:69:4e:d5:d1:e4:72:e8:3b:04:94:0b:0a:
d8:74:be:f5:dd:ba:3c:c2:53:0e:27:b8:03:65:3b:dc:5a:ef:
f8:49:a0:b8:22:23:5d:ef:9a:59:b9:7a:b0:95:7a:28:34:6f:
02:4e:d7:84
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
ODU2RDExMC8GA1UEBRMoRjFCMkM4MjBGNTM2OTM1QTQxRUU5RDYzNjFFRTVERDBD
RTQ2N0M4NzAeFw0yMjEwMDQxNzE2MThaFw0yMzA3MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTYzM2M2YTYyLWEwNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQD45ajHuABZivmt+q/FijXBuw1ocOZ0hVHR/unxuQ/vwoWxE8MiJBX33Lo3enPJ
j6XVG4bTj/lnMRUPWFqUxAt0x3l0oQcLgssU1gAgNz5TzY7sWdXgppNi38Nmw9qD
HopNlQhZzobQNQKfQj7/2kXmq/fnLN1C1D4/FXJptR1/NyuAbvevIJ3czQucYAyo
hiPrw1tw/xU+YCeaF0qYcXbi2eH12BkeG1NkeS7qEA2irukbANRCrzOR9eCdDxBj
THuVUO7WYasCC8ibgo1Ak5yJjhHniY3cUiZ4QcNbQYIyF+m+z2vUqYhk4NNt6nPM
VL70f/e6DHW53OuRuglOTi2ZAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUasTnEp5X
dwYmViswWMdMTH+292kwHwYDVR0jBBgwFoAU8bLIIPU2k1pB7p1jYe5d0M5GfIcw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4NTZELzIzN0M4MEY0NDQw
MzExRURBMDZFRTEzM0M0RjlBRTAyLzhiTElJUFUyazFwQjdwMWpZZTVkME01R2ZJ
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvOGJMSUlQVTJrMXBCN3AxalllNWQwTTVHZkljLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
ODU2RC8yMzdDODBGNDQ0MDMxMUVEQTA2RUUxMzNDNEY5QUUwMi80MjU4QjI5MDQ0
MDgxMUVEQjUwMTQ4M0VDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEApAwCDANBgkqhkiG9w0BAQsFAAOCAQEAln1ZQ3MzZ1gW6tKq
VgirmNrp9Sij5xhbfrdrVK640eDl4fotpnK4l7GX3azG9dUyFDBjosNO5cPBNhZ5
HuK20r4+YFb/KDIUbb+M+KhcEY137/oXKJlnXs6MLJsqG4ZPMpM0PclR2LlXwBez
P0wNTQfGGDLeVAkcQoMXkcSPaUwuo6McUOZ3jC+H0FeLtsSyZ836/Vimd5+nLEM9
7yeQ149EiV+Hb9Hlvw4B8CIwo5ETWyjBKSFosPGxm3jcREekdydXrCe3MBApffpe
aU7V0eRy6DsElAsK2HS+9d26PMJTDie4A2U73Frv+EmguCIjXe+aWbl6sJV6KDRv
Ak7XhA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:36 2023 by rpki-client on console-ams.rpki-client.org