Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148979/135BB182096111ECBC34D84EC4F9AE02/ACC5D8A4096411ECAA327E54C4F9AE02.roa
File: ACC5D8A4096411ECAA327E54C4F9AE02.roa (raw, json)
Hash identifier: xZADdKiNqv6OnG7Sn9R2Q0RniJ5dPsre9ObxJkW2ET4=
Subject key identifier: 91:5F:D9:A7:32:77:DC:A1:A2:11:B7:40:BB:AC:20:5D:6C:8E:97:79
Certificate issuer: /CN=A9148979/serialNumber=29A4AC6B47317B3BE50C399BAAE9CBBC5DF0EE82
Certificate serial: 02
Authority key identifier: 29:A4:AC:6B:47:31:7B:3B:E5:0C:39:9B:AA:E9:CB:BC:5D:F0:EE:82
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KaSsa0cxezvlDDmbqunLvF3w7oI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148979/135BB182096111ECBC34D84EC4F9AE02/ACC5D8A4096411ECAA327E54C4F9AE02.roa
Signing time: Mon 30 Aug 2021 07:34:15 +0000
ROA not before: Mon 30 Aug 2021 07:34:15 +0000
ROA not after: Sat 30 Jul 2022 00:00:00 +0000
asID: 58893
IP address blocks: 103.93.95.0/24 maxlen: 24
103.97.154.0/24 maxlen: 24
103.97.168.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148979/serialNumber=29A4AC6B47317B3BE50C399BAAE9CBBC5DF0EE82
Validity
Not Before: Aug 30 07:34:15 2021 GMT
Not After : Jul 30 00:00:00 2022 GMT
Subject: CN=612c89f6-19e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9f:e6:b6:6c:a5:66:63:20:31:65:02:30:4f:
e6:10:79:c6:fb:6f:b3:48:bb:56:66:74:12:0f:7b:
7e:44:f6:0d:ef:dd:fe:ed:82:63:59:c7:f5:0d:a3:
20:57:02:0c:cf:19:84:df:06:3b:2d:d7:6d:de:85:
3b:03:29:dd:c6:cc:7d:4b:1f:79:f5:44:e7:f0:a6:
6b:10:6a:a3:da:1e:e5:41:94:1a:9a:72:ca:61:bc:
92:af:10:3e:52:e6:69:4b:82:60:58:f6:f9:3e:e8:
cd:f7:71:b7:83:57:75:1a:3c:0e:da:88:b9:92:27:
1a:ec:2a:3f:91:30:60:7c:a6:b6:92:6e:2c:00:1c:
7c:66:de:b8:96:3a:79:78:37:32:bc:3f:8e:0a:33:
85:78:f9:e6:9c:33:b3:27:d2:67:bc:b8:7d:d6:a2:
be:53:5f:72:f8:cb:e0:0e:86:1a:b9:e7:d3:43:1a:
98:73:61:2f:93:0c:e4:d5:8f:bd:18:84:cc:89:00:
56:37:9a:dc:22:cc:f4:84:45:ff:2e:b8:87:bc:c3:
d4:87:9b:ea:bd:e2:8a:e2:97:2c:5c:fd:6c:78:f0:
15:ad:b5:66:13:0d:69:a0:29:32:a2:de:10:62:e5:
a5:ee:c8:aa:33:b6:36:15:83:ec:77:95:ea:d6:f9:
6f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:5F:D9:A7:32:77:DC:A1:A2:11:B7:40:BB:AC:20:5D:6C:8E:97:79
X509v3 Authority Key Identifier:
keyid:29:A4:AC:6B:47:31:7B:3B:E5:0C:39:9B:AA:E9:CB:BC:5D:F0:EE:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148979/135BB182096111ECBC34D84EC4F9AE02/KaSsa0cxezvlDDmbqunLvF3w7oI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KaSsa0cxezvlDDmbqunLvF3w7oI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148979/135BB182096111ECBC34D84EC4F9AE02/ACC5D8A4096411ECAA327E54C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.93.95.0/24
103.97.154.0/24
103.97.168.0/23
Signature Algorithm: sha256WithRSAEncryption
34:d9:42:4f:fa:30:f0:09:a3:c4:af:60:17:c0:e2:4f:cd:45:
3f:85:aa:fc:0c:93:92:13:c6:3d:40:3f:92:a8:f8:b0:e6:7c:
fc:2f:f8:08:48:81:6a:33:21:3b:aa:30:b6:8f:42:be:5f:15:
58:15:cc:03:a7:91:9b:20:12:f6:5e:e0:5a:8e:c8:ee:09:93:
46:88:c6:3d:10:49:da:b3:d8:08:f8:fc:d8:be:f7:b0:a6:e9:
f9:c6:30:b8:e5:69:bb:b8:18:50:d1:c4:32:02:25:79:81:1e:
29:9d:db:a6:9d:79:57:c2:5c:cf:20:f9:36:ab:48:55:47:34:
4b:ce:10:db:d7:68:08:11:68:30:38:c1:74:43:c7:91:78:f3:
ab:53:7d:2d:c3:8d:1d:c0:15:ee:0f:75:f8:43:f2:79:59:fc:
ac:18:ad:71:bd:9e:54:89:b0:be:d9:b2:74:c9:c4:8f:1c:55:
bd:45:bf:54:19:86:cf:42:32:ef:c5:f4:93:00:ff:e7:8a:15:
57:a0:a7:56:4a:a3:06:69:da:b5:93:ce:14:7c:98:a1:38:c6:
44:84:96:73:75:ea:b7:46:03:75:80:5b:50:ef:a1:00:97:85:
3a:2d:ee:c2:a2:35:6d:9b:8f:5f:ee:80:d9:a2:a5:0e:83:b1:
68:f1:2a:ad
-----BEGIN CERTIFICATE-----
MIIFfDCCBGSgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
ODk3OTExMC8GA1UEBRMoMjlBNEFDNkI0NzMxN0IzQkU1MEMzOTlCQUFFOUNCQkM1
REYwRUU4MjAeFw0yMTA4MzAwNzM0MTVaFw0yMjA3MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTYxMmM4OWY2LTE5ZTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDUn+a2bKVmYyAxZQIwT+YQecb7b7NIu1ZmdBIPe35E9g3v3f7tgmNZx/UNoyBX
AgzPGYTfBjst123ehTsDKd3GzH1LH3n1ROfwpmsQaqPaHuVBlBqacsphvJKvED5S
5mlLgmBY9vk+6M33cbeDV3UaPA7aiLmSJxrsKj+RMGB8praSbiwAHHxm3riWOnl4
NzK8P44KM4V4+eacM7Mn0me8uH3Wor5TX3L4y+AOhhq559NDGphzYS+TDOTVj70Y
hMyJAFY3mtwizPSERf8uuIe8w9SHm+q94orilyxc/Wx48BWttWYTDWmgKTKi3hBi
5aXuyKoztjYVg+x3lerW+W9lAgMBAAGjggKhMIICnTAdBgNVHQ4EFgQUkV/ZpzJ3
3KGiEbdAu6wgXWyOl3kwHwYDVR0jBBgwFoAUKaSsa0cxezvlDDmbqunLvF3w7oIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ4OTc5LzEzNUJCMTgyMDk2
MTExRUNCQzM0RDg0RUM0RjlBRTAyL0thU3NhMGN4ZXp2bEREbWJxdW5MdkYzdzdv
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvS2FTc2EwY3hlenZsRERtYnF1bkx2RjN3N29JLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
ODk3OS8xMzVCQjE4MjA5NjExMUVDQkMzNEQ4NEVDNEY5QUUwMi9BQ0M1RDhBNDA5
NjQxMUVDQUEzMjdFNTRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDArBggrBgEFBQcBBwEB/wQc
MBowGAQCAAEwEgMEAGddXwMEAGdhmgMEAWdhqDANBgkqhkiG9w0BAQsFAAOCAQEA
NNlCT/ow8AmjxK9gF8DiT81FP4Wq/AyTkhPGPUA/kqj4sOZ8/C/4CEiBajMhO6ow
to9Cvl8VWBXMA6eRmyAS9l7gWo7I7gmTRojGPRBJ2rPYCPj82L73sKbp+cYwuOVp
u7gYUNHEMgIleYEeKZ3bpp15V8JczyD5NqtIVUc0S84Q29doCBFoMDjBdEPHkXjz
q1N9LcONHcAV7g91+EPyeVn8rBitcb2eVImwvtmydMnEjxxVvUW/VBmGz0Iy78X0
kwD/54oVV6CnVkqjBmnatZPOFHyYoTjGRISWc3Xqt0YDdYBbUO+hAJeFOi3uwqI1
bZuPX+6A2aKlDoOxaPEqrQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:05 2024 by rpki-client on console-fra.rpki-client.org