Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914CB61/4E166A20B10311ECB9141312C4F9AE02/6285F7A4C44B11ECA77F776BC4F9AE02.roa
File: 6285F7A4C44B11ECA77F776BC4F9AE02.roa (raw, json)
Hash identifier: bLfZNEv+xZchHSvMRfz3WDaZJt7HHBQeiFOZt05XlAc=
Subject key identifier: F1:68:8F:81:40:AE:B8:92:33:48:4B:F1:92:D1:C9:DF:87:F7:88:B1
Certificate issuer: /CN=A914CB61/serialNumber=030A1EC7FC0CE9FA1F24919B96EA64D9339AF7AB
Certificate serial: 36
Authority key identifier: 03:0A:1E:C7:FC:0C:E9:FA:1F:24:91:9B:96:EA:64:D9:33:9A:F7:AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Awoex_wM6fofJJGblupk2TOa96s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914CB61/4E166A20B10311ECB9141312C4F9AE02/6285F7A4C44B11ECA77F776BC4F9AE02.roa
Signing time: Mon 25 Apr 2022 03:54:20 +0000
ROA not before: Mon 25 Apr 2022 03:54:20 +0000
ROA not after: Fri 30 Sep 2022 00:00:00 +0000
asID: 132422
IP address blocks: 150.129.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54 (0x36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914CB61/serialNumber=030A1EC7FC0CE9FA1F24919B96EA64D9339AF7AB
Validity
Not Before: Apr 25 03:54:20 2022 GMT
Not After : Sep 30 00:00:00 2022 GMT
Subject: CN=62661b6c-e28d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:e4:18:f4:9c:c1:7d:ef:fc:ba:49:3e:00:3d:
58:41:af:11:e3:11:97:3c:93:d1:5e:7c:a0:0b:c9:
41:aa:73:94:71:bc:fe:c5:8f:9f:b8:ff:ba:92:f9:
9e:71:68:20:27:af:7c:b6:15:3e:ca:71:82:de:32:
d5:51:df:53:18:b1:23:bc:93:99:21:2b:31:54:cb:
d1:1f:a7:da:25:8f:c9:15:d8:f1:79:37:13:73:12:
c2:af:5d:f9:46:1e:d2:68:1c:5f:97:63:e3:a3:6f:
bb:9d:1d:90:9f:26:f0:ec:51:69:89:8a:21:d8:1e:
f6:42:be:75:1b:50:37:e1:82:9e:95:d2:aa:fb:5a:
24:89:8e:47:87:6b:72:eb:02:7b:81:25:a7:4c:b4:
18:5e:38:ef:f6:cc:06:71:25:25:e3:9f:1e:6e:cd:
07:90:55:16:c0:2e:2e:67:ef:9c:57:09:6c:59:dd:
f1:b7:4e:e7:a2:1d:87:32:c9:c9:f0:5a:24:49:13:
b8:d5:79:6f:79:ff:e1:ff:b3:38:91:47:ab:17:2b:
a2:7c:d5:7f:89:cb:82:62:6a:a7:2a:f0:3f:3d:fa:
32:de:d8:0e:ae:54:ff:40:df:74:d4:8b:14:f7:7c:
92:f6:fb:36:e2:c5:d2:56:4e:83:36:3d:11:09:e5:
a4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:68:8F:81:40:AE:B8:92:33:48:4B:F1:92:D1:C9:DF:87:F7:88:B1
X509v3 Authority Key Identifier:
keyid:03:0A:1E:C7:FC:0C:E9:FA:1F:24:91:9B:96:EA:64:D9:33:9A:F7:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914CB61/4E166A20B10311ECB9141312C4F9AE02/Awoex_wM6fofJJGblupk2TOa96s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Awoex_wM6fofJJGblupk2TOa96s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CB61/4E166A20B10311ECB9141312C4F9AE02/6285F7A4C44B11ECA77F776BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
150.129.216.0/24
Signature Algorithm: sha256WithRSAEncryption
83:18:a1:95:29:b8:83:fa:a6:cf:f0:14:b8:0b:82:ab:23:2b:
d1:77:10:5a:5f:8e:b4:b1:51:a1:13:11:e1:ee:13:90:53:f7:
b0:37:a6:34:3b:18:d1:96:32:4e:18:0c:af:a2:b3:1a:10:d6:
7d:bd:e6:0c:69:37:f6:10:4e:50:0a:e7:6d:0e:f2:f6:ca:77:
13:ac:bb:d6:b3:02:aa:f6:6a:08:d5:77:fd:d8:22:da:15:68:
c9:c9:ae:40:82:64:30:37:3d:10:70:33:f0:73:2c:c3:76:c5:
98:94:9c:d0:d0:95:30:11:bf:77:79:6b:cd:f0:2c:b9:92:b5:
d6:76:85:24:94:9e:77:bc:7d:7e:e2:49:a1:99:e6:10:dc:bf:
5d:5c:5c:22:f9:12:e0:77:79:d1:a3:3e:e9:de:74:8d:6c:21:
4c:b3:73:08:6d:c8:08:7f:87:94:34:59:25:5b:32:07:e4:32:
89:3b:00:9b:ff:87:74:ca:99:1b:01:b1:b3:c9:25:74:21:bf:
e9:d4:a1:be:ea:cc:39:08:e2:ef:16:d6:ee:8b:64:08:07:9f:
25:b1:8a:38:9b:18:86:3a:84:ee:5a:35:dd:25:46:25:27:ca:
16:7d:f4:ca:8e:25:4e:9a:9c:fa:6c:7e:ff:16:9a:19:13:63:
f3:24:49:21
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
Q0I2MTExMC8GA1UEBRMoMDMwQTFFQzdGQzBDRTlGQTFGMjQ5MTlCOTZFQTY0RDkz
MzlBRjdBQjAeFw0yMjA0MjUwMzU0MjBaFw0yMjA5MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTYyNjYxYjZjLWUyOGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQD35Bj0nMF97/y6ST4APVhBrxHjEZc8k9FefKALyUGqc5RxvP7Fj5+4/7qS+Z5x
aCAnr3y2FT7KcYLeMtVR31MYsSO8k5khKzFUy9Efp9olj8kV2PF5NxNzEsKvXflG
HtJoHF+XY+Ojb7udHZCfJvDsUWmJiiHYHvZCvnUbUDfhgp6V0qr7WiSJjkeHa3Lr
AnuBJadMtBheOO/2zAZxJSXjnx5uzQeQVRbALi5n75xXCWxZ3fG3TueiHYcyycnw
WiRJE7jVeW95/+H/sziRR6sXK6J81X+Jy4Jiaqcq8D89+jLe2A6uVP9A33TUixT3
fJL2+zbixdJWToM2PREJ5aRlAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU8WiPgUCu
uJIzSEvxktHJ34f3iLEwHwYDVR0jBBgwFoAUAwoex/wM6fofJJGblupk2TOa96sw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRDQjYxLzRFMTY2QTIwQjEw
MzExRUNCOTE0MTMxMkM0RjlBRTAyL0F3b2V4X3dNNmZvZkpKR2JsdXBrMlRPYTk2
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvQXdvZXhfd002Zm9mSkpHYmx1cGsyVE9hOTZzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
Q0I2MS80RTE2NkEyMEIxMDMxMUVDQjkxNDEzMTJDNEY5QUUwMi82Mjg1RjdBNEM0
NEIxMUVDQTc3Rjc3NkJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAJaB2DANBgkqhkiG9w0BAQsFAAOCAQEAgxihlSm4g/qmz/AU
uAuCqyMr0XcQWl+OtLFRoRMR4e4TkFP3sDemNDsY0ZYyThgMr6KzGhDWfb3mDGk3
9hBOUArnbQ7y9sp3E6y71rMCqvZqCNV3/dgi2hVoycmuQIJkMDc9EHAz8HMsw3bF
mJSc0NCVMBG/d3lrzfAsuZK11naFJJSed7x9fuJJoZnmENy/XVxcIvkS4Hd50aM+
6d50jWwhTLNzCG3ICH+HlDRZJVsyB+QyiTsAm/+HdMqZGwGxs8kldCG/6dShvurM
OQji7xbW7otkCAefJbGKOJsYhjqE7lo13SVGJSfKFn30yo4lTpqc+mx+/xaaGRNj
8yRJIQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:39 2023 by rpki-client on console-ams.rpki-client.org