Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157F58/DFB27DACF0A011E7BC7E8D5FC4F9AE02/EA1CCD9ADFBD11EC8E203126C4F9AE02.roa
File: EA1CCD9ADFBD11EC8E203126C4F9AE02.roa (raw, json)
Hash identifier: nXQ6KDkag69+MkzgymZ8bq7OYMDYsC4btiAeWCCKbjU=
Subject key identifier: 1D:E3:2D:A0:B0:CC:4E:A8:56:1D:50:87:BD:85:AD:97:A1:F5:27:A9
Certificate issuer: /CN=A9157F58/serialNumber=280CC20FF507AC68FA32D328F2D1A36285447D7F
Certificate serial: 14E8
Authority key identifier: 28:0C:C2:0F:F5:07:AC:68:FA:32:D3:28:F2:D1:A3:62:85:44:7D:7F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KAzCD_UHrGj6MtMo8tGjYoVEfX8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157F58/DFB27DACF0A011E7BC7E8D5FC4F9AE02/EA1CCD9ADFBD11EC8E203126C4F9AE02.roa
Signing time: Tue 04 Oct 2022 16:04:21 +0000
ROA not before: Tue 04 Oct 2022 16:04:21 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 24434
IP address blocks: 137.219.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5352 (0x14e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157F58/serialNumber=280CC20FF507AC68FA32D328F2D1A36285447D7F
Validity
Not Before: Oct 4 16:04:21 2022 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=633c5985-f0c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:78:50:e2:f1:47:39:5b:da:7e:20:3d:6a:49:
12:76:0f:51:95:44:46:5d:4d:eb:a8:be:29:aa:98:
a4:90:3f:a1:f8:df:72:31:1d:39:05:73:ef:7a:ce:
91:2e:95:66:de:ae:f3:03:b7:81:26:b4:93:db:7e:
14:5a:84:00:c8:c5:6e:d6:1d:74:4d:93:9e:83:b1:
49:0a:7f:07:0f:80:fb:92:85:b0:5c:2c:0e:03:50:
fa:79:84:0b:db:21:4c:60:bd:39:b6:b8:be:20:2e:
4b:3a:cf:9c:e8:42:df:96:ae:4d:45:3c:27:8c:36:
93:f3:8f:68:37:c1:93:fd:78:3b:68:78:cb:f4:30:
b6:2a:1e:23:ca:95:f5:f6:ff:9c:a4:30:34:ee:86:
96:4e:0a:c4:65:a3:f7:25:e0:cd:9e:60:61:55:f3:
1d:88:b5:5b:11:a6:b4:88:02:d6:df:0c:2d:b5:f6:
5a:8a:91:18:19:9c:21:84:7e:fe:71:1b:b8:50:b7:
75:8b:33:f8:c3:5c:86:7b:d7:93:b6:5f:35:40:dc:
0e:45:b9:c8:00:14:d4:d5:8e:bb:f0:2f:b0:3c:34:
0c:15:14:0b:0b:9b:e9:f1:42:f0:fc:44:02:a0:35:
8a:6a:38:8a:91:c3:9a:bd:31:db:c4:c4:3f:a9:fd:
1d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:E3:2D:A0:B0:CC:4E:A8:56:1D:50:87:BD:85:AD:97:A1:F5:27:A9
X509v3 Authority Key Identifier:
keyid:28:0C:C2:0F:F5:07:AC:68:FA:32:D3:28:F2:D1:A3:62:85:44:7D:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157F58/DFB27DACF0A011E7BC7E8D5FC4F9AE02/KAzCD_UHrGj6MtMo8tGjYoVEfX8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KAzCD_UHrGj6MtMo8tGjYoVEfX8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157F58/DFB27DACF0A011E7BC7E8D5FC4F9AE02/EA1CCD9ADFBD11EC8E203126C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
137.219.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6c:65:57:c0:cf:2c:f4:83:57:66:07:68:8e:45:8e:54:5a:b7:
06:d1:6f:43:31:fa:10:ac:42:96:6f:e1:02:d8:94:0e:5a:df:
b7:af:0d:d3:d8:c8:6a:92:49:90:56:d4:e9:d8:42:a5:af:c7:
c7:a7:1d:63:01:38:84:37:5b:91:5b:37:8e:e7:29:aa:e6:2a:
20:53:47:92:96:a4:80:d5:b3:55:5d:86:33:21:ba:03:64:ec:
ea:7d:71:bc:5d:64:33:e3:1d:36:41:5a:6a:40:60:72:12:21:
d1:83:a6:63:48:93:71:25:f0:e7:8d:44:cb:81:aa:03:74:8f:
43:3c:d6:68:6f:0e:9c:27:4d:03:82:3a:0e:34:d4:16:31:4e:
da:de:58:94:07:b2:d8:bf:ad:63:5b:d9:45:bf:a9:4f:99:41:
9a:12:6f:ff:37:13:4f:ad:28:c2:94:e6:09:95:46:0f:1c:8c:
e7:c7:a9:30:9e:ee:01:b9:9d:0b:87:c0:9e:2d:8e:2e:2c:18:
d4:7f:53:33:f8:2d:d5:df:a7:79:0c:b0:da:2d:b2:4c:5b:d6:
5c:28:e0:a4:23:79:02:a5:08:8c:cb:1d:ee:69:53:39:bb:d7:
25:d2:21:55:aa:af:f4:75:82:8c:13:40:9b:c4:78:40:66:ab:
9c:49:2c:90
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgICFOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTdGNTgxMTAvBgNVBAUTKDI4MENDMjBGRjUwN0FDNjhGQTMyRDMyOEYyRDFBMzYy
ODU0NDdEN0YwHhcNMjIxMDA0MTYwNDIxWhcNMjMxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02MzNjNTk4NS1mMGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo3hQ4vFHOVvafiA9akkSdg9RlURGXU3rqL4pqpikkD+h+N9yMR05BXPves6R
LpVm3q7zA7eBJrST234UWoQAyMVu1h10TZOeg7FJCn8HD4D7koWwXCwOA1D6eYQL
2yFMYL05tri+IC5LOs+c6ELflq5NRTwnjDaT849oN8GT/Xg7aHjL9DC2Kh4jypX1
9v+cpDA07oaWTgrEZaP3JeDNnmBhVfMdiLVbEaa0iALW3wwttfZaipEYGZwhhH7+
cRu4ULd1izP4w1yGe9eTtl81QNwORbnIABTU1Y678C+wPDQMFRQLC5vp8ULw/EQC
oDWKajiKkcOavTHbxMQ/qf0dlQIDAQABo4IClDCCApAwHQYDVR0OBBYEFB3jLaCw
zE6oVh1Qh72FrZeh9SepMB8GA1UdIwQYMBaAFCgMwg/1B6xo+jLTKPLRo2KFRH1/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Y1OC9ERkIyN0RBQ0Yw
QTAxMUU3QkM3RThENUZDNEY5QUUwMi9LQXpDRF9VSHJHajZNdE1vOHRHallvVkVm
WDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0tBekNEX1VIckdqNk10TW84dEdqWW9WRWZYOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTdGNTgvREZCMjdEQUNGMEEwMTFFN0JDN0U4RDVGQzRGOUFFMDIvRUExQ0NEOUFE
RkJEMTFFQzhFMjAzMTI2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8E
DzANMAsEAgABMAUDAwCJ2zANBgkqhkiG9w0BAQsFAAOCAQEAbGVXwM8s9INXZgdo
jkWOVFq3BtFvQzH6EKxClm/hAtiUDlrft68N09jIapJJkFbU6dhCpa/Hx6cdYwE4
hDdbkVs3jucpquYqIFNHkpakgNWzVV2GMyG6A2Ts6n1xvF1kM+MdNkFaakBgchIh
0YOmY0iTcSXw541Ey4GqA3SPQzzWaG8OnCdNA4I6DjTUFjFO2t5YlAey2L+tY1vZ
Rb+pT5lBmhJv/zcTT60owpTmCZVGDxyM58epMJ7uAbmdC4fAni2OLiwY1H9TM/gt
1d+neQyw2i2yTFvWXCjgpCN5AqUIjMsd7mlTObvXJdIhVaqv9HWCjBNAm8R4QGar
nEkskA==
-----END CERTIFICATE-----
Generated at Wed Sep 6 15:49:19 2023 by rpki-client on console-fra.rpki-client.org