Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91788FA/0435D160034311ED98849640C4F9AE02/3E032062BBE611EDA21A6B69C4F9AE02.roa
File: 3E032062BBE611EDA21A6B69C4F9AE02.roa (raw, json)
Hash identifier: cmAK7SM9XGzP97JbkdgdyxoCMkKi6eU09A190tkh3w0=
Subject key identifier: FC:E0:AA:9C:23:07:A9:17:DA:C4:49:BA:CB:E5:2B:75:BC:F5:31:29
Certificate issuer: /CN=A91788FA/serialNumber=FDDCB69FE9B7433D3A48FBEE72E659480515DD19
Certificate serial: F4
Authority key identifier: FD:DC:B6:9F:E9:B7:43:3D:3A:48:FB:EE:72:E6:59:48:05:15:DD:19
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dy2n-m3Qz06SPvucuZZSAUV3Rk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91788FA/0435D160034311ED98849640C4F9AE02/3E032062BBE611EDA21A6B69C4F9AE02.roa
Signing time: Mon 06 Mar 2023 06:15:08 +0000
ROA not before: Mon 06 Mar 2023 06:15:08 +0000
ROA not after: Wed 01 May 2024 00:00:00 +0000
asID: 137451
IP address blocks: 43.229.152.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 244 (0xf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91788FA/serialNumber=FDDCB69FE9B7433D3A48FBEE72E659480515DD19
Validity
Not Before: Mar 6 06:15:08 2023 GMT
Not After : May 1 00:00:00 2024 GMT
Subject: CN=640584eb-3c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:51:a6:11:42:f7:d6:d5:27:ec:e3:77:7a:85:
55:40:df:b6:85:3f:2e:fb:5f:42:fc:8f:2b:91:43:
45:25:f8:44:d0:20:95:83:91:fb:6b:46:20:53:09:
87:ce:0a:28:32:50:2b:f9:1e:26:6b:21:9b:d0:2e:
cb:75:48:4c:77:1d:28:87:0d:81:d0:c2:19:61:6d:
b1:58:1e:b8:da:cb:d6:6a:f3:98:5d:a0:2d:da:7f:
48:43:5e:cc:ac:fd:be:cb:5c:6b:a1:42:d6:3c:5d:
7b:f4:af:08:de:16:81:76:6a:a8:05:0f:41:32:db:
a8:2f:bf:b3:dc:09:86:da:c4:2b:ee:94:e2:47:12:
ca:da:44:ca:eb:1e:e9:e4:06:fa:80:a5:af:a3:a0:
27:c0:af:83:5f:2a:b9:51:69:cc:e2:5b:9e:bc:66:
ad:77:b6:1a:39:9b:f9:cb:68:49:9d:f0:fc:49:66:
14:f2:c3:c2:47:a7:b2:e0:1e:46:dc:7e:f4:a0:27:
a8:10:0c:47:b5:ef:bc:19:23:c6:6a:4b:f0:44:1f:
1d:1e:34:6b:18:ea:ed:ac:f0:5e:2e:71:83:4a:09:
f0:c2:05:31:62:15:58:53:6f:ad:0b:fd:44:6e:57:
77:b2:be:ba:b9:f9:5b:f1:3f:25:d8:3a:c9:0c:38:
a5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E0:AA:9C:23:07:A9:17:DA:C4:49:BA:CB:E5:2B:75:BC:F5:31:29
X509v3 Authority Key Identifier:
keyid:FD:DC:B6:9F:E9:B7:43:3D:3A:48:FB:EE:72:E6:59:48:05:15:DD:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91788FA/0435D160034311ED98849640C4F9AE02/_dy2n-m3Qz06SPvucuZZSAUV3Rk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dy2n-m3Qz06SPvucuZZSAUV3Rk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91788FA/0435D160034311ED98849640C4F9AE02/3E032062BBE611EDA21A6B69C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.229.152.0/22
Signature Algorithm: sha256WithRSAEncryption
01:cf:ac:5b:9b:7b:0f:04:41:e8:49:8d:ac:52:63:1c:03:84:
75:37:77:7b:3d:e7:ff:90:ba:80:a8:01:d4:57:a1:bc:bc:58:
1f:b4:c1:ee:3f:3d:87:e3:ec:6f:6d:ab:9e:7a:8f:54:d2:a2:
9d:68:97:b2:25:c3:e9:4d:d1:bb:64:41:51:9d:49:40:bd:6e:
95:91:c2:a6:40:73:48:51:09:c1:62:f4:40:1a:e6:d6:3d:00:
12:6c:07:94:cb:10:1d:15:a3:3b:cb:eb:9f:58:13:3a:d5:9f:
81:6c:d7:94:9a:1b:bb:df:bf:f7:49:18:3c:8b:19:5c:d2:a5:
01:2b:31:3f:bf:3d:52:36:9e:dc:c7:41:d5:4a:eb:a3:77:3f:
b1:81:fe:18:6f:95:c5:f7:69:e4:8a:27:54:4c:b4:35:5b:a0:
7e:64:41:99:e0:9c:50:f5:d4:e9:10:d3:60:c9:62:d5:0a:26:
4b:e2:af:2d:fc:8a:43:e8:cd:bf:94:62:04:b9:f3:09:a5:6c:
d1:8c:64:af:24:31:cd:9f:06:c0:97:15:25:26:64:ef:9a:52:
89:aa:da:4b:81:e9:b2:23:d0:a8:92:19:3a:e7:29:48:e6:02:
ac:39:2b:12:0e:d5:17:88:e5:76:05:f5:23:2c:41:06:0d:c2:
65:a5:06:4a
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Nzg4RkExMTAvBgNVBAUTKEZERENCNjlGRTlCNzQzM0QzQTQ4RkJFRTcyRTY1OTQ4
MDUxNUREMTkwHhcNMjMwMzA2MDYxNTA4WhcNMjQwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDA1ODRlYi0zYzkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyFGmEUL31tUn7ON3eoVVQN+2hT8u+19C/I8rkUNFJfhE0CCVg5H7a0YgUwmH
zgooMlAr+R4mayGb0C7LdUhMdx0ohw2B0MIZYW2xWB642svWavOYXaAt2n9IQ17M
rP2+y1xroULWPF179K8I3haBdmqoBQ9BMtuoL7+z3AmG2sQr7pTiRxLK2kTK6x7p
5Ab6gKWvo6AnwK+DXyq5UWnM4luevGatd7YaOZv5y2hJnfD8SWYU8sPCR6ey4B5G
3H70oCeoEAxHte+8GSPGakvwRB8dHjRrGOrtrPBeLnGDSgnwwgUxYhVYU2+tC/1E
bld3sr66uflb8T8l2DrJDDilfwIDAQABo4IClTCCApEwHQYDVR0OBBYEFPzgqpwj
B6kX2sRJusvlK3W89TEpMB8GA1UdIwQYMBaAFP3ctp/pt0M9Okj77nLmWUgFFd0Z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODhGQS8wNDM1RDE2MDAz
NDMxMUVEOTg4NDk2NDBDNEY5QUUwMi9fZHkybi1tM1F6MDZTUHZ1Y3VaWlNBVVYz
UmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19keTJuLW0zUXowNlNQdnVjdVpaU0FVVjNSay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Nzg4RkEvMDQzNUQxNjAwMzQzMTFFRDk4ODQ5NjQwQzRGOUFFMDIvM0UwMzIwNjJC
QkU2MTFFREEyMUE2QjY5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAIr5ZgwDQYJKoZIhvcNAQELBQADggEBAAHPrFubew8EQehJ
jaxSYxwDhHU3d3s95/+QuoCoAdRXoby8WB+0we4/PYfj7G9tq556j1TSop1ol7Il
w+lN0btkQVGdSUC9bpWRwqZAc0hRCcFi9EAa5tY9ABJsB5TLEB0VozvL659YEzrV
n4Fs15SaG7vfv/dJGDyLGVzSpQErMT+/PVI2ntzHQdVK66N3P7GB/hhvlcX3aeSK
J1RMtDVboH5kQZngnFD11OkQ02DJYtUKJkviry38ikPozb+UYgS58wmlbNGMZK8k
Mc2fBsCXFSUmZO+aUomq2kuB6bIj0KiSGTrnKUjmAqw5KxIO1ReI5XYF9SMsQQYN
wmWlBko=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:44 2023 by rpki-client on console-ams.rpki-client.org