Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8D77/FAEB98A858F511ECA901D422C4F9AE02/3777FD1C798411EC919AE560C4F9AE02.roa
File: 3777FD1C798411EC919AE560C4F9AE02.roa (raw, json)
Hash identifier: 1dLAb4Pbz8QsK+N8jh9UiIClYTbWCAjmv1f6uo/PgDc=
Subject key identifier: 4C:88:DA:39:DE:B8:25:9B:8F:21:BE:5F:BA:E5:39:E2:D3:3C:D3:B1
Certificate issuer: /CN=A91A8D77/serialNumber=F83DB437A9D99943646183A2A0DFEC81A23D3A09
Certificate serial: 5B
Authority key identifier: F8:3D:B4:37:A9:D9:99:43:64:61:83:A2:A0:DF:EC:81:A2:3D:3A:09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-D20N6nZmUNkYYOioN_sgaI9Ogk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8D77/FAEB98A858F511ECA901D422C4F9AE02/3777FD1C798411EC919AE560C4F9AE02.roa
Signing time: Thu 20 Jan 2022 00:02:12 +0000
ROA not before: Thu 20 Jan 2022 00:02:12 +0000
ROA not after: Fri 31 Mar 2023 00:00:00 +0000
asID: 139866
IP address blocks: 2001:df2:5a80::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91 (0x5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8D77/serialNumber=F83DB437A9D99943646183A2A0DFEC81A23D3A09
Validity
Not Before: Jan 20 00:02:12 2022 GMT
Not After : Mar 31 00:00:00 2023 GMT
Subject: CN=61e8a683-83bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d5:b1:ff:8d:5f:a0:7e:7b:99:de:22:99:b7:
a8:e3:77:93:7d:22:f2:58:d9:bd:2a:69:70:99:eb:
c6:29:56:dd:44:17:9c:a3:56:5e:c7:95:4d:ee:42:
40:b2:74:de:c0:4c:6a:47:2c:9a:6e:00:f0:63:a7:
f1:36:b2:7d:74:cb:73:23:40:b2:f3:18:e6:53:e2:
45:fe:9d:9d:38:76:9c:f7:ae:0d:ca:ea:e3:e2:33:
68:95:90:d7:07:1f:9b:d5:c6:11:d8:54:e9:38:b3:
ef:89:be:4c:50:f0:1e:e7:be:3b:dd:26:fc:e3:03:
18:04:4b:5c:fd:64:0b:a9:ab:66:1f:82:30:8d:36:
83:dd:f5:e9:1b:9f:fc:5e:cf:89:ac:ba:03:82:1c:
e6:02:51:df:21:54:38:f7:33:fc:6a:ef:7f:87:36:
ea:e8:0d:68:52:bf:29:ad:c6:dd:8c:ca:56:68:bc:
87:a1:b0:18:34:60:eb:85:45:26:59:aa:ad:ac:6f:
94:97:dc:6a:d2:6e:bf:9c:85:5f:f7:c9:c8:91:62:
8e:8a:8a:2c:09:ab:42:ac:5d:54:21:b1:67:c2:f2:
49:7d:75:59:db:92:de:1e:27:eb:4c:df:d5:67:47:
cd:99:33:b8:bc:6f:1b:3f:0b:e2:7c:11:a7:5d:a5:
9e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:88:DA:39:DE:B8:25:9B:8F:21:BE:5F:BA:E5:39:E2:D3:3C:D3:B1
X509v3 Authority Key Identifier:
keyid:F8:3D:B4:37:A9:D9:99:43:64:61:83:A2:A0:DF:EC:81:A2:3D:3A:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8D77/FAEB98A858F511ECA901D422C4F9AE02/-D20N6nZmUNkYYOioN_sgaI9Ogk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-D20N6nZmUNkYYOioN_sgaI9Ogk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8D77/FAEB98A858F511ECA901D422C4F9AE02/3777FD1C798411EC919AE560C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df2:5a80::/48
Signature Algorithm: sha256WithRSAEncryption
b5:36:c8:42:f7:04:9b:5c:06:7e:b5:b4:75:f2:e7:23:69:0c:
9d:5d:a2:63:3f:12:b8:2a:3c:cd:44:d4:dd:d1:72:21:10:db:
8e:d1:e9:77:6b:77:4a:ab:c4:08:cf:59:92:8b:5b:42:09:7d:
34:a9:0a:c6:31:78:e4:ea:dd:a8:71:d4:d3:e3:38:5d:39:99:
bf:0b:b8:cf:b3:90:bd:98:78:6d:59:e0:fc:2a:00:1a:bb:07:
25:6a:9c:29:de:b8:fa:12:cf:2f:61:aa:80:f0:a2:3c:69:46:
d6:f9:9a:d7:f7:4a:4f:7a:ba:d6:bb:fb:57:4a:29:08:a2:56:
18:92:a0:ae:4f:7b:07:99:ad:f0:b5:23:1d:69:a7:da:36:f9:
c8:40:51:31:04:4b:71:85:05:0d:78:1e:5b:87:e8:56:66:0b:
04:06:2f:91:d5:38:18:96:6c:3b:d7:52:04:5a:b6:17:d6:3d:
20:67:45:41:5e:64:d6:a4:6a:51:df:45:44:80:9a:30:b0:0f:
6c:43:38:8c:85:05:9c:59:03:e5:7f:f1:b1:e8:34:94:76:7b:
2c:25:5a:e1:93:61:08:56:de:8f:b0:58:39:87:28:55:d8:63:
03:ae:f6:7b:95:47:f3:1d:c0:f7:68:1c:02:6f:d1:8c:57:d3:
48:57:8f:94
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
OEQ3NzExMC8GA1UEBRMoRjgzREI0MzdBOUQ5OTk0MzY0NjE4M0EyQTBERkVDODFB
MjNEM0EwOTAeFw0yMjAxMjAwMDAyMTJaFw0yMzAzMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTYxZThhNjgzLTgzYmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDH1bH/jV+gfnuZ3iKZt6jjd5N9IvJY2b0qaXCZ68YpVt1EF5yjVl7HlU3uQkCy
dN7ATGpHLJpuAPBjp/E2sn10y3MjQLLzGOZT4kX+nZ04dpz3rg3K6uPiM2iVkNcH
H5vVxhHYVOk4s++JvkxQ8B7nvjvdJvzjAxgES1z9ZAupq2YfgjCNNoPd9ekbn/xe
z4msugOCHOYCUd8hVDj3M/xq73+HNuroDWhSvymtxt2MylZovIehsBg0YOuFRSZZ
qq2sb5SX3GrSbr+chV/3yciRYo6KiiwJq0KsXVQhsWfC8kl9dVnbkt4eJ+tM39Vn
R82ZM7i8bxs/C+J8EaddpZ5bAgMBAAGjggKYMIIClDAdBgNVHQ4EFgQUTIjaOd64
JZuPIb5fuuU54tM807EwHwYDVR0jBBgwFoAU+D20N6nZmUNkYYOioN/sgaI9Ogkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE4RDc3L0ZBRUI5OEE4NThG
NTExRUNBOTAxRDQyMkM0RjlBRTAyLy1EMjBONm5abVVOa1lZT2lvTl9zZ2FJOU9n
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvLUQyME42blptVU5rWVlPaW9OX3NnYUk5T2drLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
OEQ3Ny9GQUVCOThBODU4RjUxMUVDQTkwMUQ0MjJDNEY5QUUwMi8zNzc3RkQxQzc5
ODQxMUVDOTE5QUU1NjBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACABDfJagDANBgkqhkiG9w0BAQsFAAOCAQEAtTbIQvcEm1wG
frW0dfLnI2kMnV2iYz8SuCo8zUTU3dFyIRDbjtHpd2t3SqvECM9ZkotbQgl9NKkK
xjF45OrdqHHU0+M4XTmZvwu4z7OQvZh4bVng/CoAGrsHJWqcKd64+hLPL2GqgPCi
PGlG1vma1/dKT3q61rv7V0opCKJWGJKgrk97B5mt8LUjHWmn2jb5yEBRMQRLcYUF
DXgeW4foVmYLBAYvkdU4GJZsO9dSBFq2F9Y9IGdFQV5k1qRqUd9FRICaMLAPbEM4
jIUFnFkD5X/xseg0lHZ7LCVa4ZNhCFbej7BYOYcoVdhjA672e5VH8x3A92gcAm/R
jFfTSFePlA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:36 2024 by rpki-client on console-fra.rpki-client.org