Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B68C3/33003880886311E58032D615C4F9AE02/E752EF0E2BF411EC831DEE31C4F9AE02.roa
File: E752EF0E2BF411EC831DEE31C4F9AE02.roa (raw, json)
Hash identifier: RbGYbgaQuepoNdU5GuMxNxEEmZgvzZhzI/1UUHDMN7w=
Subject key identifier: 8F:8A:E0:59:E2:AA:6F:93:30:D6:80:0A:03:8E:EB:5C:13:E1:4B:F8
Certificate issuer: /CN=A91B68C3/serialNumber=BB595F689EDDB80E5A94DBA26840C1F8356896D6
Certificate serial: 1F6D
Authority key identifier: BB:59:5F:68:9E:DD:B8:0E:5A:94:DB:A2:68:40:C1:F8:35:68:96:D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1lfaJ7duA5alNuiaEDB-DVoltY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B68C3/33003880886311E58032D615C4F9AE02/E752EF0E2BF411EC831DEE31C4F9AE02.roa
Signing time: Wed 02 Feb 2022 16:42:30 +0000
ROA not before: Wed 02 Feb 2022 16:42:30 +0000
ROA not after: Mon 01 May 2023 00:00:00 +0000
asID: 203098
IP address blocks: 103.49.84.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8045 (0x1f6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B68C3/serialNumber=BB595F689EDDB80E5A94DBA26840C1F8356896D6
Validity
Not Before: Feb 2 16:42:30 2022 GMT
Not After : May 1 00:00:00 2023 GMT
Subject: CN=61fab476-29a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:75:3f:41:ed:ec:6f:11:9f:d6:c7:55:87:1a:
ce:e7:3a:de:3c:92:f1:5d:28:2c:1c:bb:3d:63:2b:
5d:cb:ad:8e:c5:e8:52:2c:e3:d7:c8:e7:bc:87:20:
2c:42:72:18:d5:87:29:8e:f5:d1:cf:86:d7:f0:61:
6f:29:e0:f2:2b:4a:b2:39:0d:dd:46:72:bf:b5:36:
c2:6a:19:7b:fd:f0:c9:a1:b1:34:a8:ac:2c:cf:55:
58:7e:a1:3d:bb:8f:33:49:32:75:f6:ae:99:6a:e9:
37:d1:0e:3d:f4:8e:92:67:50:11:cc:77:1b:d0:7f:
31:a9:e5:1b:02:7f:94:7e:18:d1:40:98:22:d5:31:
24:67:d3:67:0c:ff:cb:40:0d:68:2d:62:9c:ee:69:
ce:70:12:fd:1a:8b:88:00:1c:85:f2:49:dd:c7:30:
f0:9b:cf:b9:c2:0f:64:3c:3a:61:cf:32:74:b1:2e:
a9:57:c9:33:dc:18:5e:d3:a2:cc:0b:fa:a3:41:53:
d7:5a:04:dd:b5:68:cc:4c:48:6e:03:c6:81:d0:3c:
a5:d6:a5:af:b6:3a:e0:3e:51:70:ab:8a:c4:64:9f:
3b:30:aa:8f:9e:34:4b:51:cf:e6:72:4f:0f:c3:0f:
b6:79:4d:4d:ee:3c:e0:37:1d:72:5b:e2:cd:3e:5c:
af:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:8A:E0:59:E2:AA:6F:93:30:D6:80:0A:03:8E:EB:5C:13:E1:4B:F8
X509v3 Authority Key Identifier:
keyid:BB:59:5F:68:9E:DD:B8:0E:5A:94:DB:A2:68:40:C1:F8:35:68:96:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B68C3/33003880886311E58032D615C4F9AE02/u1lfaJ7duA5alNuiaEDB-DVoltY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1lfaJ7duA5alNuiaEDB-DVoltY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B68C3/33003880886311E58032D615C4F9AE02/E752EF0E2BF411EC831DEE31C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.49.84.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:73:51:58:94:be:ca:12:9d:c1:f1:7b:a6:aa:19:ca:9d:7f:
ff:b1:c4:35:7f:04:df:c2:b8:6c:29:7c:a1:08:4c:b2:04:95:
93:c6:8e:a3:84:ee:02:55:e1:cf:db:af:ce:fb:e5:83:6e:bb:
6e:20:87:d6:3d:58:ae:5b:8e:ca:6e:99:30:70:0d:7c:25:3d:
ca:ed:08:93:d0:bc:1d:dd:af:77:63:6c:20:f0:10:87:eb:a5:
dd:38:02:9c:fc:d6:56:ef:9b:cf:0f:9d:fb:63:24:e1:45:13:
16:62:e3:e8:7d:a5:c1:aa:80:32:58:9e:00:55:d4:08:bd:ff:
26:32:cc:4c:f7:f4:32:b5:d2:cd:69:a4:15:03:ae:94:68:1c:
b8:15:3e:61:ca:d4:3d:82:e9:8c:5c:ad:42:cf:ca:21:ec:d7:
50:6c:04:bf:6d:44:7d:3a:20:27:75:0b:39:de:df:19:41:7e:
8b:5a:05:33:ac:f4:1f:7a:b9:e3:38:11:f3:a4:a4:14:aa:66:
f8:a5:eb:46:ae:f1:4b:84:a3:fb:22:4f:1a:62:4e:2d:cf:d7:
31:81:53:de:30:41:a7:3e:52:77:ae:17:0c:c0:9e:af:60:56:
8e:65:52:67:8e:2e:7c:3f:68:5b:5c:d7:45:d9:58:15:b3:dd:
57:ce:f0:16
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICH20wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjY4QzMxMTAvBgNVBAUTKEJCNTk1RjY4OUVEREI4MEU1QTk0REJBMjY4NDBDMUY4
MzU2ODk2RDYwHhcNMjIwMjAyMTY0MjMwWhcNMjMwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MWZhYjQ3Ni0yOWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw3U/Qe3sbxGf1sdVhxrO5zrePJLxXSgsHLs9Yytdy62OxehSLOPXyOe8hyAs
QnIY1YcpjvXRz4bX8GFvKeDyK0qyOQ3dRnK/tTbCahl7/fDJobE0qKwsz1VYfqE9
u48zSTJ19q6Zauk30Q499I6SZ1ARzHcb0H8xqeUbAn+UfhjRQJgi1TEkZ9NnDP/L
QA1oLWKc7mnOcBL9GouIAByF8kndxzDwm8+5wg9kPDphzzJ0sS6pV8kz3Bhe06LM
C/qjQVPXWgTdtWjMTEhuA8aB0Dyl1qWvtjrgPlFwq4rEZJ87MKqPnjRLUc/mck8P
ww+2eU1N7jzgNx1yW+LNPlyvTQIDAQABo4IClTCCApEwHQYDVR0OBBYEFI+K4Fni
qm+TMNaACgOO61wT4Uv4MB8GA1UdIwQYMBaAFLtZX2ie3bgOWpTbomhAwfg1aJbW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjhDMy8zMzAwMzg4MDg4
NjMxMUU1ODAzMkQ2MTVDNEY5QUUwMi91MWxmYUo3ZHVBNWFsTnVpYUVEQi1EVm9s
dFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3UxbGZhSjdkdUE1YWxOdWlhRURCLURWb2x0WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjY4QzMvMzMwMDM4ODA4ODYzMTFFNTgwMzJENjE1QzRGOUFFMDIvRTc1MkVGMEUy
QkY0MTFFQzgzMURFRTMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJnMVQwDQYJKoZIhvcNAQELBQADggEBAH1zUViUvsoSncHx
e6aqGcqdf/+xxDV/BN/CuGwpfKEITLIElZPGjqOE7gJV4c/br8775YNuu24gh9Y9
WK5bjspumTBwDXwlPcrtCJPQvB3dr3djbCDwEIfrpd04Apz81lbvm88PnftjJOFF
ExZi4+h9pcGqgDJYngBV1Ai9/yYyzEz39DK10s1ppBUDrpRoHLgVPmHK1D2C6Yxc
rULPyiHs11BsBL9tRH06ICd1Czne3xlBfotaBTOs9B96ueM4EfOkpBSqZvil60au
8UuEo/siTxpiTi3P1zGBU94wQac+UneuFwzAnq9gVo5lUmeOLnw/aFtc10XZWBWz
3VfO8BY=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:05 2023 by rpki-client on console-fra.rpki-client.org