Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D80A3/96C50978CFFA11ECA2907161C4F9AE02/A6923B10CFFE11EC8CFDFF68C4F9AE02.roa
File: A6923B10CFFE11EC8CFDFF68C4F9AE02.roa (raw, json)
Hash identifier: nk4UcMRSJ2QanTBSb3+gczd3shtwFGJ5hV5wAmD6vdU=
Subject key identifier: AF:0B:C6:5C:15:FC:E8:65:6D:A1:C0:DB:6D:54:3B:3C:2E:7D:B7:0C
Certificate issuer: /CN=A91D80A3/serialNumber=4DD448DB528B456EB49E92AC053F9F664A9383AF
Certificate serial: 02
Authority key identifier: 4D:D4:48:DB:52:8B:45:6E:B4:9E:92:AC:05:3F:9F:66:4A:93:83:AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TdRI21KLRW60npKsBT-fZkqTg68.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D80A3/96C50978CFFA11ECA2907161C4F9AE02/A6923B10CFFE11EC8CFDFF68C4F9AE02.roa
Signing time: Tue 10 May 2022 01:15:16 +0000
ROA not before: Tue 10 May 2022 01:15:16 +0000
ROA not after: Thu 01 Dec 2022 00:00:00 +0000
asID: 9311
IP address blocks: 103.37.236.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D80A3/serialNumber=4DD448DB528B456EB49E92AC053F9F664A9383AF
Validity
Not Before: May 10 01:15:16 2022 GMT
Not After : Dec 1 00:00:00 2022 GMT
Subject: CN=6279bca4-a3ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:89:0b:75:a5:11:04:6e:a1:3d:f2:27:0a:14:
b7:95:e1:e0:a2:2d:ce:a0:72:1a:6f:8b:fe:11:b4:
cc:dd:83:cc:bb:80:56:f0:f2:c8:a6:5f:eb:54:d7:
a8:b1:24:2a:ee:61:a7:d3:6c:b1:3f:ed:0f:ab:92:
ab:9b:09:1e:5f:78:f1:2b:f5:84:ce:c3:24:0d:60:
0a:fa:f2:12:26:be:23:b8:c9:aa:f3:78:16:fe:4d:
0b:5a:54:cc:da:f4:1b:61:a0:00:11:67:01:1c:0c:
23:26:bc:67:76:35:61:a3:bd:c6:cf:ec:4c:04:00:
5e:ef:46:14:a7:de:6c:df:df:41:9a:2a:f0:50:ac:
1d:a0:d5:81:39:32:02:1c:71:5b:d4:ca:9c:e2:46:
c5:a3:c0:f0:33:8c:e2:7c:42:27:6d:0d:66:40:eb:
9a:21:4d:47:60:b1:30:42:44:96:f3:8a:5e:7e:12:
f7:23:86:7a:18:c6:64:e3:20:f3:6c:53:18:4c:b2:
92:6c:65:86:60:c5:cf:1f:28:cc:f8:35:33:55:bb:
70:9c:e1:2f:76:ab:4e:ea:89:9f:9c:ae:33:5f:29:
e6:35:46:4c:c2:9a:6e:4f:46:d7:ae:76:35:1f:36:
d7:97:83:75:a6:e4:31:95:39:f7:56:c7:bf:5c:65:
2c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:0B:C6:5C:15:FC:E8:65:6D:A1:C0:DB:6D:54:3B:3C:2E:7D:B7:0C
X509v3 Authority Key Identifier:
keyid:4D:D4:48:DB:52:8B:45:6E:B4:9E:92:AC:05:3F:9F:66:4A:93:83:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D80A3/96C50978CFFA11ECA2907161C4F9AE02/TdRI21KLRW60npKsBT-fZkqTg68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TdRI21KLRW60npKsBT-fZkqTg68.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D80A3/96C50978CFFA11ECA2907161C4F9AE02/A6923B10CFFE11EC8CFDFF68C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.37.236.0/22
Signature Algorithm: sha256WithRSAEncryption
10:24:94:fc:c3:ac:61:f7:35:23:2a:8d:0b:45:19:2e:0b:37:
22:35:87:46:d8:c3:5b:40:e3:3e:f3:6a:7c:51:bf:71:03:11:
eb:f7:6d:83:6c:04:05:7c:ac:fc:e2:a0:7a:35:a6:1b:bd:0a:
bc:86:55:72:de:2a:d4:a3:23:e6:51:b8:0b:d1:62:27:a3:80:
66:62:2e:c7:55:9c:21:0c:d3:d4:1a:c9:2b:8d:0e:a8:a6:84:
ac:5b:a5:f6:ed:d1:3d:3e:88:c0:ea:da:2f:27:46:d2:a9:a4:
e0:c7:07:44:06:96:8c:e7:4c:c8:da:95:c3:7a:f6:b6:88:5f:
98:e0:fe:c6:bd:93:64:59:0d:89:9b:e2:da:86:0b:b6:91:35:
93:cb:e0:90:03:a8:45:0d:21:c9:d1:e8:18:6e:4d:35:ae:3d:
6c:7b:5c:07:43:56:c0:65:33:67:d6:39:f6:3d:68:70:fe:55:
0f:71:c0:17:19:42:58:19:71:fd:cd:7d:52:2a:c3:36:13:b9:
de:b2:5f:91:70:84:80:5c:75:c5:6d:28:8f:5d:97:76:a2:6c:
f9:7c:8b:d1:58:00:0b:ea:75:f3:ad:8e:a2:6a:0e:18:c1:6c:
b2:cf:e6:a4:a5:8a:ca:ad:2b:e3:d5:06:60:02:aa:60:a8:55:
3f:ab:60:05
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
ODBBMzExMC8GA1UEBRMoNERENDQ4REI1MjhCNDU2RUI0OUU5MkFDMDUzRjlGNjY0
QTkzODNBRjAeFw0yMjA1MTAwMTE1MTZaFw0yMjEyMDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTYyNzliY2E0LWEzZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCZiQt1pREEbqE98icKFLeV4eCiLc6gchpvi/4RtMzdg8y7gFbw8simX+tU16ix
JCruYafTbLE/7Q+rkqubCR5fePEr9YTOwyQNYAr68hImviO4yarzeBb+TQtaVMza
9BthoAARZwEcDCMmvGd2NWGjvcbP7EwEAF7vRhSn3mzf30GaKvBQrB2g1YE5MgIc
cVvUypziRsWjwPAzjOJ8QidtDWZA65ohTUdgsTBCRJbzil5+EvcjhnoYxmTjIPNs
UxhMspJsZYZgxc8fKMz4NTNVu3Cc4S92q07qiZ+crjNfKeY1RkzCmm5PRteudjUf
NteXg3Wm5DGVOfdWx79cZSyvAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUrwvGXBX8
6GVtocDbbVQ7PC59twwwHwYDVR0jBBgwFoAUTdRI21KLRW60npKsBT+fZkqTg68w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4MEEzLzk2QzUwOTc4Q0ZG
QTExRUNBMjkwNzE2MUM0RjlBRTAyL1RkUkkyMUtMUlc2MG5wS3NCVC1mWmtxVGc2
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvVGRSSTIxS0xSVzYwbnBLc0JULWZaa3FUZzY4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
ODBBMy85NkM1MDk3OENGRkExMUVDQTI5MDcxNjFDNEY5QUUwMi9BNjkyM0IxMENG
RkUxMUVDOENGREZGNjhDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAmcl7DANBgkqhkiG9w0BAQsFAAOCAQEAECSU/MOsYfc1IyqN
C0UZLgs3IjWHRtjDW0DjPvNqfFG/cQMR6/dtg2wEBXys/OKgejWmG70KvIZVct4q
1KMj5lG4C9FiJ6OAZmIux1WcIQzT1BrJK40OqKaErFul9u3RPT6IwOraLydG0qmk
4McHRAaWjOdMyNqVw3r2tohfmOD+xr2TZFkNiZvi2oYLtpE1k8vgkAOoRQ0hydHo
GG5NNa49bHtcB0NWwGUzZ9Y59j1ocP5VD3HAFxlCWBlx/c19UirDNhO53rJfkXCE
gFx1xW0oj12XdqJs+XyL0VgAC+p1862OomoOGMFsss/mpKWKyq0r49UGYAKqYKhV
P6tgBQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:42 2024 by rpki-client on console-fra.rpki-client.org