Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE14F/13E39B081E7711E7A02AD840C4F9AE02/7EF1F46A1E7911E79FF1C943C4F9AE02.roa
File: 7EF1F46A1E7911E79FF1C943C4F9AE02.roa (raw, json)
Hash identifier: X1t9SRe+OpXFSIpM51/10tG95t/XW2WE9VSnPjCuxWE=
Subject key identifier: B3:A2:C2:2B:8B:D2:EA:67:54:FF:09:9A:0F:92:6D:97:A2:DD:38:39
Certificate issuer: /CN=A91DE14F/serialNumber=B605060F0F0CDC580E4182C270078F71048F0E39
Certificate serial: 16FA
Authority key identifier: B6:05:06:0F:0F:0C:DC:58:0E:41:82:C2:70:07:8F:71:04:8F:0E:39
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgUGDw8M3FgOQYLCcAePcQSPDjk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE14F/13E39B081E7711E7A02AD840C4F9AE02/7EF1F46A1E7911E79FF1C943C4F9AE02.roa
Signing time: Fri 31 Dec 2021 17:13:12 +0000
ROA not before: Fri 31 Dec 2021 17:13:12 +0000
ROA not after: Sun 01 May 2022 00:00:00 +0000
asID: 134785
IP address blocks: 103.17.12.0/22 maxlen: 22
103.17.12.0/24 maxlen: 24
103.17.13.0/24 maxlen: 24
103.17.14.0/24 maxlen: 24
103.17.15.0/24 maxlen: 24
139.5.32.0/22 maxlen: 22
139.5.32.0/24 maxlen: 24
139.5.33.0/24 maxlen: 24
139.5.34.0/24 maxlen: 24
139.5.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5882 (0x16fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE14F/serialNumber=B605060F0F0CDC580E4182C270078F71048F0E39
Validity
Not Before: Dec 31 17:13:12 2021 GMT
Not After : May 1 00:00:00 2022 GMT
Subject: CN=61cf3a28-8b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:13:cf:c0:12:4c:c6:45:ee:c0:31:00:2e:f1:
c6:5c:2f:3a:a7:4a:c7:93:79:5e:1f:44:d0:71:63:
49:8b:8b:33:09:c0:ce:9e:15:36:ed:92:0b:aa:4f:
fd:04:71:78:75:85:e6:c1:2e:08:7e:a6:25:ad:00:
b1:ac:6a:af:26:28:39:8c:79:19:c8:d1:6b:15:65:
75:c0:2b:08:6e:39:90:27:44:14:e8:87:01:b1:a4:
4a:03:92:c2:d7:5b:c9:b9:46:2a:1b:1f:f7:d4:cc:
24:98:f8:6e:43:1d:88:ef:7f:02:33:09:23:32:36:
59:65:28:95:38:c7:81:83:23:a2:87:98:ba:43:9c:
09:fb:c1:ed:7c:bf:8c:bb:72:72:63:2e:a6:63:26:
35:06:86:5d:5d:93:ad:75:33:f8:41:e0:68:2c:b6:
99:fb:e8:cf:28:bd:a0:aa:f5:74:10:61:8e:ff:4c:
89:03:7c:df:cc:8c:ee:44:de:ae:12:b4:26:70:78:
1c:d7:1b:9c:f1:fc:7d:13:e1:e7:91:4a:d5:d3:53:
8b:f0:f3:4f:eb:d0:c6:79:4c:80:e4:9c:4f:44:28:
5f:2f:37:3d:14:d4:16:74:1e:cd:75:81:40:c8:24:
92:b0:46:c0:96:94:a0:81:46:2d:b9:9b:47:a6:e6:
7f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A2:C2:2B:8B:D2:EA:67:54:FF:09:9A:0F:92:6D:97:A2:DD:38:39
X509v3 Authority Key Identifier:
keyid:B6:05:06:0F:0F:0C:DC:58:0E:41:82:C2:70:07:8F:71:04:8F:0E:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE14F/13E39B081E7711E7A02AD840C4F9AE02/tgUGDw8M3FgOQYLCcAePcQSPDjk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgUGDw8M3FgOQYLCcAePcQSPDjk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE14F/13E39B081E7711E7A02AD840C4F9AE02/7EF1F46A1E7911E79FF1C943C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.17.12.0/22
139.5.32.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:49:73:ed:f6:ee:9b:96:c9:53:5d:5f:77:1a:d4:5b:09:1e:
58:29:d4:25:be:23:86:af:a0:23:e8:49:0d:58:37:50:d2:a5:
84:a5:65:a3:fc:e1:3d:6c:f9:66:f0:27:fb:36:e3:8f:2b:8d:
8e:4a:e5:3e:63:7a:d1:26:14:d0:c8:c0:2d:c2:bc:67:b2:d0:
5c:e6:7b:e6:48:d4:4b:f6:3b:b8:f9:61:55:b4:6a:56:81:71:
0f:cb:55:6c:99:4d:ec:4b:15:76:81:3c:38:f5:7f:ec:74:9d:
4b:8d:d4:5e:5a:44:22:c9:6d:a5:8b:e2:62:24:59:24:27:8e:
01:9b:f2:c6:14:4c:f3:46:b6:e0:c6:f1:99:55:77:6b:41:61:
9c:c4:88:e1:15:b0:7a:aa:b1:0d:47:49:fa:33:0b:32:5d:41:
bc:bb:f4:95:40:cb:3e:07:fe:50:f8:48:14:f4:33:31:ff:2a:
6d:b3:c3:ac:ab:7e:ed:69:1e:34:84:03:db:6f:f8:95:92:ee:
4d:51:82:74:57:3d:c1:19:6a:70:1a:54:66:11:6a:29:6f:0b:
0b:da:ee:54:6e:c4:d5:c8:59:52:d7:35:a5:87:5b:50:d9:8b:
ef:a7:26:f8:6e:2f:22:d1:c4:65:8c:11:34:c1:3a:54:d0:36:
26:ae:58:5d
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICFvowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REUxNEYxMTAvBgNVBAUTKEI2MDUwNjBGMEYwQ0RDNTgwRTQxODJDMjcwMDc4Rjcx
MDQ4RjBFMzkwHhcNMjExMjMxMTcxMzEyWhcNMjIwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MWNmM2EyOC04YjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuhPPwBJMxkXuwDEALvHGXC86p0rHk3leH0TQcWNJi4szCcDOnhU27ZILqk/9
BHF4dYXmwS4IfqYlrQCxrGqvJig5jHkZyNFrFWV1wCsIbjmQJ0QU6IcBsaRKA5LC
11vJuUYqGx/31MwkmPhuQx2I738CMwkjMjZZZSiVOMeBgyOih5i6Q5wJ+8HtfL+M
u3JyYy6mYyY1BoZdXZOtdTP4QeBoLLaZ++jPKL2gqvV0EGGO/0yJA3zfzIzuRN6u
ErQmcHgc1xuc8fx9E+HnkUrV01OL8PNP69DGeUyA5JxPRChfLzc9FNQWdB7NdYFA
yCSSsEbAlpSggUYtuZtHpuZ/6QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFLOiwiuL
0upnVP8Jmg+SbZei3Tg5MB8GA1UdIwQYMBaAFLYFBg8PDNxYDkGCwnAHj3EEjw45
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTE0Ri8xM0UzOUIwODFF
NzcxMUU3QTAyQUQ4NDBDNEY5QUUwMi90Z1VHRHc4TTNGZ09RWUxDY0FlUGNRU1BE
amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RnVUdEdzhNM0ZnT1FZTENjQWVQY1FTUERqay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REUxNEYvMTNFMzlCMDgxRTc3MTFFN0EwMkFEODQwQzRGOUFFMDIvN0VGMUY0NkEx
RTc5MTFFNzlGRjFDOTQzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAJnEQwDBAKLBSAwDQYJKoZIhvcNAQELBQADggEBAI9Jc+32
7puWyVNdX3ca1FsJHlgp1CW+I4avoCPoSQ1YN1DSpYSlZaP84T1s+WbwJ/s2448r
jY5K5T5jetEmFNDIwC3CvGey0Fzme+ZI1Ev2O7j5YVW0alaBcQ/LVWyZTexLFXaB
PDj1f+x0nUuN1F5aRCLJbaWL4mIkWSQnjgGb8sYUTPNGtuDG8ZlVd2tBYZzEiOEV
sHqqsQ1HSfozCzJdQby79JVAyz4H/lD4SBT0MzH/Km2zw6yrfu1pHjSEA9tv+JWS
7k1RgnRXPcEZanAaVGYRailvCwva7lRuxNXIWVLXNaWHW1DZi++nJvhuLyLRxGWM
ETTBOlTQNiauWF0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:43 2024 by rpki-client on console-fra.rpki-client.org