Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9113BCE/0D45B38C5C2611E9AB0A9B64C4F9AE02/66E32C7E853011EAA9FD5D5FC4F9AE02.roa
File: 66E32C7E853011EAA9FD5D5FC4F9AE02.roa (raw, json)
Hash identifier: tssPdantVWPU88G2GYOmmLeRDsc7TwDWeIZGXLMs+cc=
Subject key identifier: 26:F5:93:F3:38:A2:CF:FE:EE:86:36:A3:FB:29:4D:87:E7:78:48:1D
Certificate issuer: /CN=A9113BCE/serialNumber=5821FCD41460E1CA94A0213E2C2A3855FFC022F6
Certificate serial: 0D9F
Authority key identifier: 58:21:FC:D4:14:60:E1:CA:94:A0:21:3E:2C:2A:38:55:FF:C0:22:F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCH81BRg4cqUoCE-LCo4Vf_AIvY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9113BCE/0D45B38C5C2611E9AB0A9B64C4F9AE02/66E32C7E853011EAA9FD5D5FC4F9AE02.roa
Signing time: Mon 12 Sep 2022 06:57:02 +0000
ROA not before: Mon 12 Sep 2022 06:57:02 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 55799
IP address blocks: 103.68.223.0/24 maxlen: 24
103.71.254.0/24 maxlen: 24
103.72.4.0/23 maxlen: 23
103.72.4.0/24 maxlen: 24
103.72.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3487 (0xd9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9113BCE/serialNumber=5821FCD41460E1CA94A0213E2C2A3855FFC022F6
Validity
Not Before: Sep 12 06:57:02 2022 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=631ed83d-80a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:57:e5:dd:df:95:93:d2:7f:26:5d:47:0e:fc:
e0:dc:2c:3c:54:a6:0b:03:9a:57:5b:9a:84:5d:ae:
72:3e:8d:b3:7f:48:12:6f:66:3d:d0:6f:05:af:45:
49:43:0c:33:a2:20:fc:4e:39:ee:9d:4e:14:b5:ab:
bc:13:aa:dd:55:c9:75:71:37:29:3f:67:10:45:80:
97:8b:2b:a2:f0:77:44:fd:7b:e0:25:d4:98:29:e4:
ce:69:da:d3:2e:56:5a:95:dd:1c:89:88:61:15:6d:
e6:bb:2b:6d:5d:0b:28:9c:50:21:68:b4:1a:8c:c0:
f8:b8:41:2a:d9:e8:f3:e5:1e:41:6d:21:48:af:64:
34:83:19:e8:4e:39:c6:22:76:43:8b:0f:0e:d7:01:
49:b8:46:10:5b:c6:08:b1:0d:83:5a:cf:d0:ae:1b:
5a:9a:cb:84:b8:5b:87:fc:04:cc:fd:bb:e1:fc:ac:
55:72:a8:95:d8:75:07:9e:77:ea:d6:78:06:91:24:
e4:d9:6c:cb:f3:b2:55:ea:14:d4:fc:ac:11:6a:dd:
53:09:4e:c5:59:fe:0d:57:de:21:02:c2:17:05:bf:
ba:ce:f5:f0:8e:6a:f2:b7:8b:01:cc:23:19:f7:12:
3b:d6:0f:65:5f:b8:20:c4:fb:f0:3e:0e:e2:1a:44:
91:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:F5:93:F3:38:A2:CF:FE:EE:86:36:A3:FB:29:4D:87:E7:78:48:1D
X509v3 Authority Key Identifier:
keyid:58:21:FC:D4:14:60:E1:CA:94:A0:21:3E:2C:2A:38:55:FF:C0:22:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9113BCE/0D45B38C5C2611E9AB0A9B64C4F9AE02/WCH81BRg4cqUoCE-LCo4Vf_AIvY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCH81BRg4cqUoCE-LCo4Vf_AIvY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113BCE/0D45B38C5C2611E9AB0A9B64C4F9AE02/66E32C7E853011EAA9FD5D5FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.68.223.0/24
103.71.254.0/24
103.72.4.0/23
Signature Algorithm: sha256WithRSAEncryption
80:7d:fc:59:af:b7:34:e1:b9:73:1a:f6:3d:c4:2a:ae:a3:71:
f6:e6:9c:de:8e:43:0d:3b:60:d5:99:d9:db:5a:f9:5e:7a:af:
8d:90:a2:da:44:e4:8a:88:ba:92:10:e4:e2:ec:2a:74:34:dc:
dc:d9:35:bb:29:a7:f3:5c:14:3b:a9:59:75:b7:a2:e9:9a:c4:
29:d4:51:fc:71:9a:14:64:77:14:33:ad:3d:dc:f8:18:ba:ed:
4d:c4:2a:91:d0:8b:25:5e:e3:12:c5:2c:fb:3e:4b:f7:d3:0a:
bf:d8:42:86:9c:37:04:af:04:7d:f2:ac:b5:46:3a:22:94:e4:
4e:58:6d:45:9c:0a:1b:6a:58:69:0b:31:9d:8e:d6:1b:cb:ea:
5f:4d:fe:01:d7:5f:93:18:a6:e3:75:ac:63:f9:b0:a8:ed:51:
a5:01:ba:38:4b:2f:2d:59:ea:c7:4a:72:6e:f5:be:a6:37:9e:
84:7c:fc:5c:09:5a:de:6c:ad:f8:9e:95:b4:b7:a5:21:46:9d:
46:ab:f6:a6:58:98:4e:ea:5f:7f:c9:9a:90:c7:19:af:8e:40:
be:05:22:b3:24:a1:06:df:ab:43:8f:27:be:e1:3b:35:3b:a5:
4d:b2:fe:d9:eb:67:75:63:ce:9b:87:3e:1a:d1:df:67:13:65:
24:7e:fb:2a
-----BEGIN CERTIFICATE-----
MIIFfTCCBGWgAwIBAgICDZ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTNCQ0UxMTAvBgNVBAUTKDU4MjFGQ0Q0MTQ2MEUxQ0E5NEEwMjEzRTJDMkEzODU1
RkZDMDIyRjYwHhcNMjIwOTEyMDY1NzAyWhcNMjMxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MzFlZDgzZC04MGE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyVfl3d+Vk9J/Jl1HDvzg3Cw8VKYLA5pXW5qEXa5yPo2zf0gSb2Y90G8Fr0VJ
QwwzoiD8TjnunU4Utau8E6rdVcl1cTcpP2cQRYCXiyui8HdE/XvgJdSYKeTOadrT
LlZald0ciYhhFW3muyttXQsonFAhaLQajMD4uEEq2ejz5R5BbSFIr2Q0gxnoTjnG
InZDiw8O1wFJuEYQW8YIsQ2DWs/QrhtamsuEuFuH/ATM/bvh/KxVcqiV2HUHnnfq
1ngGkSTk2WzL87JV6hTU/KwRat1TCU7FWf4NV94hAsIXBb+6zvXwjmryt4sBzCMZ
9xI71g9lX7ggxPvwPg7iGkSRLwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFCb1k/M4
os/+7oY2o/spTYfneEgdMB8GA1UdIwQYMBaAFFgh/NQUYOHKlKAhPiwqOFX/wCL2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0JDRS8wRDQ1QjM4QzVD
MjYxMUU5QUIwQTlCNjRDNEY5QUUwMi9XQ0g4MUJSZzRjcVVvQ0UtTENvNFZmX0FJ
dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dDSDgxQlJnNGNxVW9DRS1MQ280VmZfQUl2WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTNCQ0UvMEQ0NUIzOEM1QzI2MTFFOUFCMEE5QjY0QzRGOUFFMDIvNjZFMzJDN0U4
NTMwMTFFQUE5RkQ1RDVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E
HDAaMBgEAgABMBIDBABnRN8DBABnR/4DBAFnSAQwDQYJKoZIhvcNAQELBQADggEB
AIB9/FmvtzThuXMa9j3EKq6jcfbmnN6OQw07YNWZ2dta+V56r42QotpE5IqIupIQ
5OLsKnQ03NzZNbspp/NcFDupWXW3oumaxCnUUfxxmhRkdxQzrT3c+Bi67U3EKpHQ
iyVe4xLFLPs+S/fTCr/YQoacNwSvBH3yrLVGOiKU5E5YbUWcChtqWGkLMZ2O1hvL
6l9N/gHXX5MYpuN1rGP5sKjtUaUBujhLLy1Z6sdKcm71vqY3noR8/FwJWt5srfie
lbS3pSFGnUar9qZYmE7qX3/JmpDHGa+OQL4FIrMkoQbfq0OPJ77hOzU7pU2y/tnr
Z3VjzpuHPhrR32cTZSR++yo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:45 2024 by rpki-client on console-ams.rpki-client.org