Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91270E6/75648ECED63511E896631322C4F9AE02/DB05D92EBA9B11EC88EADB1AC4F9AE02.roa
File: DB05D92EBA9B11EC88EADB1AC4F9AE02.roa (raw, json)
Hash identifier: ShvHQ0bmBbV/rLOqhryFibJugZ/B8e9C+3/yHJzA/0c=
Subject key identifier: A0:7B:B6:92:1F:F1:2C:44:BA:04:6E:15:AF:06:DA:BC:2A:BC:4B:76
Certificate issuer: /CN=A91270E6/serialNumber=22A2FAC461FFD523645A68116E55C22D8E986C99
Certificate serial: 0394
Authority key identifier: 22:A2:FA:C4:61:FF:D5:23:64:5A:68:11:6E:55:C2:2D:8E:98:6C:99
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IqL6xGH_1SNkWmgRblXCLY6YbJk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91270E6/75648ECED63511E896631322C4F9AE02/DB05D92EBA9B11EC88EADB1AC4F9AE02.roa
Signing time: Fri 01 Jul 2022 18:24:24 +0000
ROA not before: Fri 01 Jul 2022 18:24:24 +0000
ROA not after: Sat 30 Sep 2023 00:00:00 +0000
asID: 134382
IP address blocks: 103.102.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 916 (0x394)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91270E6/serialNumber=22A2FAC461FFD523645A68116E55C22D8E986C99
Validity
Not Before: Jul 1 18:24:24 2022 GMT
Not After : Sep 30 00:00:00 2023 GMT
Subject: CN=62bf3bd8-f1b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b7:56:a8:72:50:cf:f9:e5:2b:ce:c9:50:22:
75:29:1e:ff:7a:77:8c:29:46:c1:b4:7b:a9:41:a5:
b8:78:8c:3f:ba:93:84:58:a1:23:68:55:85:e3:63:
07:c8:3d:ab:dd:91:2f:76:e3:35:8b:b3:0a:d7:2e:
5b:86:8d:f4:0d:52:cc:03:30:99:ff:c9:a5:9a:0f:
95:c3:24:5b:de:fd:e5:39:82:06:e5:b0:f6:ee:b5:
21:64:36:30:4c:87:62:73:89:ae:29:a0:b6:f7:01:
d7:4c:ab:40:26:d5:e9:f2:f3:8b:22:b5:6d:e2:3c:
cb:6b:12:4c:b7:bb:b5:52:8f:68:87:9d:96:f1:99:
25:0e:33:37:28:77:df:01:1f:43:6c:22:cb:27:41:
a2:ae:ed:ac:cd:51:5f:3d:00:00:d3:5e:23:e3:ca:
d0:e7:93:f9:6d:37:32:4b:0a:d4:cb:56:da:67:0e:
7e:ae:ab:20:f6:26:07:e2:51:55:24:66:30:75:cd:
2c:86:db:f4:04:42:0f:cc:ed:61:d3:3c:45:25:c3:
c8:58:f2:09:c3:2d:a3:a0:57:85:dc:f1:a8:6d:3b:
16:dd:79:eb:af:fb:2e:3a:a5:9c:18:46:47:c9:af:
12:cc:91:7e:a0:49:8b:01:72:ad:4e:18:a0:18:ea:
01:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:7B:B6:92:1F:F1:2C:44:BA:04:6E:15:AF:06:DA:BC:2A:BC:4B:76
X509v3 Authority Key Identifier:
keyid:22:A2:FA:C4:61:FF:D5:23:64:5A:68:11:6E:55:C2:2D:8E:98:6C:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91270E6/75648ECED63511E896631322C4F9AE02/IqL6xGH_1SNkWmgRblXCLY6YbJk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IqL6xGH_1SNkWmgRblXCLY6YbJk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91270E6/75648ECED63511E896631322C4F9AE02/DB05D92EBA9B11EC88EADB1AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.102.255.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:2c:ad:66:f4:2f:90:f8:4f:88:13:82:98:5b:5d:c8:3c:5a:
fd:2f:62:b9:2f:ef:04:01:93:2d:fe:2c:00:55:51:3f:48:d2:
2c:d2:8c:d7:2b:11:54:12:2c:22:71:5e:b7:84:25:44:9b:97:
30:0e:b8:c7:38:fe:3b:10:12:04:2b:97:ee:90:3b:40:d0:8b:
f2:45:5a:48:da:b9:75:16:96:be:e8:08:0f:a1:83:52:57:9e:
72:0b:ae:3f:b2:af:38:0c:4e:df:a0:f0:46:b3:46:83:72:80:
19:3c:6b:f1:eb:04:50:0a:ca:06:d4:3c:ae:3f:14:3d:c0:75:
ff:f3:be:6d:8a:cc:d4:10:7e:f4:1c:c6:39:e7:1b:a8:86:ec:
13:fd:ae:a3:ac:d0:0b:0c:ca:ad:42:37:83:f5:f6:ae:73:67:
5a:2e:ee:ca:6f:aa:f9:4e:ce:b4:d8:06:d9:02:a6:a7:02:5e:
3e:d1:08:5c:45:a6:4e:20:ad:aa:37:26:74:2b:60:15:e9:a1:
e5:f7:68:49:27:e1:f1:f4:44:5d:9e:44:0b:26:3e:b2:44:02:
be:18:60:e5:56:0d:f2:a5:48:c0:5b:f7:0a:a0:c5:4f:92:05:
b7:ee:2f:8b:ca:91:64:53:00:57:3e:7c:fb:48:08:c7:64:af:
fc:af:59:11
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICA5QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjcwRTYxMTAvBgNVBAUTKDIyQTJGQUM0NjFGRkQ1MjM2NDVBNjgxMTZFNTVDMjJE
OEU5ODZDOTkwHhcNMjIwNzAxMTgyNDI0WhcNMjMwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02MmJmM2JkOC1mMWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu7dWqHJQz/nlK87JUCJ1KR7/eneMKUbBtHupQaW4eIw/upOEWKEjaFWF42MH
yD2r3ZEvduM1i7MK1y5bho30DVLMAzCZ/8mlmg+VwyRb3v3lOYIG5bD27rUhZDYw
TIdic4muKaC29wHXTKtAJtXp8vOLIrVt4jzLaxJMt7u1Uo9oh52W8ZklDjM3KHff
AR9DbCLLJ0Giru2szVFfPQAA014j48rQ55P5bTcySwrUy1baZw5+rqsg9iYH4lFV
JGYwdc0shtv0BEIPzO1h0zxFJcPIWPIJwy2joFeF3PGobTsW3Xnrr/suOqWcGEZH
ya8SzJF+oEmLAXKtThigGOoB6QIDAQABo4IClTCCApEwHQYDVR0OBBYEFKB7tpIf
8SxEugRuFa8G2rwqvEt2MB8GA1UdIwQYMBaAFCKi+sRh/9UjZFpoEW5Vwi2OmGyZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzBFNi83NTY0OEVDRUQ2
MzUxMUU4OTY2MzEzMjJDNEY5QUUwMi9JcUw2eEdIXzFTTmtXbWdSYmxYQ0xZNlli
SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lxTDZ4R0hfMVNOa1dtZ1JibFhDTFk2WWJKay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjcwRTYvNzU2NDhFQ0VENjM1MTFFODk2NjMxMzIyQzRGOUFFMDIvREIwNUQ5MkVC
QTlCMTFFQzg4RUFEQjFBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnZv8wDQYJKoZIhvcNAQELBQADggEBAE0srWb0L5D4T4gT
gphbXcg8Wv0vYrkv7wQBky3+LABVUT9I0izSjNcrEVQSLCJxXreEJUSblzAOuMc4
/jsQEgQrl+6QO0DQi/JFWkjauXUWlr7oCA+hg1JXnnILrj+yrzgMTt+g8EazRoNy
gBk8a/HrBFAKygbUPK4/FD3Adf/zvm2KzNQQfvQcxjnnG6iG7BP9rqOs0AsMyq1C
N4P19q5zZ1ou7spvqvlOzrTYBtkCpqcCXj7RCFxFpk4grao3JnQrYBXpoeX3aEkn
4fH0RF2eRAsmPrJEAr4YYOVWDfKlSMBb9wqgxU+SBbfuL4vKkWRTAFc+fPtICMdk
r/yvWRE=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:35 2023 by rpki-client on console-ams.rpki-client.org