Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C533/9CC43306A74911EBB0302F82C4F9AE02/FA081F66840A11EC94C64A6AC4F9AE02.roa
File: FA081F66840A11EC94C64A6AC4F9AE02.roa (raw, json)
Hash identifier: hYjZFYROWj3HwC996Z2aFbAPQSaVqoRL5eRt9yOdAZE=
Subject key identifier: 03:35:68:E0:6B:FB:37:A9:E4:6C:DF:44:33:99:4B:68:01:48:D0:53
Certificate issuer: /CN=A912C533/serialNumber=AF96D111008404FF1B14516F7FCF67E928CEF666
Certificate serial: 024E
Authority key identifier: AF:96:D1:11:00:84:04:FF:1B:14:51:6F:7F:CF:67:E9:28:CE:F6:66
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r5bREQCEBP8bFFFvf89n6SjO9mY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C533/9CC43306A74911EBB0302F82C4F9AE02/FA081F66840A11EC94C64A6AC4F9AE02.roa
Signing time: Wed 02 Feb 2022 09:32:03 +0000
ROA not before: Wed 02 Feb 2022 09:32:03 +0000
ROA not after: Thu 02 Mar 2023 00:00:00 +0000
asID: 2527
IP address blocks: 133.114.0.0/16 maxlen: 24
133.165.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 590 (0x24e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C533/serialNumber=AF96D111008404FF1B14516F7FCF67E928CEF666
Validity
Not Before: Feb 2 09:32:03 2022 GMT
Not After : Mar 2 00:00:00 2023 GMT
Subject: CN=61fa4f92-60da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4f:88:91:bb:e3:ca:8a:38:c8:fd:18:6f:2d:
1f:a6:17:74:67:d3:4b:43:f1:01:62:2c:79:f8:9a:
bf:2e:c0:1d:16:b7:71:75:3f:c9:25:eb:f7:bc:99:
f3:1e:38:05:46:d8:ca:81:20:d6:bb:ae:b5:1b:ae:
56:24:2b:c0:5f:56:ec:21:3c:29:24:24:96:03:4a:
7c:0c:6f:04:00:3a:c2:7c:82:90:5a:f9:d4:46:4d:
d9:3d:c3:78:fb:f4:f2:f1:bd:58:41:40:60:55:d8:
5b:14:4c:a0:42:03:e4:89:75:11:41:6b:16:2d:c9:
95:e2:d1:02:08:de:ef:ce:0d:c5:f3:6a:6c:f7:29:
d8:f8:b7:29:ab:7e:9b:ca:d8:05:99:61:dd:c6:a4:
6b:70:4a:40:11:f7:c8:ff:f8:2b:fe:8b:7b:1d:02:
eb:11:fb:63:e1:3c:3b:d9:7d:a4:3f:da:a2:b7:6e:
33:5e:e3:6f:cc:53:07:2d:1e:c8:89:b1:37:5f:ba:
97:74:12:c9:c8:cd:6e:55:38:c5:99:87:b5:59:4f:
78:12:cf:98:71:ee:a7:25:ae:16:88:7f:bc:f7:01:
41:17:54:60:bb:5b:97:46:82:83:5a:a1:dd:0b:c8:
90:1a:ab:e9:8c:5a:20:d5:fb:c9:fa:ef:33:7f:b4:
85:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:35:68:E0:6B:FB:37:A9:E4:6C:DF:44:33:99:4B:68:01:48:D0:53
X509v3 Authority Key Identifier:
keyid:AF:96:D1:11:00:84:04:FF:1B:14:51:6F:7F:CF:67:E9:28:CE:F6:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C533/9CC43306A74911EBB0302F82C4F9AE02/r5bREQCEBP8bFFFvf89n6SjO9mY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r5bREQCEBP8bFFFvf89n6SjO9mY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C533/9CC43306A74911EBB0302F82C4F9AE02/FA081F66840A11EC94C64A6AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
133.114.0.0/16
133.165.128.0/18
Signature Algorithm: sha256WithRSAEncryption
38:1a:34:56:ed:61:20:e1:19:48:d1:41:0a:e2:a8:33:a9:bb:
b1:32:89:05:16:43:93:e9:a3:6a:96:96:43:4e:a5:fa:11:a6:
cb:d2:43:14:d2:e3:e1:35:b8:ad:a5:e7:37:36:26:50:26:19:
89:6a:97:ce:b0:20:ee:c1:a1:22:03:b7:d0:e2:b6:25:f0:bd:
a4:cc:c1:8a:e4:be:c4:4a:1e:00:7f:5b:2d:bb:98:c2:63:b9:
69:dd:2b:73:ac:64:da:24:c4:80:fa:3a:bf:93:42:1a:03:12:
98:10:22:95:aa:06:93:7c:f2:0c:80:5f:2f:6b:4e:b8:22:97:
74:74:91:f1:c7:b0:0f:f2:f6:8d:92:06:ca:90:8f:80:7b:86:
46:b9:fc:f3:2f:c4:00:7b:e5:6c:fe:de:db:00:33:46:b0:52:
2b:81:00:a9:e1:11:2a:9a:94:8b:e6:d5:1f:ac:17:fb:22:da:
46:4a:cf:35:3d:44:55:90:d2:b1:7a:93:fb:8f:65:0e:fc:e2:
d3:a6:35:90:94:e4:b1:7c:2d:64:81:b8:a2:d7:69:01:10:d6:
aa:9c:c1:d7:72:a4:c8:c0:b1:b8:f1:8f:b5:3f:31:5c:71:81:
7f:b9:1c:f7:96:a9:81:cc:35:f0:56:41:a0:e8:5c:1f:d8:8d:
3c:77:e7:4e
-----BEGIN CERTIFICATE-----
MIIFdjCCBF6gAwIBAgICAk4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkM1MzMxMTAvBgNVBAUTKEFGOTZEMTExMDA4NDA0RkYxQjE0NTE2RjdGQ0Y2N0U5
MjhDRUY2NjYwHhcNMjIwMjAyMDkzMjAzWhcNMjMwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02MWZhNGY5Mi02MGRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvU+Ikbvjyoo4yP0Yby0fphd0Z9NLQ/EBYix5+Jq/LsAdFrdxdT/JJev3vJnz
HjgFRtjKgSDWu661G65WJCvAX1bsITwpJCSWA0p8DG8EADrCfIKQWvnURk3ZPcN4
+/Ty8b1YQUBgVdhbFEygQgPkiXURQWsWLcmV4tECCN7vzg3F82ps9ynY+Lcpq36b
ytgFmWHdxqRrcEpAEffI//gr/ot7HQLrEftj4Tw72X2kP9qit24zXuNvzFMHLR7I
ibE3X7qXdBLJyM1uVTjFmYe1WU94Es+Yce6nJa4WiH+89wFBF1Rgu1uXRoKDWqHd
C8iQGqvpjFog1fvJ+u8zf7SF0QIDAQABo4ICmjCCApYwHQYDVR0OBBYEFAM1aOBr
+zep5GzfRDOZS2gBSNBTMB8GA1UdIwQYMBaAFK+W0REAhAT/GxRRb3/PZ+kozvZm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzUzMy85Q0M0MzMwNkE3
NDkxMUVCQjAzMDJGODJDNEY5QUUwMi9yNWJSRVFDRUJQOGJGRkZ2Zjg5bjZTak85
bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3I1YlJFUUNFQlA4YkZGRnZmODluNlNqTzltWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkM1MzMvOUNDNDMzMDZBNzQ5MTFFQkIwMzAyRjgyQzRGOUFFMDIvRkEwODFGNjY4
NDBBMTFFQzk0QzY0QTZBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJAYIKwYBBQUHAQcBAf8E
FTATMBEEAgABMAsDAwCFcgMEBoWlgDANBgkqhkiG9w0BAQsFAAOCAQEAOBo0Vu1h
IOEZSNFBCuKoM6m7sTKJBRZDk+mjapaWQ06l+hGmy9JDFNLj4TW4raXnNzYmUCYZ
iWqXzrAg7sGhIgO30OK2JfC9pMzBiuS+xEoeAH9bLbuYwmO5ad0rc6xk2iTEgPo6
v5NCGgMSmBAilaoGk3zyDIBfL2tOuCKXdHSR8cewD/L2jZIGypCPgHuGRrn88y/E
AHvlbP7e2wAzRrBSK4EAqeERKpqUi+bVH6wX+yLaRkrPNT1EVZDSsXqT+49lDvzi
06Y1kJTksXwtZIG4otdpARDWqpzB13KkyMCxuPGPtT8xXHGBf7kc95apgcw18FZB
oOhcH9iNPHfnTg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:49 2024 by rpki-client on console-ams.rpki-client.org