Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D030/2E250032033711E9ACB9DB1FC4F9AE02/E67680D8AAC611EA8D5E2D1DC4F9AE02.roa
File: E67680D8AAC611EA8D5E2D1DC4F9AE02.roa (raw, json)
Hash identifier: 78JEq5dgqSjFCzBMDoMIvxjtzLMMY0sE3J/J5+pzQSY=
Subject key identifier: 6C:2D:0B:FD:5D:30:85:7C:75:05:B2:20:C6:99:66:58:71:30:30:9D
Certificate issuer: /CN=A912D030/serialNumber=9C7F43D9D8089642BA312AF7A22AE551E76005D0
Certificate serial: 0DD1
Authority key identifier: 9C:7F:43:D9:D8:08:96:42:BA:31:2A:F7:A2:2A:E5:51:E7:60:05:D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nH9D2dgIlkK6MSr3oirlUedgBdA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D030/2E250032033711E9ACB9DB1FC4F9AE02/E67680D8AAC611EA8D5E2D1DC4F9AE02.roa
Signing time: Tue 01 Mar 2022 07:05:16 +0000
ROA not before: Tue 01 Mar 2022 07:05:16 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 4826
IP address blocks: 103.126.232.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3537 (0xdd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D030/serialNumber=9C7F43D9D8089642BA312AF7A22AE551E76005D0
Validity
Not Before: Mar 1 07:05:16 2022 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=621dc5ac-1254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:96:ee:b2:ea:44:68:e0:98:1c:6e:ed:be:d4:
e8:0e:fa:29:a9:7b:20:65:41:6b:69:55:2f:58:00:
f1:69:4e:cd:4e:18:0a:32:51:90:0e:04:e6:1f:3b:
75:60:08:ae:98:6f:4a:d8:21:1f:fa:e8:79:c2:d2:
57:b3:d6:ca:33:7a:ca:aa:c5:0d:69:1c:df:f2:33:
bd:36:8a:2d:83:d4:d5:89:7e:28:a9:27:52:f1:60:
ab:ed:b3:61:25:ca:17:51:de:6b:78:92:95:3d:f1:
62:59:b4:78:49:98:54:8c:91:16:cf:69:c5:3b:d7:
8e:d0:fb:bd:aa:7c:dd:45:8b:7b:8d:5c:a5:05:37:
e9:18:78:5e:0c:05:72:d4:ab:dd:30:04:f1:90:c9:
c5:3d:4c:0a:3b:bd:b1:c1:10:8e:ab:84:87:1e:6b:
6b:d0:2f:bf:63:51:6d:5e:c0:27:c3:ea:cb:e6:7f:
f0:7e:3b:48:1a:05:68:6c:80:c4:e3:b1:25:0d:47:
bf:7b:7f:6d:e7:a6:f2:03:0a:9d:72:7e:bb:4a:0e:
6a:ca:d6:63:6a:89:75:1e:7c:fc:38:af:39:31:52:
b4:09:32:b1:80:c3:33:02:42:85:b9:0a:93:33:7e:
0d:16:33:2f:ee:4a:2e:e2:70:44:06:22:4a:b6:2d:
23:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:2D:0B:FD:5D:30:85:7C:75:05:B2:20:C6:99:66:58:71:30:30:9D
X509v3 Authority Key Identifier:
keyid:9C:7F:43:D9:D8:08:96:42:BA:31:2A:F7:A2:2A:E5:51:E7:60:05:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D030/2E250032033711E9ACB9DB1FC4F9AE02/nH9D2dgIlkK6MSr3oirlUedgBdA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nH9D2dgIlkK6MSr3oirlUedgBdA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D030/2E250032033711E9ACB9DB1FC4F9AE02/E67680D8AAC611EA8D5E2D1DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.126.232.0/22
Signature Algorithm: sha256WithRSAEncryption
55:4d:5b:f0:37:05:f1:f1:7e:70:dd:d4:48:0e:0c:56:fc:b1:
65:a0:26:4d:21:ce:c8:59:d2:77:38:0c:a8:5b:b6:34:9a:f3:
05:c2:83:6f:a9:36:06:c5:43:b9:8a:bd:bc:5c:fc:92:39:ca:
1a:34:74:80:6e:75:0c:e0:4b:99:07:cd:f9:4e:ea:f9:7f:74:
88:03:fa:4b:6d:ea:47:f7:61:f2:6a:95:72:55:35:69:f9:03:
c4:8d:85:94:e8:a1:23:a7:f0:a4:03:6b:6c:30:d0:e7:e3:15:
40:ff:52:58:84:b2:b7:0b:30:54:99:3a:9a:5f:a9:7e:7b:8a:
5c:57:b4:b4:17:f9:fb:41:ed:02:2b:fe:04:f5:6a:09:8d:1f:
2b:bf:25:28:b3:f6:dd:4b:c6:22:f8:32:3c:28:23:c6:a4:51:
cf:3b:af:67:67:ad:d8:9d:f8:e9:0f:f6:a0:1f:67:a9:31:8f:
14:fb:b6:10:1a:01:85:3a:14:b5:dd:fd:fe:2b:32:9c:61:78:
e5:b9:dd:55:5c:da:f3:86:eb:95:ef:86:71:c1:2c:8f:d8:06:
1b:9b:45:79:0a:7a:9d:6c:66:3e:91:18:6f:a7:3f:be:d6:24:
dd:fc:0d:2b:b9:f5:45:7f:ae:2b:7a:90:cb:23:4a:f5:f0:9a:
a5:87:3d:c8
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICDdEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkQwMzAxMTAvBgNVBAUTKDlDN0Y0M0Q5RDgwODk2NDJCQTMxMkFGN0EyMkFFNTUx
RTc2MDA1RDAwHhcNMjIwMzAxMDcwNTE2WhcNMjIwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MjFkYzVhYy0xMjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5ZbusupEaOCYHG7tvtToDvopqXsgZUFraVUvWADxaU7NThgKMlGQDgTmHzt1
YAiumG9K2CEf+uh5wtJXs9bKM3rKqsUNaRzf8jO9Nootg9TViX4oqSdS8WCr7bNh
JcoXUd5reJKVPfFiWbR4SZhUjJEWz2nFO9eO0Pu9qnzdRYt7jVylBTfpGHheDAVy
1KvdMATxkMnFPUwKO72xwRCOq4SHHmtr0C+/Y1FtXsAnw+rL5n/wfjtIGgVobIDE
47ElDUe/e39t56byAwqdcn67Sg5qytZjaol1Hnz8OK85MVK0CTKxgMMzAkKFuQqT
M34NFjMv7kou4nBEBiJKti0j9wIDAQABo4IClTCCApEwHQYDVR0OBBYEFGwtC/1d
MIV8dQWyIMaZZlhxMDCdMB8GA1UdIwQYMBaAFJx/Q9nYCJZCujEq96Iq5VHnYAXQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDAzMC8yRTI1MDAzMjAz
MzcxMUU5QUNCOURCMUZDNEY5QUUwMi9uSDlEMmRnSWxrSzZNU3Izb2lybFVlZGdC
ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25IOUQyZGdJbGtLNk1TcjNvaXJsVWVkZ0JkQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkQwMzAvMkUyNTAwMzIwMzM3MTFFOUFDQjlEQjFGQzRGOUFFMDIvRTY3NjgwRDhB
QUM2MTFFQThENUUyRDFEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJnfugwDQYJKoZIhvcNAQELBQADggEBAFVNW/A3BfHxfnDd
1EgODFb8sWWgJk0hzshZ0nc4DKhbtjSa8wXCg2+pNgbFQ7mKvbxc/JI5yho0dIBu
dQzgS5kHzflO6vl/dIgD+ktt6kf3YfJqlXJVNWn5A8SNhZTooSOn8KQDa2ww0Ofj
FUD/UliEsrcLMFSZOppfqX57ilxXtLQX+ftB7QIr/gT1agmNHyu/JSiz9t1LxiL4
MjwoI8akUc87r2dnrdid+OkP9qAfZ6kxjxT7thAaAYU6FLXd/f4rMpxheOW53VVc
2vOG65XvhnHBLI/YBhubRXkKep1sZj6RGG+nP77WJN38DSu59UV/rit6kMsjSvXw
mqWHPcg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:58 2024 by rpki-client on console-fra.rpki-client.org