Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134358/6972A42A175611EBA846E00CC4F9AE02/5A74074CC11511EC83C0770DC4F9AE02.roa
File: 5A74074CC11511EC83C0770DC4F9AE02.roa (raw, json)
Hash identifier: wmOR4M5tJAYHcnAT97TTpAalXO6ZoKSipRso6BeNyk8=
Subject key identifier: BD:D2:BF:F7:F8:AB:6F:CA:0D:1B:E1:81:FF:F5:52:58:01:FA:18:B4
Certificate issuer: /CN=A9134358/serialNumber=AEA2980090C7B9805A035555553D1392A6AA5221
Certificate serial: 05B4
Authority key identifier: AE:A2:98:00:90:C7:B9:80:5A:03:55:55:55:3D:13:92:A6:AA:52:21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rqKYAJDHuYBaA1VVVT0TkqaqUiE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134358/6972A42A175611EBA846E00CC4F9AE02/5A74074CC11511EC83C0770DC4F9AE02.roa
Signing time: Thu 01 Dec 2022 00:29:50 +0000
ROA not before: Thu 01 Dec 2022 00:29:49 +0000
ROA not after: Thu 30 Mar 2023 00:00:00 +0000
asID: 138527
IP address blocks: 103.156.24.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1460 (0x5b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134358/serialNumber=AEA2980090C7B9805A035555553D1392A6AA5221
Validity
Not Before: Dec 1 00:29:49 2022 GMT
Not After : Mar 30 00:00:00 2023 GMT
Subject: CN=6387f57d-0458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:66:a8:2e:a4:3c:93:8e:08:62:a7:a6:22:90:
53:37:96:c0:b6:42:18:10:5c:70:58:cf:0c:5b:9e:
ce:f1:d4:04:5f:eb:1d:4e:18:88:00:e6:df:c2:93:
10:4a:0c:71:d4:de:e6:4c:b1:91:08:04:2f:4a:ea:
ed:f5:cb:d2:22:f7:51:65:da:a2:89:09:f6:3d:c8:
07:a6:4b:d3:c5:dc:16:76:4e:75:74:e0:33:e3:4d:
96:1b:c0:69:9d:9d:52:ad:a8:d0:ce:d4:77:6f:70:
80:01:51:93:73:1b:23:9f:32:e5:ba:4c:51:bb:77:
87:43:e0:5e:5a:11:48:5f:47:b6:4e:6c:72:fb:6b:
13:62:4e:f5:06:f8:97:71:9a:1e:19:fb:ae:bb:d4:
3c:a5:37:62:cb:71:c5:58:73:8c:7d:f5:2a:24:f5:
2a:f6:a5:70:bb:a3:8e:1d:23:f5:34:27:d5:0c:68:
49:5d:75:98:c1:6d:c7:3b:02:9a:59:f1:16:56:ad:
62:12:b1:7e:4c:01:6e:80:e3:bf:40:a8:f6:1a:90:
44:da:0b:fc:ba:d3:fa:2d:f3:2c:37:63:f9:ce:31:
66:ce:5d:35:47:00:9e:c4:f3:8c:3e:ef:e3:ae:71:
60:77:4a:bc:7b:1e:1e:d6:1f:86:12:26:0a:5b:ed:
46:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:D2:BF:F7:F8:AB:6F:CA:0D:1B:E1:81:FF:F5:52:58:01:FA:18:B4
X509v3 Authority Key Identifier:
keyid:AE:A2:98:00:90:C7:B9:80:5A:03:55:55:55:3D:13:92:A6:AA:52:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134358/6972A42A175611EBA846E00CC4F9AE02/rqKYAJDHuYBaA1VVVT0TkqaqUiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rqKYAJDHuYBaA1VVVT0TkqaqUiE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134358/6972A42A175611EBA846E00CC4F9AE02/5A74074CC11511EC83C0770DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.156.24.0/23
Signature Algorithm: sha256WithRSAEncryption
75:ba:f1:16:a6:14:df:17:da:a5:81:9e:7c:cc:4c:51:61:f5:
f8:05:ad:d7:19:67:b9:92:16:71:c5:48:70:a1:41:cf:bf:56:
c6:3d:1a:a8:12:06:2d:51:ae:9b:93:10:d0:67:ef:38:61:58:
40:4c:c7:90:2a:ea:58:17:30:5b:5b:73:e9:78:5f:c9:6f:b8:
f5:09:f8:0f:1b:3b:f7:a6:8d:6f:4e:92:2f:16:44:27:9b:44:
a4:5b:dd:68:5e:4b:1c:a5:96:9c:22:8d:14:0b:8d:20:4a:65:
cf:d8:a7:bc:d4:ea:d4:af:2c:d9:ff:00:a5:d8:3a:47:45:4a:
29:98:68:cd:22:81:cf:7b:50:9d:5c:98:c3:96:73:ed:5f:64:
e1:9c:99:7b:10:50:3e:3f:36:e4:d5:14:9b:f1:16:5f:3d:3d:
96:c0:3e:02:20:b5:89:10:32:c0:9c:d4:32:17:52:90:94:67:
15:10:08:b1:6d:01:e8:cf:a5:2b:db:10:37:d0:77:6c:d8:ad:
82:8f:da:2e:0e:83:bd:88:be:8f:00:b6:0f:f4:12:42:50:2a:
d8:01:e4:42:a6:9f:34:a3:d9:94:b9:28:2e:e3:24:2a:27:0e:
0e:12:b6:b1:df:f7:79:c7:25:3c:61:f7:ec:25:f2:d7:e4:63:
1b:06:c6:8d
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzQzNTgxMTAvBgNVBAUTKEFFQTI5ODAwOTBDN0I5ODA1QTAzNTU1NTU1M0QxMzky
QTZBQTUyMjEwHhcNMjIxMjAxMDAyOTQ5WhcNMjMwMzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02Mzg3ZjU3ZC0wNDU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3maoLqQ8k44IYqemIpBTN5bAtkIYEFxwWM8MW57O8dQEX+sdThiIAObfwpMQ
Sgxx1N7mTLGRCAQvSurt9cvSIvdRZdqiiQn2PcgHpkvTxdwWdk51dOAz402WG8Bp
nZ1SrajQztR3b3CAAVGTcxsjnzLlukxRu3eHQ+BeWhFIX0e2Tmxy+2sTYk71BviX
cZoeGfuuu9Q8pTdiy3HFWHOMffUqJPUq9qVwu6OOHSP1NCfVDGhJXXWYwW3HOwKa
WfEWVq1iErF+TAFugOO/QKj2GpBE2gv8utP6LfMsN2P5zjFmzl01RwCexPOMPu/j
rnFgd0q8ex4e1h+GEiYKW+1GzQIDAQABo4IClTCCApEwHQYDVR0OBBYEFL3Sv/f4
q2/KDRvhgf/1UlgB+hi0MB8GA1UdIwQYMBaAFK6imACQx7mAWgNVVVU9E5KmqlIh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDM1OC82OTcyQTQyQTE3
NTYxMUVCQTg0NkUwMENDNEY5QUUwMi9ycUtZQUpESHVZQmFBMVZWVlQwVGtxYXFV
aUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JxS1lBSkRIdVlCYUExVlZWVDBUa3FhcVVpRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzQzNTgvNjk3MkE0MkExNzU2MTFFQkE4NDZFMDBDQzRGOUFFMDIvNUE3NDA3NEND
MTE1MTFFQzgzQzA3NzBEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnnBgwDQYJKoZIhvcNAQELBQADggEBAHW68RamFN8X2qWB
nnzMTFFh9fgFrdcZZ7mSFnHFSHChQc+/VsY9GqgSBi1RrpuTENBn7zhhWEBMx5Aq
6lgXMFtbc+l4X8lvuPUJ+A8bO/emjW9Oki8WRCebRKRb3WheSxyllpwijRQLjSBK
Zc/Yp7zU6tSvLNn/AKXYOkdFSimYaM0igc97UJ1cmMOWc+1fZOGcmXsQUD4/NuTV
FJvxFl89PZbAPgIgtYkQMsCc1DIXUpCUZxUQCLFtAejPpSvbEDfQd2zYrYKP2i4O
g72Ivo8Atg/0EkJQKtgB5EKmnzSj2ZS5KC7jJConDg4StrHf93nHJTxh9+wl8tfk
YxsGxo0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:59 2024 by rpki-client on console-fra.rpki-client.org