Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91384FF/BAE67446C6D911E8B64C3118C4F9AE02/34C78D2CC6DA11E89C3C8E18C4F9AE02.roa
File: 34C78D2CC6DA11E89C3C8E18C4F9AE02.roa (raw, json)
Hash identifier: u+mKuZD9+pbCcCoAyho4kFqDAvwN+wRdXQ4wR21jXnM=
Subject key identifier: 06:EF:26:62:0F:4D:F1:BE:26:2B:7E:A4:AB:D9:83:3C:96:45:3F:96
Certificate issuer: /CN=A91384FF/serialNumber=914773AD5863CB506560DACC64F27C34659D53FB
Certificate serial: 112B
Authority key identifier: 91:47:73:AD:58:63:CB:50:65:60:DA:CC:64:F2:7C:34:65:9D:53:FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUdzrVhjy1BlYNrMZPJ8NGWdU_s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91384FF/BAE67446C6D911E8B64C3118C4F9AE02/34C78D2CC6DA11E89C3C8E18C4F9AE02.roa
Signing time: Tue 20 Jun 2023 17:57:09 +0000
ROA not before: Tue 20 Jun 2023 17:57:09 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 135425
IP address blocks: 103.90.58.0/23 maxlen: 24
103.219.144.0/23 maxlen: 24
2405:6680::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4395 (0x112b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91384FF/serialNumber=914773AD5863CB506560DACC64F27C34659D53FB
Validity
Not Before: Jun 20 17:57:09 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=6491e875-b7d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ef:08:b6:c8:c7:d5:16:82:3e:55:d5:e4:fd:
89:e6:f5:ab:d7:09:db:00:3d:3f:81:3c:40:41:b4:
4a:51:e1:c9:6d:17:6d:e5:0d:45:4d:15:26:36:4c:
29:9b:be:85:af:91:50:44:9b:ec:e4:a9:b3:f3:38:
12:40:04:70:c9:82:f1:df:77:6a:6d:20:c8:61:17:
c2:82:62:d4:7c:38:a6:40:ef:05:63:c3:94:60:44:
7c:6f:3b:72:78:d8:8f:8a:46:2d:4e:f1:49:fd:fb:
35:eb:88:78:ad:ed:a4:8d:41:24:33:69:13:c2:bb:
7d:59:0b:b3:03:c8:a5:19:68:20:e9:63:f5:ec:ce:
3f:8f:5a:22:7b:17:a9:be:86:17:c7:70:c6:cf:b3:
72:26:4d:c5:31:7d:24:05:77:5f:c6:cd:7b:d3:e3:
20:09:c5:ec:4a:d9:c2:6a:a4:f4:d7:60:03:d2:8c:
3f:53:70:09:f0:64:78:22:3d:fe:ff:84:8f:0d:3c:
34:ce:36:d4:21:bf:d2:0f:e0:7f:0d:a5:99:61:f6:
f6:bc:3f:00:c0:83:f0:34:a0:78:52:f9:44:d3:ff:
7f:30:40:eb:fd:dd:93:89:4f:43:50:ec:c0:b8:78:
0f:7e:d1:3d:42:64:4e:2f:b7:88:2f:89:0f:d4:66:
d2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:EF:26:62:0F:4D:F1:BE:26:2B:7E:A4:AB:D9:83:3C:96:45:3F:96
X509v3 Authority Key Identifier:
keyid:91:47:73:AD:58:63:CB:50:65:60:DA:CC:64:F2:7C:34:65:9D:53:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91384FF/BAE67446C6D911E8B64C3118C4F9AE02/kUdzrVhjy1BlYNrMZPJ8NGWdU_s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUdzrVhjy1BlYNrMZPJ8NGWdU_s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91384FF/BAE67446C6D911E8B64C3118C4F9AE02/34C78D2CC6DA11E89C3C8E18C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.90.58.0/23
103.219.144.0/23
IPv6:
2405:6680::/32
Signature Algorithm: sha256WithRSAEncryption
b1:7d:f2:88:3e:e6:3f:a6:91:26:01:9d:ad:52:8c:3a:39:54:
16:61:db:7a:ed:1d:82:01:6f:23:25:0c:79:32:c1:d9:72:37:
a9:0d:85:0a:57:11:7b:c2:1f:c3:94:dc:d8:36:b6:72:6e:f0:
fc:b8:a1:aa:1b:82:37:8f:b0:16:68:74:a2:38:9d:a0:0f:37:
d9:73:90:39:50:e2:ef:04:97:a8:4a:f3:04:a6:6d:d3:f7:1c:
c5:d3:9f:68:49:87:81:60:9b:b6:cd:73:45:26:4c:c9:ec:35:
f9:e1:57:d4:a4:20:d4:88:b6:05:5b:b2:4d:eb:01:3b:0c:bd:
91:9b:28:9b:af:38:ab:1f:77:37:78:46:92:b2:00:8d:84:97:
ca:a6:03:9d:98:de:fb:53:e7:3a:6e:8a:b9:f3:34:36:32:67:
66:af:1c:9b:8f:a4:86:70:4d:9e:50:9e:92:25:bb:fb:fa:a3:
b5:f1:c9:80:cc:a3:06:37:c9:06:12:92:b8:58:f4:15:01:fd:
9c:1c:f5:8e:e8:96:01:6e:d7:85:11:fb:cd:12:14:fc:80:8f:
82:f2:cf:88:42:92:a7:c5:a3:83:4f:d1:3f:b2:ad:38:78:26:
47:1a:cc:11:97:3a:0f:9c:77:e4:cd:b8:00:ad:bd:16:da:7d:
35:aa:27:87
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgICESswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mzg0RkYxMTAvBgNVBAUTKDkxNDc3M0FENTg2M0NCNTA2NTYwREFDQzY0RjI3QzM0
NjU5RDUzRkIwHhcNMjMwNjIwMTc1NzA5WhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDkxZTg3NS1iN2QzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzu8ItsjH1RaCPlXV5P2J5vWr1wnbAD0/gTxAQbRKUeHJbRdt5Q1FTRUmNkwp
m76Fr5FQRJvs5Kmz8zgSQARwyYLx33dqbSDIYRfCgmLUfDimQO8FY8OUYER8bzty
eNiPikYtTvFJ/fs164h4re2kjUEkM2kTwrt9WQuzA8ilGWgg6WP17M4/j1oiexep
voYXx3DGz7NyJk3FMX0kBXdfxs170+MgCcXsStnCaqT012AD0ow/U3AJ8GR4Ij3+
/4SPDTw0zjbUIb/SD+B/DaWZYfb2vD8AwIPwNKB4UvlE0/9/MEDr/d2TiU9DUOzA
uHgPftE9QmROL7eIL4kP1GbSSQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFAbvJmIP
TfG+Jit+pKvZgzyWRT+WMB8GA1UdIwQYMBaAFJFHc61YY8tQZWDazGTyfDRlnVP7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODRGRi9CQUU2NzQ0NkM2
RDkxMUU4QjY0QzMxMThDNEY5QUUwMi9rVWR6clZoankxQmxZTnJNWlBKOE5HV2RV
X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tVZHpyVmhqeTFCbFlOck1aUEo4TkdXZFVfcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Mzg0RkYvQkFFNjc0NDZDNkQ5MTFFOEI2NEMzMTE4QzRGOUFFMDIvMzRDNzhEMkND
NkRBMTFFODlDM0M4RTE4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E
JTAjMBIEAgABMAwDBAFnWjoDBAFn25AwDQQCAAIwBwMFACQFZoAwDQYJKoZIhvcN
AQELBQADggEBALF98og+5j+mkSYBna1SjDo5VBZh23rtHYIBbyMlDHkywdlyN6kN
hQpXEXvCH8OU3Ng2tnJu8Py4oaobgjePsBZodKI4naAPN9lzkDlQ4u8El6hK8wSm
bdP3HMXTn2hJh4Fgm7bNc0UmTMnsNfnhV9SkINSItgVbsk3rATsMvZGbKJuvOKsf
dzd4RpKyAI2El8qmA52Y3vtT5zpuirnzNDYyZ2avHJuPpIZwTZ5QnpIlu/v6o7Xx
yYDMowY3yQYSkrhY9BUB/Zwc9Y7olgFu14UR+80SFPyAj4Lyz4hCkqfFo4NP0T+y
rTh4JkcazBGXOg+cd+TNuACtvRbafTWqJ4c=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:02 2024 by rpki-client on console-fra.rpki-client.org