Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91479C6/421CBC4606D411EA873A5E4BC4F9AE02/6DC970FA826F11ECB06A7E29C4F9AE02.roa
File: 6DC970FA826F11ECB06A7E29C4F9AE02.roa (raw, json)
Hash identifier: znfyNys7rKd69nrotaiRaE4yu/4axSTMJSUT+Of1jbE=
Subject key identifier: 3C:7D:89:BA:64:09:43:10:28:E3:B6:91:FD:C9:03:D3:8C:6B:1E:02
Certificate issuer: /CN=A91479C6/serialNumber=51D22384627D29026FB440B21C408D5653C8A724
Certificate serial: 08B9
Authority key identifier: 51:D2:23:84:62:7D:29:02:6F:B4:40:B2:1C:40:8D:56:53:C8:A7:24
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdIjhGJ9KQJvtECyHECNVlPIpyQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91479C6/421CBC4606D411EA873A5E4BC4F9AE02/6DC970FA826F11ECB06A7E29C4F9AE02.roa
Signing time: Mon 31 Jan 2022 08:26:04 +0000
ROA not before: Mon 31 Jan 2022 08:26:04 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 136482
IP address blocks: 103.89.244.0/23 maxlen: 23
103.89.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2233 (0x8b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91479C6/serialNumber=51D22384627D29026FB440B21C408D5653C8A724
Validity
Not Before: Jan 31 08:26:04 2022 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=61f79d1b-bdbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6d:db:40:d3:69:02:0b:cd:44:b1:d7:a7:b9:
29:58:04:4b:a4:79:8c:e9:db:f9:44:91:e2:03:1e:
a7:4d:f8:6f:6e:97:40:41:99:e1:4b:9d:72:db:30:
1a:dd:f3:a6:c4:ec:58:ed:a4:3b:51:5c:13:08:73:
1c:da:95:8f:31:70:3e:18:c4:42:9a:d7:6b:77:d4:
50:3e:c9:6f:5a:c1:3c:6e:07:38:54:22:91:d1:46:
b9:62:55:2e:8a:00:c9:84:3d:61:40:d9:ae:f4:a0:
d3:8e:c1:d0:2f:98:fb:1c:c0:cf:36:79:44:4e:74:
cf:da:b3:ff:70:c1:6f:6f:64:fc:8b:e2:b9:8b:d2:
33:25:26:33:a6:9a:16:d5:25:8f:69:68:27:ae:c7:
bb:a2:7f:f7:d0:b2:7a:c0:b6:b2:20:77:6f:dc:23:
46:d1:f4:09:fa:09:54:66:bc:59:fb:9b:1c:45:12:
45:0b:f4:58:0d:45:69:46:56:c3:1c:fd:7a:83:23:
23:98:2f:bf:e8:13:db:bd:c9:90:96:5c:6e:cb:4a:
8c:8b:8b:25:66:47:89:25:29:39:a4:75:6b:fa:e0:
b3:4d:a2:55:ab:8c:4d:bf:1f:96:b5:9c:a6:29:6a:
7d:05:0d:af:28:d1:39:37:c9:cc:46:10:82:1e:cf:
31:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:7D:89:BA:64:09:43:10:28:E3:B6:91:FD:C9:03:D3:8C:6B:1E:02
X509v3 Authority Key Identifier:
keyid:51:D2:23:84:62:7D:29:02:6F:B4:40:B2:1C:40:8D:56:53:C8:A7:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91479C6/421CBC4606D411EA873A5E4BC4F9AE02/UdIjhGJ9KQJvtECyHECNVlPIpyQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdIjhGJ9KQJvtECyHECNVlPIpyQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91479C6/421CBC4606D411EA873A5E4BC4F9AE02/6DC970FA826F11ECB06A7E29C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.89.244.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:8d:68:ef:49:a6:21:00:0c:15:f0:cd:a7:62:a5:3f:ad:ac:
7e:31:3a:5b:73:ef:36:8b:8e:92:56:29:c4:77:28:3e:e8:ea:
08:25:99:67:3b:f0:0a:06:2e:ae:d8:60:4a:d9:38:b7:a1:ca:
24:80:75:5e:95:65:cc:c6:a4:85:67:04:65:1c:12:48:cf:1e:
31:45:f5:46:07:4b:1f:8d:e7:7f:d3:6c:6c:c7:be:56:4e:46:
12:32:ff:01:79:a8:af:c5:8c:7b:ee:09:28:70:49:49:4e:0e:
91:e4:22:ca:d1:22:c9:bb:e6:81:23:6d:bb:4c:8e:c6:9e:89:
31:16:81:48:bc:4b:c3:2e:83:2e:48:4a:7c:fe:55:35:ad:c3:
39:9d:4e:c3:ea:1e:3b:d1:c3:b7:0c:65:ce:37:b1:18:11:77:
09:bc:cb:aa:2d:89:8d:d5:5c:66:40:9e:1d:32:a1:b7:94:55:
36:9b:3f:da:db:99:de:de:e3:c3:b0:05:16:37:71:b0:36:b1:
9a:ea:3e:0b:92:84:08:b0:e0:b6:a6:06:cb:0b:48:36:1a:b5:
52:cc:c1:7b:d5:19:10:62:f8:2b:b0:9a:b5:a6:26:dd:7a:3a:
3e:61:ea:58:1c:bb:da:f1:fd:6b:bd:06:cc:a4:79:97:5e:d3:
84:f3:a7:81
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCLkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDc5QzYxMTAvBgNVBAUTKDUxRDIyMzg0NjI3RDI5MDI2RkI0NDBCMjFDNDA4RDU2
NTNDOEE3MjQwHhcNMjIwMTMxMDgyNjA0WhcNMjIwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MWY3OWQxYi1iZGJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA023bQNNpAgvNRLHXp7kpWARLpHmM6dv5RJHiAx6nTfhvbpdAQZnhS51y2zAa
3fOmxOxY7aQ7UVwTCHMc2pWPMXA+GMRCmtdrd9RQPslvWsE8bgc4VCKR0Ua5YlUu
igDJhD1hQNmu9KDTjsHQL5j7HMDPNnlETnTP2rP/cMFvb2T8i+K5i9IzJSYzppoW
1SWPaWgnrse7on/30LJ6wLayIHdv3CNG0fQJ+glUZrxZ+5scRRJFC/RYDUVpRlbD
HP16gyMjmC+/6BPbvcmQllxuy0qMi4slZkeJJSk5pHVr+uCzTaJVq4xNvx+WtZym
KWp9BQ2vKNE5N8nMRhCCHs8x5QIDAQABo4IClTCCApEwHQYDVR0OBBYEFDx9ibpk
CUMQKOO2kf3JA9OMax4CMB8GA1UdIwQYMBaAFFHSI4RifSkCb7RAshxAjVZTyKck
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzlDNi80MjFDQkM0NjA2
RDQxMUVBODczQTVFNEJDNEY5QUUwMi9VZElqaEdKOUtRSnZ0RUN5SEVDTlZsUElw
eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VkSWpoR0o5S1FKdnRFQ3lIRUNOVmxQSXB5US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDc5QzYvNDIxQ0JDNDYwNkQ0MTFFQTg3M0E1RTRCQzRGOUFFMDIvNkRDOTcwRkE4
MjZGMTFFQ0IwNkE3RTI5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnWfQwDQYJKoZIhvcNAQELBQADggEBAHqNaO9JpiEADBXw
zadipT+trH4xOltz7zaLjpJWKcR3KD7o6gglmWc78AoGLq7YYErZOLehyiSAdV6V
ZczGpIVnBGUcEkjPHjFF9UYHSx+N53/TbGzHvlZORhIy/wF5qK/FjHvuCShwSUlO
DpHkIsrRIsm75oEjbbtMjsaeiTEWgUi8S8Mugy5ISnz+VTWtwzmdTsPqHjvRw7cM
Zc43sRgRdwm8y6otiY3VXGZAnh0yobeUVTabP9rbmd7e48OwBRY3cbA2sZrqPguS
hAiw4LamBssLSDYatVLMwXvVGRBi+CuwmrWmJt16Oj5h6lgcu9rx/Wu9BsykeZde
04Tzp4E=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:05 2024 by rpki-client on console-fra.rpki-client.org