Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91479C6/421CBC4606D411EA873A5E4BC4F9AE02/FFC10C6C114411EC87605376C4F9AE02.roa
File: FFC10C6C114411EC87605376C4F9AE02.roa (raw, json)
Hash identifier: CNhUmZx0vxq7EHbd2GzRW2SltzUWinOcII3hFrSe6KM=
Subject key identifier: FB:7B:C5:7F:8E:4F:19:E2:C9:3A:0C:F4:63:EE:97:59:8D:EC:B4:DF
Certificate issuer: /CN=A91479C6/serialNumber=51D22384627D29026FB440B21C408D5653C8A724
Certificate serial: 0795
Authority key identifier: 51:D2:23:84:62:7D:29:02:6F:B4:40:B2:1C:40:8D:56:53:C8:A7:24
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdIjhGJ9KQJvtECyHECNVlPIpyQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91479C6/421CBC4606D411EA873A5E4BC4F9AE02/FFC10C6C114411EC87605376C4F9AE02.roa
Signing time: Thu 09 Sep 2021 08:07:39 +0000
ROA not before: Thu 09 Sep 2021 08:07:39 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 134146
IP address blocks: 202.53.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1941 (0x795)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91479C6/serialNumber=51D22384627D29026FB440B21C408D5653C8A724
Validity
Not Before: Sep 9 08:07:39 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=6139c0cb-caa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f9:12:34:4b:b2:79:44:fa:31:3f:3c:9a:0c:
9e:65:09:42:d6:27:c5:52:39:0d:d8:12:dd:fd:0a:
7e:08:2d:1f:4f:88:4e:fd:6a:40:d2:59:57:e0:44:
65:58:6f:40:e9:7d:a2:e1:5e:23:ae:5a:5e:04:8a:
3a:83:4b:89:68:23:96:39:6b:90:0a:8b:c7:18:e9:
ac:52:c0:ba:1e:35:42:5d:17:f8:fa:ba:ca:9b:cf:
40:be:11:3c:0e:be:e1:7b:9d:60:12:26:f2:f5:ee:
3b:b6:32:9a:be:84:a5:5d:37:cb:df:39:f8:66:78:
3a:f3:0a:02:50:b3:db:1c:a1:1a:ad:71:60:2a:2f:
03:a3:b0:13:6a:d9:73:67:24:fc:aa:97:78:19:3f:
7f:69:74:3a:8a:64:9f:55:0c:24:40:1d:e9:23:48:
17:5e:82:6e:8d:68:3e:9b:fc:9a:27:69:ac:11:17:
bc:12:8d:69:0a:44:d1:99:bc:57:7b:3c:64:ed:6e:
1f:a6:0e:53:3f:c3:1e:d6:53:ac:25:7f:4a:81:02:
2e:05:c7:1b:77:fd:63:9d:0f:48:44:ae:f8:e0:44:
3a:26:7f:64:16:76:4a:37:52:73:c2:2b:d4:6b:5a:
a9:04:d0:e5:d2:24:50:41:6a:ef:45:76:ed:83:13:
76:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:7B:C5:7F:8E:4F:19:E2:C9:3A:0C:F4:63:EE:97:59:8D:EC:B4:DF
X509v3 Authority Key Identifier:
keyid:51:D2:23:84:62:7D:29:02:6F:B4:40:B2:1C:40:8D:56:53:C8:A7:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91479C6/421CBC4606D411EA873A5E4BC4F9AE02/UdIjhGJ9KQJvtECyHECNVlPIpyQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdIjhGJ9KQJvtECyHECNVlPIpyQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91479C6/421CBC4606D411EA873A5E4BC4F9AE02/FFC10C6C114411EC87605376C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.53.132.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:a8:93:5a:6d:ce:cf:5b:28:ec:fc:2f:8c:7c:58:5a:fb:97:
d9:06:51:80:42:13:83:6a:f6:6f:c5:0a:8e:cb:f1:ee:33:4d:
e9:1f:fd:88:74:37:3e:ef:29:a4:66:d2:af:9e:40:14:a6:35:
b7:3c:54:89:97:e8:24:ec:4f:7f:0a:15:66:ae:a4:30:d2:01:
f2:51:3d:7e:5e:c4:89:21:3a:83:40:16:e9:bd:c8:a5:26:9c:
d8:8f:3e:70:8a:83:df:fb:e4:d5:00:05:95:84:83:59:13:e1:
bf:8b:11:ff:1f:f5:c4:b1:f3:e0:93:12:48:51:1a:8b:f8:8d:
1d:d4:1b:1d:ae:99:d7:b3:2b:26:c5:31:73:10:4f:0d:6e:f3:
a4:2e:8d:32:37:27:2f:b2:2c:fb:82:6f:a1:ec:52:1a:91:08:
34:e1:7f:36:de:a2:b9:1d:64:a7:90:f4:8f:f5:04:0a:9d:c1:
4c:04:c3:e5:45:8e:4e:37:5e:9d:3e:9e:48:67:3a:55:28:6a:
e9:2d:33:b4:d6:f5:09:a4:7e:73:b2:0b:01:03:ca:83:19:9a:
bc:14:8d:0f:ed:b5:19:55:80:14:b9:e1:08:1f:db:0b:11:5c:
0c:c6:7e:b2:76:41:b4:eb:57:d3:ef:6c:03:96:8e:ca:d0:84:
f7:18:4f:b2
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICB5UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDc5QzYxMTAvBgNVBAUTKDUxRDIyMzg0NjI3RDI5MDI2RkI0NDBCMjFDNDA4RDU2
NTNDOEE3MjQwHhcNMjEwOTA5MDgwNzM5WhcNMjIwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MTM5YzBjYi1jYWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5PkSNEuyeUT6MT88mgyeZQlC1ifFUjkN2BLd/Qp+CC0fT4hO/WpA0llX4ERl
WG9A6X2i4V4jrlpeBIo6g0uJaCOWOWuQCovHGOmsUsC6HjVCXRf4+rrKm89AvhE8
Dr7he51gEiby9e47tjKavoSlXTfL3zn4Zng68woCULPbHKEarXFgKi8Do7ATatlz
ZyT8qpd4GT9/aXQ6imSfVQwkQB3pI0gXXoJujWg+m/yaJ2msERe8Eo1pCkTRmbxX
ezxk7W4fpg5TP8Me1lOsJX9KgQIuBccbd/1jnQ9IRK744EQ6Jn9kFnZKN1JzwivU
a1qpBNDl0iRQQWrvRXbtgxN2zQIDAQABo4IClTCCApEwHQYDVR0OBBYEFPt7xX+O
TxniyToM9GPul1mN7LTfMB8GA1UdIwQYMBaAFFHSI4RifSkCb7RAshxAjVZTyKck
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzlDNi80MjFDQkM0NjA2
RDQxMUVBODczQTVFNEJDNEY5QUUwMi9VZElqaEdKOUtRSnZ0RUN5SEVDTlZsUElw
eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VkSWpoR0o5S1FKdnRFQ3lIRUNOVmxQSXB5US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDc5QzYvNDIxQ0JDNDYwNkQ0MTFFQTg3M0E1RTRCQzRGOUFFMDIvRkZDMTBDNkMx
MTQ0MTFFQzg3NjA1Mzc2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADKNYQwDQYJKoZIhvcNAQELBQADggEBAG6ok1ptzs9bKOz8
L4x8WFr7l9kGUYBCE4Nq9m/FCo7L8e4zTekf/Yh0Nz7vKaRm0q+eQBSmNbc8VImX
6CTsT38KFWaupDDSAfJRPX5exIkhOoNAFum9yKUmnNiPPnCKg9/75NUABZWEg1kT
4b+LEf8f9cSx8+CTEkhRGov4jR3UGx2umdezKybFMXMQTw1u86QujTI3Jy+yLPuC
b6HsUhqRCDThfzbeorkdZKeQ9I/1BAqdwUwEw+VFjk43Xp0+nkhnOlUoauktM7TW
9QmkfnOyCwEDyoMZmrwUjQ/ttRlVgBS54Qgf2wsRXAzGfrJ2QbTrV9PvbAOWjsrQ
hPcYT7I=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:05 2024 by rpki-client on console-fra.rpki-client.org