Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91509EC/E99C8E6E6F4B11E89A642271C4F9AE02/84C8A37CB87111E98008C65DC4F9AE02.roa
File: 84C8A37CB87111E98008C65DC4F9AE02.roa (raw, json)
Hash identifier: 0VFf+CGo6GvUkDNdxztHp37QqJwjEmgCyOuSljyMqQM=
Subject key identifier: F4:A0:AB:94:D0:7F:F6:47:0D:35:0E:F9:5F:CC:EB:9A:72:27:84:94
Certificate issuer: /CN=A91509EC/serialNumber=CEA0832FCAC122F64E8B79A9C54BBDD9BE90C71D
Certificate serial: 1056
Authority key identifier: CE:A0:83:2F:CA:C1:22:F6:4E:8B:79:A9:C5:4B:BD:D9:BE:90:C7:1D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zqCDL8rBIvZOi3mpxUu92b6Qxx0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91509EC/E99C8E6E6F4B11E89A642271C4F9AE02/84C8A37CB87111E98008C65DC4F9AE02.roa
Signing time: Fri 07 Jan 2022 06:16:25 +0000
ROA not before: Fri 07 Jan 2022 06:16:25 +0000
ROA not after: Fri 31 Mar 2023 00:00:00 +0000
asID: 38895
IP address blocks: 175.41.192.0/18 maxlen: 24
2400:6700::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4182 (0x1056)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91509EC/serialNumber=CEA0832FCAC122F64E8B79A9C54BBDD9BE90C71D
Validity
Not Before: Jan 7 06:16:25 2022 GMT
Not After : Mar 31 00:00:00 2023 GMT
Subject: CN=61d7dab9-70ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:2f:1c:23:bf:47:40:ab:5b:59:1a:7d:cb:ec:
61:19:cd:e1:e0:b3:b0:89:0d:d0:94:d1:b0:52:be:
98:c2:18:8a:91:6f:1f:9d:50:fd:83:6a:2a:65:0a:
5f:cd:e4:75:48:b1:29:ec:96:eb:0c:c5:08:c7:36:
da:90:46:6b:e4:8e:e2:61:a6:4d:b4:22:06:72:4f:
2c:85:10:25:cd:03:94:c4:e2:b5:a9:56:79:c9:13:
39:4c:00:dd:aa:4f:6d:77:88:45:ae:ec:e2:96:bc:
dd:8a:27:71:8b:43:49:bc:b8:b9:9b:67:8a:48:bf:
e7:4a:e2:21:74:c6:86:1b:df:bc:6d:f8:4d:a9:79:
2d:39:3d:23:8d:22:da:07:c6:0a:5d:8a:c2:7b:5d:
71:6f:c3:c2:e2:3c:bc:3f:7e:18:76:d2:cb:8a:26:
23:8a:3f:dd:0b:94:9a:8a:84:f3:a3:58:b5:c9:0c:
b4:da:2e:ba:ed:cf:ac:dc:48:0f:0f:74:bf:18:2a:
3f:77:0c:7d:76:f0:31:e9:c2:6b:6e:b5:35:09:f2:
37:f2:5c:a0:f8:a7:a2:5e:e2:c2:9c:ab:14:ef:c1:
1e:99:e4:41:35:3b:a8:f7:8f:20:ff:4d:50:26:ea:
3b:b0:77:9c:ab:b3:49:80:fa:ee:38:62:e4:7c:93:
91:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A0:AB:94:D0:7F:F6:47:0D:35:0E:F9:5F:CC:EB:9A:72:27:84:94
X509v3 Authority Key Identifier:
keyid:CE:A0:83:2F:CA:C1:22:F6:4E:8B:79:A9:C5:4B:BD:D9:BE:90:C7:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91509EC/E99C8E6E6F4B11E89A642271C4F9AE02/zqCDL8rBIvZOi3mpxUu92b6Qxx0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zqCDL8rBIvZOi3mpxUu92b6Qxx0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91509EC/E99C8E6E6F4B11E89A642271C4F9AE02/84C8A37CB87111E98008C65DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
175.41.192.0/18
IPv6:
2400:6700::/32
Signature Algorithm: sha256WithRSAEncryption
94:83:76:96:df:41:fa:a8:24:bf:a8:8a:55:ce:f7:c2:ea:66:
39:fb:df:63:93:2f:0c:1e:2c:50:d2:ef:58:98:62:61:11:84:
cd:f7:b6:3e:42:18:7a:e1:89:24:32:ce:31:57:1f:10:ef:2a:
3d:06:bd:84:9d:98:70:25:4a:c8:d5:cf:d4:b5:6c:1d:c0:c2:
7a:f2:2b:24:c1:96:3f:0a:ff:8a:78:90:42:ec:5c:eb:f4:59:
62:c6:49:c7:f8:16:95:9b:5a:0c:0f:18:f6:be:ca:46:c3:2f:
9d:8b:a3:3b:de:d8:d0:55:5e:7a:3f:04:a6:f0:aa:43:09:bd:
88:01:01:9f:54:16:96:c5:0a:42:13:26:cb:9d:95:2d:af:c7:
b9:d1:29:9c:35:50:73:94:75:b4:91:ef:cb:26:6f:da:db:aa:
0e:97:d3:14:c5:7d:69:4a:03:ab:22:ab:e1:ed:ff:d2:71:b3:
50:97:a2:1a:4a:ef:ff:f0:d7:07:34:16:9b:d5:cc:df:32:86:
67:d8:3d:ab:f3:21:c5:c1:17:71:93:59:14:c0:c0:a2:de:8f:
69:2e:df:ed:8d:05:2f:72:6f:80:b7:76:e1:6e:e2:2c:d3:39:
9c:54:24:fb:97:29:df:0b:28:fb:4d:23:d4:75:31:b0:f6:02:
e9:35:c8:3b
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICEFYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTA5RUMxMTAvBgNVBAUTKENFQTA4MzJGQ0FDMTIyRjY0RThCNzlBOUM1NEJCREQ5
QkU5MEM3MUQwHhcNMjIwMTA3MDYxNjI1WhcNMjMwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MWQ3ZGFiOS03MGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6C8cI79HQKtbWRp9y+xhGc3h4LOwiQ3QlNGwUr6YwhiKkW8fnVD9g2oqZQpf
zeR1SLEp7JbrDMUIxzbakEZr5I7iYaZNtCIGck8shRAlzQOUxOK1qVZ5yRM5TADd
qk9td4hFruzilrzdiidxi0NJvLi5m2eKSL/nSuIhdMaGG9+8bfhNqXktOT0jjSLa
B8YKXYrCe11xb8PC4jy8P34YdtLLiiYjij/dC5SaioTzo1i1yQy02i667c+s3EgP
D3S/GCo/dwx9dvAx6cJrbrU1CfI38lyg+KeiXuLCnKsU78EemeRBNTuo948g/01Q
Juo7sHecq7NJgPruOGLkfJORlwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFPSgq5TQ
f/ZHDTUO+V/M65pyJ4SUMB8GA1UdIwQYMBaAFM6ggy/KwSL2Tot5qcVLvdm+kMcd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDlFQy9FOTlDOEU2RTZG
NEIxMUU4OUE2NDIyNzFDNEY5QUUwMi96cUNETDhyQkl2Wk9pM21weFV1OTJiNlF4
eDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pxQ0RMOHJCSXZaT2kzbXB4VXU5MmI2UXh4MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTA5RUMvRTk5QzhFNkU2RjRCMTFFODlBNjQyMjcxQzRGOUFFMDIvODRDOEEzN0NC
ODcxMTFFOTgwMDhDNjVEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAavKcAwDQQCAAIwBwMFACQAZwAwDQYJKoZIhvcNAQELBQAD
ggEBAJSDdpbfQfqoJL+oilXO98LqZjn732OTLwweLFDS71iYYmERhM33tj5CGHrh
iSQyzjFXHxDvKj0GvYSdmHAlSsjVz9S1bB3AwnryKyTBlj8K/4p4kELsXOv0WWLG
Scf4FpWbWgwPGPa+ykbDL52Lozve2NBVXno/BKbwqkMJvYgBAZ9UFpbFCkITJsud
lS2vx7nRKZw1UHOUdbSR78smb9rbqg6X0xTFfWlKA6siq+Ht/9Jxs1CXohpK7//w
1wc0FpvVzN8yhmfYPavzIcXBF3GTWRTAwKLej2ku3+2NBS9yb4C3duFu4izTOZxU
JPuXKd8LKPtNI9R1MbD2Auk1yDs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:59 2024 by rpki-client on console-ams.rpki-client.org