Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91521E2/EC1BB596DA7911EC801F7036C4F9AE02/72FB491ADA7E11ECBEE1D13BC4F9AE02.roa
File: 72FB491ADA7E11ECBEE1D13BC4F9AE02.roa (raw, json)
Hash identifier: GzQM2rQyticItps4JLzeZ4YrNT5KIlW0vl/Bb2tkOy0=
Subject key identifier: E3:32:FA:A7:10:D9:88:4C:FF:57:5B:A7:B4:D6:93:D1:27:11:21:79
Certificate issuer: /CN=A91521E2/serialNumber=DA70673BC14F7F805FB89CE625C611E20EF0A373
Certificate serial: 0214
Authority key identifier: DA:70:67:3B:C1:4F:7F:80:5F:B8:9C:E6:25:C6:11:E2:0E:F0:A3:73
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nBnO8FPf4BfuJzmJcYR4g7wo3M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91521E2/EC1BB596DA7911EC801F7036C4F9AE02/72FB491ADA7E11ECBEE1D13BC4F9AE02.roa
Signing time: Fri 01 Mar 2024 04:26:52 +0000
ROA not before: Fri 01 Mar 2024 04:26:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 149430
IP address blocks: 103.179.80.0/24 maxlen: 24
103.179.81.0/24 maxlen: 24
2001:df0:4a40::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 532 (0x214)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91521E2/serialNumber=DA70673BC14F7F805FB89CE625C611E20EF0A373
Validity
Not Before: Mar 1 04:26:52 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65e1590c-6bcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:57:41:11:38:d0:5f:97:93:63:1b:e1:5c:1d:
92:0e:43:30:e4:4b:fc:96:67:ab:a0:1b:83:8e:ed:
b7:d0:59:83:cd:a2:21:a6:73:c0:03:d0:82:25:f2:
a2:49:d8:36:56:b1:34:7a:a8:e7:71:c4:f4:78:c1:
d7:9b:dc:69:26:06:b3:11:4e:98:6c:a8:fc:75:f2:
24:49:2e:79:53:87:4f:a2:86:8f:28:cf:dd:09:bf:
b0:21:03:55:38:69:2d:7c:70:56:e2:56:a1:61:a9:
e4:47:89:d6:6a:0c:f6:c0:f4:2a:98:87:64:79:e0:
2f:b0:e9:57:4a:d8:b0:61:5e:c2:77:74:57:ee:c2:
29:be:98:10:d2:8f:f2:c7:b3:b0:33:44:82:d1:ea:
63:64:24:92:f1:92:a8:ca:02:8e:03:1f:0c:db:34:
06:16:ef:62:cc:04:1d:27:c1:05:12:67:48:e9:91:
fd:4b:f4:3a:ea:9a:de:f5:a3:61:88:de:51:58:95:
8e:33:5f:8a:d6:c4:90:b3:67:7d:97:5e:85:a7:79:
97:94:fa:5d:08:22:c7:16:c2:ca:45:03:64:1d:d7:
c2:bb:0c:1b:7e:d9:5c:58:1d:51:2d:1c:62:e4:c8:
7a:9d:31:d0:c0:d6:9b:c3:3f:a7:02:07:c5:50:84:
1a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:32:FA:A7:10:D9:88:4C:FF:57:5B:A7:B4:D6:93:D1:27:11:21:79
X509v3 Authority Key Identifier:
keyid:DA:70:67:3B:C1:4F:7F:80:5F:B8:9C:E6:25:C6:11:E2:0E:F0:A3:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91521E2/EC1BB596DA7911EC801F7036C4F9AE02/2nBnO8FPf4BfuJzmJcYR4g7wo3M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nBnO8FPf4BfuJzmJcYR4g7wo3M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91521E2/EC1BB596DA7911EC801F7036C4F9AE02/72FB491ADA7E11ECBEE1D13BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.179.80.0/23
IPv6:
2001:df0:4a40::/48
Signature Algorithm: sha256WithRSAEncryption
78:ba:04:4e:76:5a:d9:02:4b:54:f4:bd:0f:cf:00:da:f5:af:
40:92:06:2b:49:28:ff:f8:46:6d:ba:0e:4c:95:5e:e4:01:6d:
5f:d7:22:1e:9b:31:bb:f3:9e:3e:7a:c4:de:64:d2:7d:dd:06:
12:a4:c9:88:20:38:a3:a4:e8:d3:75:7d:f1:a2:26:2c:99:93:
2b:f4:93:78:75:b1:97:75:ea:3f:f0:6c:70:c2:3b:36:7f:90:
a6:e0:02:98:f1:e9:b1:63:26:03:90:f0:cb:d1:6a:c2:9f:a0:
6b:4b:2d:bf:49:c7:03:ec:f8:80:0c:91:22:46:9e:0a:bc:f7:
62:c7:f8:13:14:33:b4:e0:64:af:10:27:1c:cd:b2:99:df:2f:
81:33:13:9f:e1:10:c8:e4:e0:b3:53:3d:85:e4:3c:b2:d3:8d:
99:0d:46:70:75:42:c3:2d:29:31:de:4c:e5:62:7f:0a:7e:c9:
88:8e:0f:f9:10:20:b2:27:25:d9:57:fb:ea:d4:bd:53:8e:85:
7e:6c:d4:ea:98:5f:f5:81:0f:71:51:8a:46:21:1a:08:6f:95:
77:a7:43:45:e6:0f:24:6f:11:86:83:e9:5d:1e:f2:20:6f:dc:
12:88:6a:e5:b4:d8:41:8c:1a:9b:c8:19:b7:eb:cd:24:e8:bb:
17:c9:a3:51
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICAhQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTIxRTIxMTAvBgNVBAUTKERBNzA2NzNCQzE0RjdGODA1RkI4OUNFNjI1QzYxMUUy
MEVGMEEzNzMwHhcNMjQwMzAxMDQyNjUyWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWUxNTkwYy02YmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA61dBETjQX5eTYxvhXB2SDkMw5Ev8lmeroBuDju230FmDzaIhpnPAA9CCJfKi
Sdg2VrE0eqjnccT0eMHXm9xpJgazEU6YbKj8dfIkSS55U4dPooaPKM/dCb+wIQNV
OGktfHBW4lahYankR4nWagz2wPQqmIdkeeAvsOlXStiwYV7Cd3RX7sIpvpgQ0o/y
x7OwM0SC0epjZCSS8ZKoygKOAx8M2zQGFu9izAQdJ8EFEmdI6ZH9S/Q66pre9aNh
iN5RWJWOM1+K1sSQs2d9l16Fp3mXlPpdCCLHFsLKRQNkHdfCuwwbftlcWB1RLRxi
5Mh6nTHQwNabwz+nAgfFUIQajQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFOMy+qcQ
2YhM/1dbp7TWk9EnESF5MB8GA1UdIwQYMBaAFNpwZzvBT3+AX7ic5iXGEeIO8KNz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjFFMi9FQzFCQjU5NkRB
NzkxMUVDODAxRjcwMzZDNEY5QUUwMi8ybkJuTzhGUGY0QmZ1SnptSmNZUjRnN3dv
M00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJuQm5POEZQZjRCZnVKem1KY1lSNGc3d28zTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTIxRTIvRUMxQkI1OTZEQTc5MTFFQzgwMUY3MDM2QzRGOUFFMDIvNzJGQjQ5MUFE
QTdFMTFFQ0JFRTFEMTNCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBAFns1AwDwQCAAIwCQMHACABDfBKQDANBgkqhkiG9w0BAQsF
AAOCAQEAeLoETnZa2QJLVPS9D88A2vWvQJIGK0ko//hGbboOTJVe5AFtX9ciHpsx
u/OePnrE3mTSfd0GEqTJiCA4o6To03V98aImLJmTK/STeHWxl3XqP/BscMI7Nn+Q
puACmPHpsWMmA5Dwy9Fqwp+ga0stv0nHA+z4gAyRIkaeCrz3Ysf4ExQztOBkrxAn
HM2ymd8vgTMTn+EQyOTgs1M9heQ8stONmQ1GcHVCwy0pMd5M5WJ/Cn7JiI4P+RAg
sicl2Vf76tS9U46FfmzU6phf9YEPcVGKRiEaCG+Vd6dDReYPJG8RhoPpXR7yIG/c
Eohq5bTYQYwam8gZt+vNJOi7F8mjUQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:06 2024 by rpki-client on console-fra.rpki-client.org