Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155C3A/98CFA8B8D73511E6963A685FC4F9AE02/34C58DE4BE2811E79C4F0320C4F9AE02.roa
File: 34C58DE4BE2811E79C4F0320C4F9AE02.roa (raw, json)
Hash identifier: 0CfFoLbvT0p/0T/4daDYBbBWpq4p+VI391L6phFe/qY=
Subject key identifier: 9D:A4:2B:00:59:FC:F9:2D:B9:76:4B:15:49:66:DC:94:CD:92:10:FC
Certificate issuer: /CN=A9155C3A/serialNumber=D46E50A03A799183E5E5438854B4AF4577790BE3
Certificate serial: 16AD
Authority key identifier: D4:6E:50:A0:3A:79:91:83:E5:E5:43:88:54:B4:AF:45:77:79:0B:E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1G5QoDp5kYPl5UOIVLSvRXd5C-M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155C3A/98CFA8B8D73511E6963A685FC4F9AE02/34C58DE4BE2811E79C4F0320C4F9AE02.roa
Signing time: Fri 28 May 2021 05:05:17 +0000
ROA not before: Fri 28 May 2021 05:05:17 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 13813
IP address blocks: 103.97.250.0/24 maxlen: 24
2400:d840:1::/48 maxlen: 48
2400:d840:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5805 (0x16ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155C3A/serialNumber=D46E50A03A799183E5E5438854B4AF4577790BE3
Validity
Not Before: May 28 05:05:17 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=60b07a0d-c062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:58:44:96:0e:12:c7:9b:53:07:10:f5:79:93:
be:4b:29:69:91:38:aa:dc:9a:c6:c6:ce:42:e6:a7:
f7:55:db:ef:89:47:c8:09:7e:3c:ff:a2:55:33:e4:
92:51:76:5e:94:33:03:2b:57:32:d1:ba:84:34:f5:
53:49:a1:e7:6c:1a:10:b8:66:05:a2:02:cc:81:01:
c3:a1:20:52:b9:27:34:dc:95:a0:32:1e:2f:bd:be:
0a:d0:72:61:17:62:24:17:2f:ca:09:4f:d8:02:1d:
69:05:ed:af:b0:a7:e1:ab:a1:bf:34:65:14:8b:aa:
63:d3:cf:52:20:61:df:42:b4:ae:55:6b:95:81:e1:
1c:39:17:f3:ac:97:91:15:34:34:ca:df:0e:c4:aa:
f8:a8:46:4a:1a:22:f5:94:f1:ed:22:49:cc:d1:97:
be:d1:77:80:aa:7c:93:7d:da:18:22:80:e4:47:a4:
a6:eb:64:fe:21:e0:34:18:89:40:54:3e:86:16:d4:
05:ad:70:3f:f4:f7:fe:d3:71:71:d0:ef:28:e3:18:
1f:f9:d8:20:ac:eb:11:48:5b:31:d1:11:09:9a:f1:
39:07:96:0c:45:62:eb:5b:5f:dd:b8:49:c0:39:4a:
5e:70:d7:7a:3d:7e:4a:43:bd:18:2a:8b:e2:13:99:
49:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A4:2B:00:59:FC:F9:2D:B9:76:4B:15:49:66:DC:94:CD:92:10:FC
X509v3 Authority Key Identifier:
keyid:D4:6E:50:A0:3A:79:91:83:E5:E5:43:88:54:B4:AF:45:77:79:0B:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155C3A/98CFA8B8D73511E6963A685FC4F9AE02/1G5QoDp5kYPl5UOIVLSvRXd5C-M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1G5QoDp5kYPl5UOIVLSvRXd5C-M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155C3A/98CFA8B8D73511E6963A685FC4F9AE02/34C58DE4BE2811E79C4F0320C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.97.250.0/24
IPv6:
2400:d840:1::-2400:d840:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
a3:f2:a4:81:df:65:00:9c:a8:6c:b1:a8:df:76:bc:97:42:e4:
6c:7d:bf:98:80:33:87:39:29:e1:88:b5:c6:90:35:8d:b6:15:
82:2b:e6:36:05:6d:5c:3f:70:14:2c:ba:e3:c5:c5:43:69:44:
58:dc:10:06:42:0b:02:f5:34:3e:65:ac:83:25:33:21:95:66:
bd:d0:1d:e6:c6:c8:b4:38:a7:40:60:90:87:7d:88:0b:e3:e8:
61:66:13:d5:4e:46:60:12:b5:e2:1a:d7:3a:63:46:db:d8:0d:
02:80:dd:63:19:af:3c:22:b7:b2:34:7d:b0:1a:dc:46:19:10:
62:2a:a2:e3:32:ed:0b:00:0e:12:90:48:3c:82:24:dc:11:09:
c6:fa:af:f0:27:79:af:c3:eb:2f:e8:46:5e:af:88:d6:b9:15:
b6:68:c3:d6:6f:e9:12:0a:17:04:2f:72:b5:28:a6:20:92:1c:
9a:24:da:d8:ca:a3:de:08:9c:32:2f:ab:90:07:51:33:0d:51:
3a:3a:6e:34:82:f2:b7:f4:ff:4a:e0:a5:50:9e:1d:94:25:21:
95:4f:5e:1d:f2:97:d0:2a:ad:64:f4:4d:74:66:ae:eb:57:78:
6b:d5:47:f8:9c:25:d9:6e:f0:70:53:67:0a:54:b3:4a:62:ce:
e5:6a:52:34
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgICFq0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTVDM0ExMTAvBgNVBAUTKEQ0NkU1MEEwM0E3OTkxODNFNUU1NDM4ODU0QjRBRjQ1
Nzc3OTBCRTMwHhcNMjEwNTI4MDUwNTE3WhcNMjIwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MGIwN2EwZC1jMDYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2lhElg4Sx5tTBxD1eZO+SylpkTiq3JrGxs5C5qf3VdvviUfICX48/6JVM+SS
UXZelDMDK1cy0bqENPVTSaHnbBoQuGYFogLMgQHDoSBSuSc03JWgMh4vvb4K0HJh
F2IkFy/KCU/YAh1pBe2vsKfhq6G/NGUUi6pj089SIGHfQrSuVWuVgeEcORfzrJeR
FTQ0yt8OxKr4qEZKGiL1lPHtIknM0Ze+0XeAqnyTfdoYIoDkR6Sm62T+IeA0GIlA
VD6GFtQFrXA/9Pf+03Fx0O8o4xgf+dggrOsRSFsx0REJmvE5B5YMRWLrW1/duEnA
OUpecNd6PX5KQ70YKoviE5lJgQIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFJ2kKwBZ
/PktuXZLFUlm3JTNkhD8MB8GA1UdIwQYMBaAFNRuUKA6eZGD5eVDiFS0r0V3eQvj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NUMzQS85OENGQThCOEQ3
MzUxMUU2OTYzQTY4NUZDNEY5QUUwMi8xRzVRb0RwNWtZUGw1VU9JVkxTdlJYZDVD
LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFHNVFvRHA1a1lQbDVVT0lWTFN2UlhkNUMtTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTVDM0EvOThDRkE4QjhENzM1MTFFNjk2M0E2ODVGQzRGOUFFMDIvMzRDNThERTRC
RTI4MTFFNzlDNEYwMzIwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOwYIKwYBBQUHAQcBAf8E
LDAqMAwEAgABMAYDBABnYfowGgQCAAIwFDASAwcAJADYQAABAwcAJADYQAACMA0G
CSqGSIb3DQEBCwUAA4IBAQCj8qSB32UAnKhssajfdryXQuRsfb+YgDOHOSnhiLXG
kDWNthWCK+Y2BW1cP3AULLrjxcVDaURY3BAGQgsC9TQ+ZayDJTMhlWa90B3mxsi0
OKdAYJCHfYgL4+hhZhPVTkZgErXiGtc6Y0bb2A0CgN1jGa88IreyNH2wGtxGGRBi
KqLjMu0LAA4SkEg8giTcEQnG+q/wJ3mvw+sv6EZer4jWuRW2aMPWb+kSChcEL3K1
KKYgkhyaJNrYyqPeCJwyL6uQB1EzDVE6Om40gvK39P9K4KVQnh2UJSGVT14d8pfQ
Kq1k9E10Zq7rV3hr1Uf4nCXZbvBwU2cKVLNKYs7lalI0
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:07 2024 by rpki-client on console-fra.rpki-client.org