Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155CA4/7B2578D8C1A111EA94735C31C4F9AE02/6130BF1CC1A311EA9DD90134C4F9AE02.roa
File: 6130BF1CC1A311EA9DD90134C4F9AE02.roa (raw, json)
Hash identifier: EaB60x3ZSUVL12WVGUH3mlD/59Cqg/KSm/EBY+aEncI=
Subject key identifier: 23:DA:BF:8C:80:17:A8:BE:86:C8:E1:E0:EA:EF:2F:56:0F:D1:10:2F
Certificate issuer: /CN=A9155CA4/serialNumber=E0F2EA6343AF44D99EA44296B3910FDA83652973
Certificate serial: 0610
Authority key identifier: E0:F2:EA:63:43:AF:44:D9:9E:A4:42:96:B3:91:0F:DA:83:65:29:73
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4PLqY0OvRNmepEKWs5EP2oNlKXM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155CA4/7B2578D8C1A111EA94735C31C4F9AE02/6130BF1CC1A311EA9DD90134C4F9AE02.roa
Signing time: Mon 01 Aug 2022 10:48:33 +0000
ROA not before: Mon 01 Aug 2022 10:48:33 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 2519
IP address blocks: 43.225.88.0/22 maxlen: 22
103.13.208.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1552 (0x610)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155CA4/serialNumber=E0F2EA6343AF44D99EA44296B3910FDA83652973
Validity
Not Before: Aug 1 10:48:33 2022 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=62e7af81-3d4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d7:c7:dd:03:d1:ca:35:bf:fa:ed:ef:90:49:
6d:7f:58:54:cc:63:84:d0:51:ea:be:41:b7:8a:ff:
80:41:8e:41:7c:b9:2c:53:84:97:37:7a:2f:14:64:
ac:13:a8:34:e4:5e:c8:52:21:83:4f:07:fc:44:69:
84:f0:08:fb:2a:70:6d:90:9b:60:36:0b:78:3e:f2:
5d:dc:d6:4f:23:40:da:61:6b:a2:8e:56:6f:08:8c:
f5:30:37:18:07:55:f1:1e:a9:32:33:81:37:17:2b:
85:3f:4a:40:5a:36:48:d1:bb:95:e0:9c:3a:70:d6:
9e:49:cc:cc:b7:83:eb:21:53:03:f4:e5:ea:65:80:
f6:ec:d8:89:b3:62:48:ca:85:98:70:a7:32:3f:2b:
07:99:b1:d2:57:88:61:0e:7d:3c:91:8e:bc:c6:b3:
c7:ee:ae:83:36:c9:04:b3:e4:31:76:02:6a:5f:b3:
de:b2:c6:d6:80:8b:17:70:fb:99:97:c5:21:3a:c4:
14:bf:5f:1a:4c:c9:58:ab:41:63:e4:27:ce:3a:67:
57:2d:c0:1a:b7:28:45:e2:14:4a:b7:af:4a:0a:43:
e4:83:1e:e3:e2:40:59:69:84:b2:fd:66:9a:08:70:
b4:00:f0:86:e0:e9:5e:61:15:f9:b1:4c:c7:b6:9a:
62:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:DA:BF:8C:80:17:A8:BE:86:C8:E1:E0:EA:EF:2F:56:0F:D1:10:2F
X509v3 Authority Key Identifier:
keyid:E0:F2:EA:63:43:AF:44:D9:9E:A4:42:96:B3:91:0F:DA:83:65:29:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155CA4/7B2578D8C1A111EA94735C31C4F9AE02/4PLqY0OvRNmepEKWs5EP2oNlKXM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4PLqY0OvRNmepEKWs5EP2oNlKXM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155CA4/7B2578D8C1A111EA94735C31C4F9AE02/6130BF1CC1A311EA9DD90134C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.225.88.0/22
103.13.208.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:af:76:fb:4c:10:db:c5:a0:8b:53:d7:9f:4e:41:14:85:ee:
a2:55:a1:b7:e3:5a:fd:40:c2:fb:92:8e:bd:e9:af:d8:d3:94:
75:a3:8c:9f:94:d6:6c:3f:92:29:63:50:d9:83:e3:50:02:2d:
96:8d:8f:0e:d2:9e:01:24:15:b8:b1:b1:2a:23:4b:b0:32:6d:
53:b2:7b:23:d2:ac:ed:5f:ca:79:ef:5a:a1:ff:cb:b9:ab:cf:
94:fd:6d:41:2f:3b:e2:ad:62:da:bb:80:f6:7d:26:ad:eb:89:
88:2f:c3:31:e2:92:28:9d:1a:7b:7a:fa:f7:55:51:3e:a0:80:
23:5b:11:8b:66:0a:7d:c3:14:96:6b:3d:4c:84:5a:5d:5d:fe:
1d:25:64:c2:8d:48:12:85:a1:c0:24:92:c8:e9:2d:57:89:f8:
5c:d7:27:01:d8:86:70:1b:0b:e1:f1:9b:d0:4c:72:f6:1b:40:
1a:62:ce:8c:d5:3a:22:e0:25:a1:58:f3:44:eb:a4:dc:5b:a8:
f6:bd:a5:5d:96:32:2c:fd:1f:c1:f9:93:2e:a1:4a:77:f4:ca:
62:93:47:a1:d8:42:d3:24:34:7b:85:64:01:18:69:9e:95:44:
46:8d:46:99:ea:ee:f3:82:83:bc:49:3c:16:c4:09:ac:3d:f9:
03:88:fa:9f
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICBhAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTVDQTQxMTAvBgNVBAUTKEUwRjJFQTYzNDNBRjQ0RDk5RUE0NDI5NkIzOTEwRkRB
ODM2NTI5NzMwHhcNMjIwODAxMTA0ODMzWhcNMjMxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MmU3YWY4MS0zZDRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA29fH3QPRyjW/+u3vkEltf1hUzGOE0FHqvkG3iv+AQY5BfLksU4SXN3ovFGSs
E6g05F7IUiGDTwf8RGmE8Aj7KnBtkJtgNgt4PvJd3NZPI0DaYWuijlZvCIz1MDcY
B1XxHqkyM4E3FyuFP0pAWjZI0buV4Jw6cNaeSczMt4PrIVMD9OXqZYD27NiJs2JI
yoWYcKcyPysHmbHSV4hhDn08kY68xrPH7q6DNskEs+QxdgJqX7PessbWgIsXcPuZ
l8UhOsQUv18aTMlYq0Fj5CfOOmdXLcAatyhF4hRKt69KCkPkgx7j4kBZaYSy/Waa
CHC0APCG4OleYRX5sUzHtppi/QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFCPav4yA
F6i+hsjh4OrvL1YP0RAvMB8GA1UdIwQYMBaAFODy6mNDr0TZnqRClrORD9qDZSlz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NUNBNC83QjI1NzhEOEMx
QTExMUVBOTQ3MzVDMzFDNEY5QUUwMi80UExxWTBPdlJObWVwRUtXczVFUDJvTmxL
WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRQTHFZME92Uk5tZXBFS1dzNUVQMm9ObEtYTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTVDQTQvN0IyNTc4RDhDMUExMTFFQTk0NzM1QzMxQzRGOUFFMDIvNjEzMEJGMUND
MUEzMTFFQTlERDkwMTM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAIr4VgDBAJnDdAwDQYJKoZIhvcNAQELBQADggEBAKevdvtM
ENvFoItT159OQRSF7qJVobfjWv1AwvuSjr3pr9jTlHWjjJ+U1mw/kiljUNmD41AC
LZaNjw7SngEkFbixsSojS7AybVOyeyPSrO1fynnvWqH/y7mrz5T9bUEvO+KtYtq7
gPZ9Jq3riYgvwzHikiidGnt6+vdVUT6ggCNbEYtmCn3DFJZrPUyEWl1d/h0lZMKN
SBKFocAkksjpLVeJ+FzXJwHYhnAbC+Hxm9BMcvYbQBpizozVOiLgJaFY80TrpNxb
qPa9pV2WMiz9H8H5ky6hSnf0ymKTR6HYQtMkNHuFZAEYaZ6VREaNRpnq7vOCg7xJ
PBbECaw9+QOI+p8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:07 2024 by rpki-client on console-fra.rpki-client.org