Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91721E1/DE1D8F62DBD611EA9A95D537C4F9AE02/E63BEB6ADBD811EA9ED2E339C4F9AE02.roa
File: E63BEB6ADBD811EA9ED2E339C4F9AE02.roa (raw, json)
Hash identifier: NOCIBWnBPx1PO9fXYgezQ7XeSsmk4PwJN+XYKl/hsto=
Subject key identifier: 06:92:FE:EB:B2:AC:E1:4C:4A:B2:28:82:CE:61:74:E1:A6:DA:F3:0F
Certificate issuer: /CN=A91721E1/serialNumber=D3E87899EB2EB878CD70FA724550CFF2A96C2362
Certificate serial: 0565
Authority key identifier: D3:E8:78:99:EB:2E:B8:78:CD:70:FA:72:45:50:CF:F2:A9:6C:23:62
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0-h4mesuuHjNcPpyRVDP8qlsI2I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91721E1/DE1D8F62DBD611EA9A95D537C4F9AE02/E63BEB6ADBD811EA9ED2E339C4F9AE02.roa
Signing time: Fri 01 Jul 2022 23:09:13 +0000
ROA not before: Fri 01 Jul 2022 23:09:13 +0000
ROA not after: Sat 30 Sep 2023 00:00:00 +0000
asID: 137386
IP address blocks: 103.95.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1381 (0x565)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91721E1/serialNumber=D3E87899EB2EB878CD70FA724550CFF2A96C2362
Validity
Not Before: Jul 1 23:09:13 2022 GMT
Not After : Sep 30 00:00:00 2023 GMT
Subject: CN=62bf7e98-b364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:35:b3:b3:38:04:a6:2b:5c:66:0f:40:c2:87:
66:25:3b:42:5b:7e:2f:ca:84:e6:78:94:a6:f5:70:
58:9c:0a:31:45:ce:93:ee:2e:9c:6f:30:c1:cc:68:
78:93:89:32:86:83:7a:e8:80:cd:e4:53:08:4e:84:
8a:d7:b7:7f:08:57:3e:7d:3c:ac:26:da:8a:82:18:
9c:4b:37:49:0d:38:01:85:2c:32:bf:ce:f9:7d:47:
c6:23:bd:3d:82:29:33:44:a6:e6:f0:01:62:09:32:
5c:f3:26:6c:ed:c0:05:f8:05:3c:92:d3:2e:ee:98:
a0:bb:9c:f7:c4:f0:d1:29:e8:8e:f8:bc:c5:4c:fb:
fe:bc:b9:fe:14:a7:32:6a:5d:98:b5:3b:e3:8c:62:
e4:7f:b4:73:13:4c:41:4e:2b:df:a6:5d:b2:55:97:
7f:5a:01:e7:07:a6:29:31:3f:d8:49:00:df:8e:b3:
b4:9d:a5:0f:2e:45:49:07:5b:67:30:fd:d5:c6:b9:
d8:d8:2e:17:84:11:48:51:d1:89:52:bb:5d:95:af:
7d:06:08:03:d5:b7:d9:b8:21:62:c7:01:0e:59:ac:
5a:74:dd:37:21:00:92:37:bf:ec:a3:b4:62:d3:82:
0c:39:68:62:d7:9f:f8:cc:6b:4f:fc:65:16:02:f0:
99:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:92:FE:EB:B2:AC:E1:4C:4A:B2:28:82:CE:61:74:E1:A6:DA:F3:0F
X509v3 Authority Key Identifier:
keyid:D3:E8:78:99:EB:2E:B8:78:CD:70:FA:72:45:50:CF:F2:A9:6C:23:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91721E1/DE1D8F62DBD611EA9A95D537C4F9AE02/0-h4mesuuHjNcPpyRVDP8qlsI2I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0-h4mesuuHjNcPpyRVDP8qlsI2I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91721E1/DE1D8F62DBD611EA9A95D537C4F9AE02/E63BEB6ADBD811EA9ED2E339C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.95.31.0/24
Signature Algorithm: sha256WithRSAEncryption
02:25:25:51:e0:9a:82:48:42:4a:9e:58:c7:8b:27:a0:7e:cc:
b3:60:e5:ca:b7:5b:58:a5:43:ac:4a:19:aa:bb:e3:d0:6e:69:
2d:d2:b5:b5:3a:a0:ab:6e:93:48:0f:6d:32:2a:d6:3b:cc:84:
39:74:93:25:56:71:de:ef:4f:8f:b5:5e:ac:ae:e2:63:33:53:
53:17:d0:cb:9a:cd:0c:b2:af:6d:0a:dc:65:ae:15:69:31:d0:
54:15:ad:3c:fe:49:8b:7a:cd:be:d2:cd:e8:dc:58:01:77:80:
da:77:53:5d:55:8c:3d:31:7d:62:b4:97:5e:4c:46:53:f5:d9:
43:41:48:a2:20:9f:62:14:c7:6e:9f:7e:60:e1:17:82:46:39:
50:74:1d:e0:61:e6:97:53:18:23:45:fd:88:12:00:58:a1:6f:
b5:ef:0d:bc:a9:1a:ab:58:b3:01:13:6f:f1:93:73:c6:8f:1e:
36:d7:32:fe:c5:34:54:e9:46:8a:bc:55:e1:56:e4:2d:f4:ec:
c4:39:fb:3e:bf:dd:30:2e:2c:28:6b:58:3a:16:92:50:85:3b:
65:68:54:71:a2:1b:c8:72:b8:5b:61:fc:d8:99:ff:df:82:41:
28:d2:48:72:99:06:8e:a1:98:18:26:ff:02:ed:5f:27:7d:3f:
f7:01:42:56
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzIxRTExMTAvBgNVBAUTKEQzRTg3ODk5RUIyRUI4NzhDRDcwRkE3MjQ1NTBDRkYy
QTk2QzIzNjIwHhcNMjIwNzAxMjMwOTEzWhcNMjMwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02MmJmN2U5OC1iMzY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnjWzszgEpitcZg9AwodmJTtCW34vyoTmeJSm9XBYnAoxRc6T7i6cbzDBzGh4
k4kyhoN66IDN5FMIToSK17d/CFc+fTysJtqKghicSzdJDTgBhSwyv875fUfGI709
gikzRKbm8AFiCTJc8yZs7cAF+AU8ktMu7pigu5z3xPDRKeiO+LzFTPv+vLn+FKcy
al2YtTvjjGLkf7RzE0xBTivfpl2yVZd/WgHnB6YpMT/YSQDfjrO0naUPLkVJB1tn
MP3VxrnY2C4XhBFIUdGJUrtdla99BggD1bfZuCFixwEOWaxadN03IQCSN7/so7Ri
04IMOWhi15/4zGtP/GUWAvCZJQIDAQABo4IClTCCApEwHQYDVR0OBBYEFAaS/uuy
rOFMSrIogs5hdOGm2vMPMB8GA1UdIwQYMBaAFNPoeJnrLrh4zXD6ckVQz/KpbCNi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjFFMS9ERTFEOEY2MkRC
RDYxMUVBOUE5NUQ1MzdDNEY5QUUwMi8wLWg0bWVzdXVIak5jUHB5UlZEUDhxbHNJ
MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzAtaDRtZXN1dUhqTmNQcHlSVkRQOHFsc0kySS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzIxRTEvREUxRDhGNjJEQkQ2MTFFQTlBOTVENTM3QzRGOUFFMDIvRTYzQkVCNkFE
QkQ4MTFFQTlFRDJFMzM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnXx8wDQYJKoZIhvcNAQELBQADggEBAAIlJVHgmoJIQkqe
WMeLJ6B+zLNg5cq3W1ilQ6xKGaq749BuaS3StbU6oKtuk0gPbTIq1jvMhDl0kyVW
cd7vT4+1Xqyu4mMzU1MX0MuazQyyr20K3GWuFWkx0FQVrTz+SYt6zb7SzejcWAF3
gNp3U11VjD0xfWK0l15MRlP12UNBSKIgn2IUx26ffmDhF4JGOVB0HeBh5pdTGCNF
/YgSAFihb7XvDbypGqtYswETb/GTc8aPHjbXMv7FNFTpRoq8VeFW5C307MQ5+z6/
3TAuLChrWDoWklCFO2VoVHGiG8hyuFth/NiZ/9+CQSjSSHKZBo6hmBgm/wLtXyd9
P/cBQlY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-ams.rpki-client.org