Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917473D/527594769EDA11E99674B877C4F9AE02/DA630906AB3211EC9DC2A854C4F9AE02.roa
File: DA630906AB3211EC9DC2A854C4F9AE02.roa (raw, json)
Hash identifier: 2dNgJ6WuwiiQ66LyRiopPmmfxwaH8ei0RYKAQibTv5w=
Subject key identifier: 3A:56:05:C7:71:B6:7C:2B:7F:69:17:FE:D4:10:E9:DD:B4:A6:5D:D2
Certificate issuer: /CN=A917473D/serialNumber=9C68F4BB98F5F8AE9D56327DF599B3C1180795F1
Certificate serial: 0C6A
Authority key identifier: 9C:68:F4:BB:98:F5:F8:AE:9D:56:32:7D:F5:99:B3:C1:18:07:95:F1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nGj0u5j1-K6dVjJ99ZmzwRgHlfE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917473D/527594769EDA11E99674B877C4F9AE02/DA630906AB3211EC9DC2A854C4F9AE02.roa
Signing time: Thu 10 Nov 2022 19:05:48 +0000
ROA not before: Thu 10 Nov 2022 19:05:48 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 24433
IP address blocks: 138.77.0.0/16 maxlen: 17
138.77.104.0/21 maxlen: 21
138.77.252.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3178 (0xc6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917473D/serialNumber=9C68F4BB98F5F8AE9D56327DF599B3C1180795F1
Validity
Not Before: Nov 10 19:05:48 2022 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=636d4b8b-dcd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:27:0a:8d:d7:37:18:c4:c4:83:e3:75:39:cc:
2a:23:2d:13:a0:ec:b7:50:a1:43:06:d1:7a:ae:4a:
d2:a7:be:9a:2c:c2:a1:e7:8f:b4:d0:83:d6:a0:44:
6a:af:9b:b2:a1:dd:18:5a:53:53:dc:e2:a9:2d:bc:
7d:e9:af:9d:79:35:4c:36:4c:21:45:6e:f9:52:78:
ac:ef:56:5d:17:9f:ad:a5:2b:39:20:c9:a9:ba:cc:
1f:a8:f6:6f:20:ad:52:84:0e:45:ec:47:6c:6b:9e:
6a:4e:b1:a1:e2:32:4d:8f:69:99:c8:79:47:24:2b:
aa:11:98:ba:1a:3c:53:5e:66:48:04:3b:be:5d:2c:
97:58:d6:d6:ec:a9:e1:17:80:7e:6e:3b:08:96:e2:
04:70:f4:78:2d:5a:bd:6b:55:c0:2f:cf:5d:da:e2:
2c:07:4f:95:cc:d6:89:31:16:91:d3:ac:68:6b:fe:
5c:a3:64:06:00:00:18:50:51:4e:bd:fa:7a:4f:81:
b0:f2:ee:40:ef:2f:c2:07:c7:03:af:36:f9:7b:5d:
da:73:f2:d2:93:c9:b2:01:42:57:af:3e:88:b3:14:
b7:cf:cb:52:24:6a:b8:df:70:a9:7c:81:a5:fb:88:
04:ee:04:60:98:47:69:07:0f:4e:45:61:61:2d:b8:
28:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:56:05:C7:71:B6:7C:2B:7F:69:17:FE:D4:10:E9:DD:B4:A6:5D:D2
X509v3 Authority Key Identifier:
keyid:9C:68:F4:BB:98:F5:F8:AE:9D:56:32:7D:F5:99:B3:C1:18:07:95:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917473D/527594769EDA11E99674B877C4F9AE02/nGj0u5j1-K6dVjJ99ZmzwRgHlfE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nGj0u5j1-K6dVjJ99ZmzwRgHlfE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917473D/527594769EDA11E99674B877C4F9AE02/DA630906AB3211EC9DC2A854C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
138.77.0.0/16
Signature Algorithm: sha256WithRSAEncryption
30:7c:ca:30:93:e3:ff:d0:14:2e:22:db:1e:aa:b9:ef:31:3d:
5c:8e:a3:25:00:fd:7a:76:b2:84:20:7a:8d:e1:eb:b3:85:6b:
7f:ec:d8:1b:1d:6d:2c:04:1a:5e:15:49:8c:86:39:1f:bb:48:
b1:ea:81:6f:d6:19:62:08:17:b3:53:b3:9e:3c:1e:fe:1d:31:
9f:e2:35:e8:b3:44:45:5c:42:d8:e2:e1:f1:33:b2:83:20:1f:
24:d2:8e:95:b7:2c:df:a7:17:8a:87:a0:71:71:1b:0c:c0:4a:
04:a8:e8:54:3f:f0:a6:c0:a3:b9:ef:3c:b5:fd:49:02:24:c6:
b1:f4:47:62:c5:a4:5c:af:71:91:5d:c7:26:75:d1:84:b1:08:
9a:86:dd:ae:45:02:7c:ef:ca:6f:03:5b:a1:af:ad:32:64:62:
fd:a3:3b:19:e3:b3:55:df:60:d1:3c:5c:57:c8:85:32:13:32:
4e:4b:c7:4d:ae:e2:95:6b:a6:d4:52:44:61:96:fa:cf:1d:47:
d9:77:90:9c:24:df:a9:d2:51:76:dc:b8:ef:62:59:b6:78:ac:
c2:93:bd:58:5d:b7:79:f3:9a:34:6e:1c:2f:12:6a:a2:3b:c6:
2c:44:42:8e:96:0e:d5:11:5c:05:21:57:bd:04:7a:b3:b6:5c:
af:c5:a7:ff
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgICDGowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzQ3M0QxMTAvBgNVBAUTKDlDNjhGNEJCOThGNUY4QUU5RDU2MzI3REY1OTlCM0Mx
MTgwNzk1RjEwHhcNMjIxMTEwMTkwNTQ4WhcNMjMxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02MzZkNGI4Yi1kY2Q0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAricKjdc3GMTEg+N1OcwqIy0ToOy3UKFDBtF6rkrSp76aLMKh54+00IPWoERq
r5uyod0YWlNT3OKpLbx96a+deTVMNkwhRW75Unis71ZdF5+tpSs5IMmpuswfqPZv
IK1ShA5F7Edsa55qTrGh4jJNj2mZyHlHJCuqEZi6GjxTXmZIBDu+XSyXWNbW7Knh
F4B+bjsIluIEcPR4LVq9a1XAL89d2uIsB0+VzNaJMRaR06xoa/5co2QGAAAYUFFO
vfp6T4Gw8u5A7y/CB8cDrzb5e13ac/LSk8myAUJXrz6IsxS3z8tSJGq433CpfIGl
+4gE7gRgmEdpBw9ORWFhLbgosQIDAQABo4IClDCCApAwHQYDVR0OBBYEFDpWBcdx
tnwrf2kX/tQQ6d20pl3SMB8GA1UdIwQYMBaAFJxo9LuY9fiunVYyffWZs8EYB5Xx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDczRC81Mjc1OTQ3NjlF
REExMUU5OTY3NEI4NzdDNEY5QUUwMi9uR2owdTVqMS1LNmRWako5OVptendSZ0hs
ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL25HajB1NWoxLUs2ZFZqSjk5Wm16d1JnSGxmRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzQ3M0QvNTI3NTk0NzY5RURBMTFFOTk2NzRCODc3QzRGOUFFMDIvREE2MzA5MDZB
QjMyMTFFQzlEQzJBODU0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8E
DzANMAsEAgABMAUDAwCKTTANBgkqhkiG9w0BAQsFAAOCAQEAMHzKMJPj/9AULiLb
Hqq57zE9XI6jJQD9enayhCB6jeHrs4Vrf+zYGx1tLAQaXhVJjIY5H7tIseqBb9YZ
YggXs1Oznjwe/h0xn+I16LNERVxC2OLh8TOygyAfJNKOlbcs36cXioegcXEbDMBK
BKjoVD/wpsCjue88tf1JAiTGsfRHYsWkXK9xkV3HJnXRhLEImobdrkUCfO/KbwNb
oa+tMmRi/aM7GeOzVd9g0TxcV8iFMhMyTkvHTa7ilWum1FJEYZb6zx1H2XeQnCTf
qdJRdty472JZtniswpO9WF23efOaNG4cLxJqojvGLERCjpYO1RFcBSFXvQR6s7Zc
r8Wn/w==
-----END CERTIFICATE-----
Generated at Fri Sep 1 17:02:36 2023 by rpki-client on console-fra.rpki-client.org