Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91788FA/0435D160034311ED98849640C4F9AE02/A1520276034711EDAADC7471C4F9AE02.roa
File: A1520276034711EDAADC7471C4F9AE02.roa (raw, json)
Hash identifier: CXtOMnvOjLP+6h5xgiBYOSH8Aj8rcBH9S4Ge8ZxKeew=
Subject key identifier: 69:74:A4:B5:8E:5E:50:77:2A:96:6A:AA:4B:A0:5E:FA:35:17:E0:9C
Certificate issuer: /CN=A91788FA/serialNumber=FDDCB69FE9B7433D3A48FBEE72E659480515DD19
Certificate serial: 02
Authority key identifier: FD:DC:B6:9F:E9:B7:43:3D:3A:48:FB:EE:72:E6:59:48:05:15:DD:19
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dy2n-m3Qz06SPvucuZZSAUV3Rk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91788FA/0435D160034311ED98849640C4F9AE02/A1520276034711EDAADC7471C4F9AE02.roa
Signing time: Thu 14 Jul 2022 07:36:10 +0000
ROA not before: Thu 14 Jul 2022 07:36:10 +0000
ROA not after: Mon 01 May 2023 00:00:00 +0000
asID: 38136
IP address blocks: 43.229.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91788FA/serialNumber=FDDCB69FE9B7433D3A48FBEE72E659480515DD19
Validity
Not Before: Jul 14 07:36:10 2022 GMT
Not After : May 1 00:00:00 2023 GMT
Subject: CN=62cfc76a-b781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9d:4f:4f:09:28:0b:89:13:7e:3a:b3:6e:96:
29:a4:f2:23:63:eb:db:3f:0b:6d:f2:11:e0:b5:80:
8a:b7:08:2e:10:0a:50:66:97:0c:ee:4d:3f:4d:79:
ab:a4:ea:e6:c1:fb:73:91:c4:85:55:42:69:9a:5e:
14:ae:a3:5d:7a:ef:b2:b3:70:c3:76:9c:55:1b:cf:
4a:e0:04:85:c5:74:b1:5a:0f:72:bd:62:f2:dd:5f:
2d:ca:5d:95:54:4a:0f:7c:eb:92:59:6f:dd:8c:ff:
b2:eb:35:f0:b2:0b:04:a2:49:66:9f:20:84:14:a7:
0e:14:b7:4b:13:c6:74:12:16:b5:76:91:95:6c:9f:
e4:dd:ac:5d:59:98:31:7e:bb:c9:fc:44:36:a6:8b:
1b:ab:b5:01:f2:e4:ec:69:fd:3c:d4:be:77:2c:2a:
f0:09:c9:f1:ab:d6:09:0a:15:57:c5:68:67:ca:32:
3e:9c:a9:e6:5c:e2:e4:01:91:d3:5a:7b:a8:c8:03:
47:de:9e:f7:d8:1e:e2:3d:2b:45:44:78:67:c7:fc:
27:d1:14:01:db:ec:43:09:9a:96:15:a5:bd:41:6b:
65:25:e4:5c:4f:c7:09:12:10:bc:8d:9a:9d:05:d9:
3a:4c:86:d6:08:70:1d:52:75:ad:6a:45:e8:b6:b9:
59:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:74:A4:B5:8E:5E:50:77:2A:96:6A:AA:4B:A0:5E:FA:35:17:E0:9C
X509v3 Authority Key Identifier:
keyid:FD:DC:B6:9F:E9:B7:43:3D:3A:48:FB:EE:72:E6:59:48:05:15:DD:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91788FA/0435D160034311ED98849640C4F9AE02/_dy2n-m3Qz06SPvucuZZSAUV3Rk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dy2n-m3Qz06SPvucuZZSAUV3Rk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91788FA/0435D160034311ED98849640C4F9AE02/A1520276034711EDAADC7471C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.229.154.0/24
Signature Algorithm: sha256WithRSAEncryption
75:ab:c3:f1:f2:39:22:f5:68:5c:fe:0d:1c:70:21:84:80:6c:
64:79:f8:46:f8:60:8e:b9:ff:f8:9c:50:1a:76:d3:14:70:3d:
98:a0:0d:33:1f:a8:62:e5:c3:6a:2f:32:8f:ba:94:88:d6:0b:
03:94:e2:ae:d8:71:c1:4c:fc:d3:1e:d6:b3:7e:6f:50:e9:d1:
fa:e9:7b:4c:0b:43:6f:a3:f7:a0:6d:b2:38:22:b4:d7:f0:03:
dc:7b:1c:9e:c9:5c:b3:5e:31:9c:81:1e:6b:39:25:2f:a6:1a:
bd:d3:e0:ca:a5:f7:e3:96:6c:f6:a8:f5:96:71:e1:43:9d:ad:
92:ed:33:91:d5:bd:77:75:f0:71:01:c3:15:79:e3:aa:d4:66:
be:a2:2e:36:2c:72:cb:36:e6:6d:ab:01:f4:d7:08:32:00:5a:
17:55:19:88:4b:20:f8:8d:5b:9f:31:7e:13:67:46:7f:0b:88:
3a:79:ea:05:b1:07:db:15:9d:5b:71:22:1c:af:a4:a4:75:c6:
53:a5:80:19:3a:d1:3f:d9:11:b3:b1:68:a5:9c:83:ff:c0:34:
4a:6b:0b:81:c1:25:6b:91:ac:7d:a0:ef:d1:0e:6f:02:de:0a:
ff:90:f9:13:b5:c1:88:e8:f2:fd:6c:73:8d:e7:0c:62:1a:08:
6d:0e:bf:37
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
ODhGQTExMC8GA1UEBRMoRkREQ0I2OUZFOUI3NDMzRDNBNDhGQkVFNzJFNjU5NDgw
NTE1REQxOTAeFw0yMjA3MTQwNzM2MTBaFw0yMzA1MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTYyY2ZjNzZhLWI3ODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDAnU9PCSgLiRN+OrNulimk8iNj69s/C23yEeC1gIq3CC4QClBmlwzuTT9Neauk
6ubB+3ORxIVVQmmaXhSuo11677KzcMN2nFUbz0rgBIXFdLFaD3K9YvLdXy3KXZVU
Sg9865JZb92M/7LrNfCyCwSiSWafIIQUpw4Ut0sTxnQSFrV2kZVsn+TdrF1ZmDF+
u8n8RDamixurtQHy5Oxp/TzUvncsKvAJyfGr1gkKFVfFaGfKMj6cqeZc4uQBkdNa
e6jIA0fenvfYHuI9K0VEeGfH/CfRFAHb7EMJmpYVpb1Ba2Ul5FxPxwkSELyNmp0F
2TpMhtYIcB1Sda1qRei2uVmFAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUaXSktY5e
UHcqlmqqS6Be+jUX4JwwHwYDVR0jBBgwFoAU/dy2n+m3Qz06SPvucuZZSAUV3Rkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc4OEZBLzA0MzVEMTYwMDM0
MzExRUQ5ODg0OTY0MEM0RjlBRTAyL19keTJuLW0zUXowNlNQdnVjdVpaU0FVVjNS
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvX2R5Mm4tbTNRejA2U1B2dWN1WlpTQVVWM1JrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
ODhGQS8wNDM1RDE2MDAzNDMxMUVEOTg4NDk2NDBDNEY5QUUwMi9BMTUyMDI3NjAz
NDcxMUVEQUFEQzc0NzFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEACvlmjANBgkqhkiG9w0BAQsFAAOCAQEAdavD8fI5IvVoXP4N
HHAhhIBsZHn4Rvhgjrn/+JxQGnbTFHA9mKANMx+oYuXDai8yj7qUiNYLA5Tirthx
wUz80x7Ws35vUOnR+ul7TAtDb6P3oG2yOCK01/AD3Hscnslcs14xnIEeazklL6Ya
vdPgyqX345Zs9qj1lnHhQ52tku0zkdW9d3XwcQHDFXnjqtRmvqIuNixyyzbmbasB
9NcIMgBaF1UZiEsg+I1bnzF+E2dGfwuIOnnqBbEH2xWdW3EiHK+kpHXGU6WAGTrR
P9kRs7FopZyD/8A0SmsLgcEla5GsfaDv0Q5vAt4K/5D5E7XBiOjy/WxzjecMYhoI
bQ6/Nw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:47 2023 by rpki-client on console-fra.rpki-client.org