Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B6E8/D8E0DD3E01DA11EDA2AE1545C4F9AE02/4C50A2AAD78511EEA090E379C4F9AE02.roa
File: 4C50A2AAD78511EEA090E379C4F9AE02.roa (raw, json)
Hash identifier: jCC8h5mh3Isbg0/56AT2brXUGc2iI6QwVbQW8CcGH7U=
Subject key identifier: 83:61:4D:EC:D3:60:84:16:24:6F:D2:37:8A:D1:47:BF:CD:FC:DB:1B
Certificate issuer: /CN=A917B6E8/serialNumber=D239928966D8984EA2FA453FC53F9886B5ADCB95
Certificate serial: 01DA
Authority key identifier: D2:39:92:89:66:D8:98:4E:A2:FA:45:3F:C5:3F:98:86:B5:AD:CB:95
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0jmSiWbYmE6i-kU_xT-YhrWty5U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B6E8/D8E0DD3E01DA11EDA2AE1545C4F9AE02/4C50A2AAD78511EEA090E379C4F9AE02.roa
Signing time: Wed 01 May 2024 05:07:18 +0000
ROA not before: Wed 01 May 2024 05:07:18 +0000
ROA not after: Thu 29 Aug 2024 00:00:00 +0000
asID: 59329
IP address blocks: 103.226.228.0/24 maxlen: 24
103.226.229.0/24 maxlen: 24
103.226.230.0/24 maxlen: 24
103.226.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 474 (0x1da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B6E8/serialNumber=D239928966D8984EA2FA453FC53F9886B5ADCB95
Validity
Not Before: May 1 05:07:18 2024 GMT
Not After : Aug 29 00:00:00 2024 GMT
Subject: CN=6631ce05-7835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:95:0f:b6:68:cc:f0:f0:86:a1:b8:9f:47:20:
10:6b:82:24:a2:f2:b7:fc:5f:81:af:7b:f3:3b:b5:
a1:06:cb:38:19:93:bf:d9:08:5d:f4:d1:1f:4f:5e:
56:05:02:80:2b:11:9f:9a:1c:9d:7d:f9:e0:e4:88:
02:64:82:f0:24:11:64:b8:97:a4:a2:34:eb:56:c5:
4a:be:4c:6b:86:f0:4d:82:8e:3b:48:74:03:67:ec:
3d:c1:c0:bd:45:e8:08:32:15:ad:69:ac:9a:bd:7c:
1a:10:ba:0d:a0:f9:49:c9:f4:16:6b:c6:31:e6:11:
b7:3f:6c:03:66:40:3c:41:c8:73:64:be:f3:3a:60:
db:87:e3:85:d5:6e:76:d1:14:1b:4e:7c:9b:7d:68:
74:7e:c1:d1:ed:00:e8:9d:d6:73:51:f8:bf:b4:ea:
5f:73:bb:dd:34:7c:27:0e:9e:fa:5e:eb:f1:a6:09:
ba:1d:b8:6f:01:ab:43:c2:82:19:61:58:01:8b:58:
bb:f2:0e:44:40:7d:f4:2e:29:12:0f:d2:fc:c6:4a:
d2:21:f2:ca:f2:3a:ce:e6:6c:5d:72:ad:51:1c:09:
1f:5b:6f:0b:56:40:6a:e8:13:61:4d:ba:85:5a:53:
ac:5c:6d:58:47:a0:52:65:43:00:88:80:2a:2e:14:
d7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:61:4D:EC:D3:60:84:16:24:6F:D2:37:8A:D1:47:BF:CD:FC:DB:1B
X509v3 Authority Key Identifier:
keyid:D2:39:92:89:66:D8:98:4E:A2:FA:45:3F:C5:3F:98:86:B5:AD:CB:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B6E8/D8E0DD3E01DA11EDA2AE1545C4F9AE02/0jmSiWbYmE6i-kU_xT-YhrWty5U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0jmSiWbYmE6i-kU_xT-YhrWty5U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B6E8/D8E0DD3E01DA11EDA2AE1545C4F9AE02/4C50A2AAD78511EEA090E379C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.226.228.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:c9:f6:1e:99:9c:a3:89:0f:87:d2:f4:b3:89:c2:75:cf:f9:
9f:ef:e6:af:0a:f7:35:6e:f5:be:93:9c:8d:ca:38:b1:6d:b6:
8b:5f:d1:7c:2f:8c:44:0a:c9:72:51:7b:e9:25:2d:5c:49:d9:
25:80:e9:3f:23:e1:48:28:f9:6d:32:71:4b:fe:41:cb:53:0f:
59:50:2f:20:04:8c:97:05:0f:55:89:60:53:73:a7:3d:9e:0a:
08:3d:9e:17:16:1f:f2:dd:98:2b:8b:ce:f5:2d:a2:80:e1:7d:
07:22:48:9d:4b:db:12:65:99:08:f0:fb:28:2a:e1:a0:ee:13:
8d:01:87:97:28:d3:f7:31:f1:b0:c9:43:37:60:48:c6:4d:61:
52:ff:37:e0:68:d4:71:98:50:dc:65:38:f2:48:ed:8b:f1:65:
b2:08:0c:2e:c0:3b:cb:6d:23:08:c5:05:90:16:e8:78:04:e7:
b4:58:2b:7f:cc:3c:15:30:da:55:a2:96:55:5d:09:34:d1:1a:
f6:97:98:f9:56:77:1b:c2:3d:60:63:93:ad:f1:e2:93:ca:61:
0b:ec:4f:4c:46:de:7f:b6:42:a9:8c:2a:f7:3c:cf:92:05:20:
4a:80:62:f3:96:05:da:84:93:d4:87:8d:f4:40:e7:fa:ae:bf:
76:03:5d:03
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0I2RTgxMTAvBgNVBAUTKEQyMzk5Mjg5NjZEODk4NEVBMkZBNDUzRkM1M0Y5ODg2
QjVBRENCOTUwHhcNMjQwNTAxMDUwNzE4WhcNMjQwODI5MDAwMDAwWjAYMRYwFAYD
VQQDEw02NjMxY2UwNS03ODM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwpUPtmjM8PCGobifRyAQa4IkovK3/F+Br3vzO7WhBss4GZO/2Qhd9NEfT15W
BQKAKxGfmhydffng5IgCZILwJBFkuJekojTrVsVKvkxrhvBNgo47SHQDZ+w9wcC9
RegIMhWtaayavXwaELoNoPlJyfQWa8Yx5hG3P2wDZkA8QchzZL7zOmDbh+OF1W52
0RQbTnybfWh0fsHR7QDondZzUfi/tOpfc7vdNHwnDp76Xuvxpgm6HbhvAatDwoIZ
YVgBi1i78g5EQH30LikSD9L8xkrSIfLK8jrO5mxdcq1RHAkfW28LVkBq6BNhTbqF
WlOsXG1YR6BSZUMAiIAqLhTXbQIDAQABo4IClTCCApEwHQYDVR0OBBYEFINhTezT
YIQWJG/SN4rRR7/N/NsbMB8GA1UdIwQYMBaAFNI5kolm2JhOovpFP8U/mIa1rcuV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjZFOC9EOEUwREQzRTAx
REExMUVEQTJBRTE1NDVDNEY5QUUwMi8wam1TaVdiWW1FNmkta1VfeFQtWWhyV3R5
NVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBqbVNpV2JZbUU2aS1rVV94VC1ZaHJXdHk1VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0I2RTgvRDhFMEREM0UwMURBMTFFREEyQUUxNTQ1QzRGOUFFMDIvNEM1MEEyQUFE
Nzg1MTFFRUEwOTBFMzc5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJn4uQwDQYJKoZIhvcNAQELBQADggEBADzJ9h6ZnKOJD4fS
9LOJwnXP+Z/v5q8K9zVu9b6TnI3KOLFttotf0XwvjEQKyXJRe+klLVxJ2SWA6T8j
4Ugo+W0ycUv+QctTD1lQLyAEjJcFD1WJYFNzpz2eCgg9nhcWH/LdmCuLzvUtooDh
fQciSJ1L2xJlmQjw+ygq4aDuE40Bh5co0/cx8bDJQzdgSMZNYVL/N+Bo1HGYUNxl
OPJI7YvxZbIIDC7AO8ttIwjFBZAW6HgE57RYK3/MPBUw2lWillVdCTTRGvaXmPlW
dxvCPWBjk63x4pPKYQvsT0xG3n+2QqmMKvc8z5IFIEqAYvOWBdqEk9SHjfRA5/qu
v3YDXQM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:12 2024 by rpki-client on console-fra.rpki-client.org