Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9193E80/1C97E8188A2C11E8AA7B8B1BC4F9AE02/E7552E8AA37711EDB8AB391FC4F9AE02.roa
File: E7552E8AA37711EDB8AB391FC4F9AE02.roa (raw, json)
Hash identifier: KpdWKC+ETs8+LWEQ7VZ+ZI3xZsCSFaBsPsBeVEMJ9jc=
Subject key identifier: 31:9F:69:0F:0F:AD:FF:05:3A:E8:6D:8F:A7:81:27:C4:00:B0:61:E5
Certificate issuer: /CN=A9193E80/serialNumber=249A2D6CAB3E9DC3BE869E22D858DF61560E412F
Certificate serial: 1239
Authority key identifier: 24:9A:2D:6C:AB:3E:9D:C3:BE:86:9E:22:D8:58:DF:61:56:0E:41:2F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JJotbKs-ncO-hp4i2FjfYVYOQS8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9193E80/1C97E8188A2C11E8AA7B8B1BC4F9AE02/E7552E8AA37711EDB8AB391FC4F9AE02.roa
Signing time: Mon 20 Feb 2023 04:34:54 +0000
ROA not before: Mon 20 Feb 2023 04:34:54 +0000
ROA not after: Sun 28 May 2023 00:00:00 +0000
asID: 134090
IP address blocks: 45.249.116.0/22 maxlen: 24
103.51.112.0/22 maxlen: 24
103.85.36.0/22 maxlen: 24
103.95.112.0/22 maxlen: 24
103.106.88.0/22 maxlen: 23
123.253.188.0/22 maxlen: 24
202.179.128.0/22 maxlen: 24
2400:a840::/32 maxlen: 34
2400:a841::/32 maxlen: 34
2400:a842::/31 maxlen: 34
2400:a844::/30 maxlen: 34
2402:2c80::/32 maxlen: 34
2402:3fc0::/32 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4665 (0x1239)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9193E80/serialNumber=249A2D6CAB3E9DC3BE869E22D858DF61560E412F
Validity
Not Before: Feb 20 04:34:54 2023 GMT
Not After : May 28 00:00:00 2023 GMT
Subject: CN=63f2f86e-a0e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4e:f7:d2:a3:60:05:e6:ec:ad:26:0e:ba:45:
5c:71:83:30:65:90:b4:ed:a8:d0:cc:7e:4a:e0:1d:
97:b8:45:a6:23:66:c8:bd:0d:a1:10:ad:e1:5d:27:
2a:62:72:9d:e6:8f:56:be:0a:fb:d4:58:64:1b:eb:
e0:09:bc:d0:ce:81:4a:69:4d:12:6c:1d:de:d4:f6:
98:a3:99:ae:5d:c2:c8:92:e0:d8:72:31:e4:e2:4e:
d5:bf:f2:d4:60:29:43:3e:d7:8b:51:3c:d9:6f:63:
48:a2:87:49:75:34:d7:9c:f9:43:d3:00:04:d5:ac:
b6:51:24:18:9f:7c:2c:3b:4a:61:46:51:8d:c7:df:
d1:da:d3:66:da:dc:9a:db:bb:d1:0b:48:4c:6b:ec:
6e:52:6d:93:30:e2:bb:21:78:8a:a2:7e:61:0d:85:
c3:da:8f:94:d6:5d:6a:95:0c:95:06:92:a3:b0:c0:
47:d2:f3:9f:82:a6:1a:48:f5:95:b3:85:a4:68:11:
99:28:2d:27:22:b2:13:63:d0:7c:e6:a2:6e:18:ed:
49:9c:63:a1:27:b9:cf:29:82:e1:2c:b7:7b:03:2e:
f9:2b:62:ee:1e:93:c3:29:8f:ad:65:9f:d6:a8:0b:
01:b6:98:ca:15:71:7d:75:a4:58:59:2a:44:85:7b:
9c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:9F:69:0F:0F:AD:FF:05:3A:E8:6D:8F:A7:81:27:C4:00:B0:61:E5
X509v3 Authority Key Identifier:
keyid:24:9A:2D:6C:AB:3E:9D:C3:BE:86:9E:22:D8:58:DF:61:56:0E:41:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9193E80/1C97E8188A2C11E8AA7B8B1BC4F9AE02/JJotbKs-ncO-hp4i2FjfYVYOQS8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JJotbKs-ncO-hp4i2FjfYVYOQS8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193E80/1C97E8188A2C11E8AA7B8B1BC4F9AE02/E7552E8AA37711EDB8AB391FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.249.116.0/22
103.51.112.0/22
103.85.36.0/22
103.95.112.0/22
103.106.88.0/22
123.253.188.0/22
202.179.128.0/22
IPv6:
2400:a840::/29
2402:2c80::/32
2402:3fc0::/32
Signature Algorithm: sha256WithRSAEncryption
6f:9f:34:18:13:1a:ff:0a:5c:a8:18:6a:08:9b:81:5f:d8:56:
cc:25:e7:a5:b7:c8:62:c6:80:96:af:94:81:d6:15:e0:fb:09:
63:e9:48:88:93:aa:36:01:87:f7:35:b7:e9:d9:9f:08:15:93:
91:d5:7c:0e:3f:fe:6f:49:ef:81:4c:ec:e3:01:47:92:09:59:
7e:b2:6b:09:e3:ca:03:dd:3e:6e:21:b2:b7:53:81:96:25:9c:
06:2d:9e:58:d8:ee:e5:2e:73:49:07:d6:25:3a:84:78:8e:53:
b8:64:cb:87:d5:7e:28:02:21:e2:c1:c7:d9:1b:76:d5:ad:34:
0b:98:18:1d:ed:01:8c:cb:d6:a4:90:de:d9:bb:2b:36:1b:52:
0a:82:32:d0:20:72:f4:da:25:2e:21:38:0a:3d:fe:f4:a0:91:
c1:43:e8:84:fc:14:7c:69:ee:a5:1f:99:35:4d:4e:cd:c3:8c:
49:ab:53:68:ef:71:6f:50:d4:9d:3f:c1:19:b4:d5:00:e1:1e:
0f:da:f9:e5:4c:01:c4:7e:6e:b7:a0:5a:6a:df:15:1f:f3:a4:
5b:30:cf:aa:19:2d:bb:67:4d:9e:3c:e6:4f:5d:52:3e:d3:8c:
e4:96:80:a5:9b:33:c2:c4:c9:fb:5d:21:32:25:c1:30:33:24:
53:6f:68:1f
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgICEjkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTNFODAxMTAvBgNVBAUTKDI0OUEyRDZDQUIzRTlEQzNCRTg2OUUyMkQ4NThERjYx
NTYwRTQxMkYwHhcNMjMwMjIwMDQzNDU0WhcNMjMwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02M2YyZjg2ZS1hMGU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2E730qNgBebsrSYOukVccYMwZZC07ajQzH5K4B2XuEWmI2bIvQ2hEK3hXScq
YnKd5o9Wvgr71FhkG+vgCbzQzoFKaU0SbB3e1PaYo5muXcLIkuDYcjHk4k7Vv/LU
YClDPteLUTzZb2NIoodJdTTXnPlD0wAE1ay2USQYn3wsO0phRlGNx9/R2tNm2tya
27vRC0hMa+xuUm2TMOK7IXiKon5hDYXD2o+U1l1qlQyVBpKjsMBH0vOfgqYaSPWV
s4WkaBGZKC0nIrITY9B85qJuGO1JnGOhJ7nPKYLhLLd7Ay75K2LuHpPDKY+tZZ/W
qAsBtpjKFXF9daRYWSpEhXuc+QIDAQABo4IC1jCCAtIwHQYDVR0OBBYEFDGfaQ8P
rf8FOuhtj6eBJ8QAsGHlMB8GA1UdIwQYMBaAFCSaLWyrPp3DvoaeIthY32FWDkEv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0U4MC8xQzk3RTgxODhB
MkMxMUU4QUE3QjhCMUJDNEY5QUUwMi9KSm90YktzLW5jTy1ocDRpMkZqZllWWU9R
UzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pKb3RiS3MtbmNPLWhwNGkyRmpmWVZZT1FTOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTNFODAvMUM5N0U4MTg4QTJDMTFFOEFBN0I4QjFCQzRGOUFFMDIvRTc1NTJFOEFB
Mzc3MTFFREI4QUIzOTFGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwYAYIKwYBBQUHAQcBAf8E
UTBPMDAEAgABMCoDBAIt+XQDBAJnM3ADBAJnVSQDBAJnX3ADBAJnalgDBAJ7/bwD
BALKs4AwGwQCAAIwFQMFAyQAqEADBQAkAiyAAwUAJAI/wDANBgkqhkiG9w0BAQsF
AAOCAQEAb580GBMa/wpcqBhqCJuBX9hWzCXnpbfIYsaAlq+UgdYV4PsJY+lIiJOq
NgGH9zW36dmfCBWTkdV8Dj/+b0nvgUzs4wFHkglZfrJrCePKA90+biGyt1OBliWc
Bi2eWNju5S5zSQfWJTqEeI5TuGTLh9V+KAIh4sHH2Rt21a00C5gYHe0BjMvWpJDe
2bsrNhtSCoIy0CBy9NolLiE4Cj3+9KCRwUPohPwUfGnupR+ZNU1OzcOMSatTaO9x
b1DUnT/BGbTVAOEeD9r55UwBxH5ut6Baat8VH/OkWzDPqhktu2dNnjzmT11SPtOM
5JaApZszwsTJ+10hMiXBMDMkU29oHw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:34 2024 by rpki-client on console-fra.rpki-client.org