Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919E833/4AA3E6E2C64B11E495FF9635C4F9AE02/5C49E85867D711ECA90C1164C4F9AE02.roa
File: 5C49E85867D711ECA90C1164C4F9AE02.roa (raw, json)
Hash identifier: EcVgNCIPQKMhWF7mfuXv8QJHnjYlSHqr6vYAHUrXi5s=
Subject key identifier: 1B:DE:96:2A:22:1B:D4:D9:7B:DB:D6:1A:08:39:89:43:3B:F3:95:58
Certificate issuer: /CN=A919E833/serialNumber=48AAE00D13DFB3CCDFB3A7D25FDC356FADC5BEC8
Certificate serial: 2368
Authority key identifier: 48:AA:E0:0D:13:DF:B3:CC:DF:B3:A7:D2:5F:DC:35:6F:AD:C5:BE:C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SKrgDRPfs8zfs6fSX9w1b63Fvsg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919E833/4AA3E6E2C64B11E495FF9635C4F9AE02/5C49E85867D711ECA90C1164C4F9AE02.roa
Signing time: Tue 28 Dec 2021 12:34:00 +0000
ROA not before: Tue 28 Dec 2021 12:34:00 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 55451
IP address blocks: 110.164.167.0/24 maxlen: 24
2403:6200:792c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9064 (0x2368)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919E833/serialNumber=48AAE00D13DFB3CCDFB3A7D25FDC356FADC5BEC8
Validity
Not Before: Dec 28 12:34:00 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=61cb0438-3cf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ed:f2:f3:56:71:43:c6:d2:63:6b:83:6f:23:
b5:62:29:34:69:cc:82:28:9a:d7:59:a5:36:c0:05:
95:79:f4:85:ca:71:87:49:60:2f:e4:a8:1e:52:de:
79:52:7b:06:19:fa:12:80:13:0d:fd:d6:9d:1f:0f:
9e:ae:71:3d:e3:d1:a0:34:2b:e8:91:6d:bd:0f:2b:
55:ee:1d:81:43:05:6a:4a:98:b9:aa:cc:f1:b3:ec:
6b:76:ae:a6:1b:ee:e1:10:e1:9c:cb:5a:b1:5b:c8:
93:5d:61:e5:a9:78:45:15:12:43:5d:30:1f:5e:4d:
dc:62:96:02:f5:8c:72:e5:58:1f:86:d6:d9:ba:d3:
c6:7d:02:e9:53:ac:bd:ce:90:9c:77:94:34:15:3d:
15:aa:36:1b:f7:22:e1:c1:8b:60:7f:97:07:96:3b:
c2:48:e2:48:3a:a9:73:6a:a4:21:6e:aa:54:d6:f5:
78:a1:90:61:ea:2c:5d:8f:9b:bc:4f:f6:5c:8f:04:
8d:b1:6e:59:43:b2:39:9c:53:c5:f4:fb:03:51:7a:
1a:9b:47:c9:a1:eb:fd:b4:d8:a1:39:ef:fe:6b:37:
0b:04:1f:4f:63:1b:47:b6:59:75:65:eb:d9:c6:50:
73:55:3f:20:34:1b:68:bb:ad:95:ed:d5:b2:38:7c:
39:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:DE:96:2A:22:1B:D4:D9:7B:DB:D6:1A:08:39:89:43:3B:F3:95:58
X509v3 Authority Key Identifier:
keyid:48:AA:E0:0D:13:DF:B3:CC:DF:B3:A7:D2:5F:DC:35:6F:AD:C5:BE:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919E833/4AA3E6E2C64B11E495FF9635C4F9AE02/SKrgDRPfs8zfs6fSX9w1b63Fvsg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SKrgDRPfs8zfs6fSX9w1b63Fvsg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E833/4AA3E6E2C64B11E495FF9635C4F9AE02/5C49E85867D711ECA90C1164C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
110.164.167.0/24
IPv6:
2403:6200:792c::/48
Signature Algorithm: sha256WithRSAEncryption
c1:3d:be:d1:87:a8:d5:97:d9:b6:9e:94:78:3b:d1:5f:de:ca:
1b:68:ea:4e:c4:08:34:23:cd:d8:a9:c6:52:05:06:85:06:78:
0d:6b:c0:09:31:62:0c:ea:08:15:68:14:30:9f:db:47:68:f2:
39:03:8b:d0:07:5a:6e:be:01:8b:d2:63:f1:6c:d0:a8:55:a1:
53:6e:0d:47:05:a4:40:10:85:7e:9f:61:e4:c7:19:35:d1:45:
3b:9b:34:09:59:9d:73:d5:75:1e:b4:24:78:42:ae:d2:a3:ba:
1c:ab:39:e6:d0:ca:1f:a5:bb:bf:8a:ef:38:80:ba:ff:8e:f1:
94:20:68:74:c5:12:8d:aa:ef:ba:4e:2f:4c:15:6a:05:ca:ef:
2c:40:6a:f9:72:ae:58:6a:21:63:d9:54:24:cf:27:ef:d1:ef:
8c:58:1f:cb:fc:da:f5:33:c4:1a:b8:92:e2:3b:4b:49:c8:5f:
c5:c1:0d:03:f6:ae:00:1c:7e:80:f6:46:79:d7:d7:b1:9f:27:
e7:44:8c:dd:ba:dd:fd:d9:87:b6:46:62:36:8f:27:37:d3:6e:
9e:56:8f:ae:1a:5a:94:de:7a:48:df:71:f5:15:1d:77:70:fd:
8c:7e:11:10:37:6b:e1:b6:7b:3b:58:ab:84:38:99:e1:0b:c0:
5a:43:d7:cc
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICI2gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUU4MzMxMTAvBgNVBAUTKDQ4QUFFMDBEMTNERkIzQ0NERkIzQTdEMjVGREMzNTZG
QURDNUJFQzgwHhcNMjExMjI4MTIzNDAwWhcNMjIwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MWNiMDQzOC0zY2Y0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAre3y81ZxQ8bSY2uDbyO1Yik0acyCKJrXWaU2wAWVefSFynGHSWAv5KgeUt55
UnsGGfoSgBMN/dadHw+ernE949GgNCvokW29DytV7h2BQwVqSpi5qszxs+xrdq6m
G+7hEOGcy1qxW8iTXWHlqXhFFRJDXTAfXk3cYpYC9Yxy5VgfhtbZutPGfQLpU6y9
zpCcd5Q0FT0VqjYb9yLhwYtgf5cHljvCSOJIOqlzaqQhbqpU1vV4oZBh6ixdj5u8
T/ZcjwSNsW5ZQ7I5nFPF9PsDUXoam0fJoev9tNihOe/+azcLBB9PYxtHtll1ZevZ
xlBzVT8gNBtou62V7dWyOHw5mwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFBvelioi
G9TZe9vWGgg5iUM785VYMB8GA1UdIwQYMBaAFEiq4A0T37PM37On0l/cNW+txb7I
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RTgzMy80QUEzRTZFMkM2
NEIxMUU0OTVGRjk2MzVDNEY5QUUwMi9TS3JnRFJQZnM4emZzNmZTWDl3MWI2M0Z2
c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NLcmdEUlBmczh6ZnM2ZlNYOXcxYjYzRnZzZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUU4MzMvNEFBM0U2RTJDNjRCMTFFNDk1RkY5NjM1QzRGOUFFMDIvNUM0OUU4NTg2
N0Q3MTFFQ0E5MEMxMTY0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBABupKcwDwQCAAIwCQMHACQDYgB5LDANBgkqhkiG9w0BAQsF
AAOCAQEAwT2+0Yeo1ZfZtp6UeDvRX97KG2jqTsQINCPN2KnGUgUGhQZ4DWvACTFi
DOoIFWgUMJ/bR2jyOQOL0Adabr4Bi9Jj8WzQqFWhU24NRwWkQBCFfp9h5McZNdFF
O5s0CVmdc9V1HrQkeEKu0qO6HKs55tDKH6W7v4rvOIC6/47xlCBodMUSjarvuk4v
TBVqBcrvLEBq+XKuWGohY9lUJM8n79HvjFgfy/za9TPEGriS4jtLSchfxcENA/au
ABx+gPZGedfXsZ8n50SM3brd/dmHtkZiNo8nN9NunlaPrhpalN56SN9x9RUdd3D9
jH4REDdr4bZ7O1irhDiZ4QvAWkPXzA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:49 2024 by rpki-client on console-ams.rpki-client.org