Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/BB3ED34691D911EDA165D56DC4F9AE02.roa
File: BB3ED34691D911EDA165D56DC4F9AE02.roa (raw, json)
Hash identifier: BbbjZ7l0+JutVlRbt8rKDSklPMgl8gxLHAWdY55Wbjc=
Subject key identifier: B0:CA:17:9B:7B:D8:E9:31:D8:31:EF:93:44:9F:0F:6D:98:B0:D0:2A
Certificate issuer: /CN=A91A6131/serialNumber=7B059CCC60BAAAFCF6F141216EFDD68E870C2551
Certificate serial: 05E1
Authority key identifier: 7B:05:9C:CC:60:BA:AA:FC:F6:F1:41:21:6E:FD:D6:8E:87:0C:25:51
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewWczGC6qvz28UEhbv3WjocMJVE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/BB3ED34691D911EDA165D56DC4F9AE02.roa
Signing time: Wed 11 Jan 2023 17:59:46 +0000
ROA not before: Wed 11 Jan 2023 17:59:46 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 61138
IP address blocks: 43.255.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1505 (0x5e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6131/serialNumber=7B059CCC60BAAAFCF6F141216EFDD68E870C2551
Validity
Not Before: Jan 11 17:59:46 2023 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=63bef911-95c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9d:69:e5:05:b7:a4:13:a8:90:75:20:f2:8f:
86:5a:cd:bd:76:80:29:cc:30:3d:44:4e:ee:09:84:
0b:e4:1a:7e:eb:f3:35:ff:0b:28:97:ee:d6:2f:6e:
9f:69:f5:9a:b0:ac:2b:fc:08:52:d1:33:a2:0d:75:
e1:ad:d6:04:bc:ea:05:27:67:c0:26:f2:b8:8e:79:
22:7c:e3:13:d0:55:e1:1f:30:7a:eb:e0:e7:f5:96:
b7:95:3d:40:25:d9:69:d8:d8:9b:1e:bf:fb:84:c7:
00:38:d0:60:21:4f:db:62:00:2d:db:ed:d4:42:f4:
f7:3e:fc:97:b6:9b:60:be:90:59:89:8e:21:02:64:
0e:a2:a0:52:de:fa:43:9e:6a:6e:2b:fc:b2:7a:be:
ec:33:6e:88:c7:8f:93:f7:01:53:fd:a5:b8:c6:e4:
bd:64:14:a1:9c:4e:95:8d:f2:71:cf:a4:a8:3f:4f:
ff:42:7d:02:d5:5e:2b:08:7c:93:97:dd:42:df:37:
6c:29:c2:1a:81:1d:31:fc:ca:55:1e:68:0c:3c:6f:
d2:66:56:46:de:ad:1c:10:b1:9d:0d:dd:29:8d:67:
94:2a:ef:c7:de:0d:29:b5:76:ec:45:c4:58:65:3d:
37:f0:e0:c4:8a:a0:1c:82:da:57:6c:a3:d3:07:1d:
f3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:CA:17:9B:7B:D8:E9:31:D8:31:EF:93:44:9F:0F:6D:98:B0:D0:2A
X509v3 Authority Key Identifier:
keyid:7B:05:9C:CC:60:BA:AA:FC:F6:F1:41:21:6E:FD:D6:8E:87:0C:25:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/ewWczGC6qvz28UEhbv3WjocMJVE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewWczGC6qvz28UEhbv3WjocMJVE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/BB3ED34691D911EDA165D56DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.255.83.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:80:57:42:a2:be:3a:86:0d:54:75:be:7c:4a:63:fd:ec:2a:
72:42:e0:d7:c3:20:83:e0:6f:05:7e:79:e9:15:8f:8f:77:d9:
39:61:54:41:ab:14:5a:82:84:07:de:c1:9d:32:c4:05:02:2d:
d2:1a:24:be:e6:f1:de:a3:9a:07:e0:99:5d:58:9d:cd:58:16:
3e:da:99:e5:11:bb:ee:b2:96:9b:94:eb:3e:7a:b4:d4:bb:96:
08:bf:f5:b9:b3:22:00:11:1b:23:14:4b:b9:75:76:e2:45:89:
9f:91:3e:74:af:da:b2:9f:84:40:ad:a6:87:ec:f5:40:50:64:
33:4b:24:4d:66:c7:cb:7d:73:1c:6f:20:e0:5b:93:c2:57:24:
80:1c:f7:70:d6:8b:66:2e:e7:4a:45:d0:90:cc:23:e6:45:9b:
a0:f4:73:79:3b:8f:26:93:cf:57:de:de:9c:c1:76:e9:a9:d9:
ac:c5:d1:7c:50:f0:26:86:70:a3:8f:a4:d8:f2:d9:e1:b6:42:
27:dd:fb:4a:3c:0c:53:cc:98:00:76:50:49:40:7c:93:5a:1d:
e2:b9:72:a5:fb:d4:8e:a3:1a:af:f4:7d:02:82:f8:75:dd:87:
c4:ea:84:82:72:60:89:70:a2:1b:32:1a:af:f5:5f:59:f1:9a:
ab:e8:f1:57
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBeEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTYxMzExMTAvBgNVBAUTKDdCMDU5Q0NDNjBCQUFBRkNGNkYxNDEyMTZFRkRENjhF
ODcwQzI1NTEwHhcNMjMwMTExMTc1OTQ2WhcNMjMwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02M2JlZjkxMS05NWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1p1p5QW3pBOokHUg8o+GWs29doApzDA9RE7uCYQL5Bp+6/M1/wsol+7WL26f
afWasKwr/AhS0TOiDXXhrdYEvOoFJ2fAJvK4jnkifOMT0FXhHzB66+Dn9Za3lT1A
Jdlp2NibHr/7hMcAONBgIU/bYgAt2+3UQvT3PvyXtptgvpBZiY4hAmQOoqBS3vpD
nmpuK/yyer7sM26Ix4+T9wFT/aW4xuS9ZBShnE6VjfJxz6SoP0//Qn0C1V4rCHyT
l91C3zdsKcIagR0x/MpVHmgMPG/SZlZG3q0cELGdDd0pjWeUKu/H3g0ptXbsRcRY
ZT038ODEiqAcgtpXbKPTBx3zMwIDAQABo4IClTCCApEwHQYDVR0OBBYEFLDKF5t7
2Okx2DHvk0SfD22YsNAqMB8GA1UdIwQYMBaAFHsFnMxguqr89vFBIW791o6HDCVR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjEzMS8wRkNCM0QzODI4
RDYxMUVCODRFNEM5M0JDNEY5QUUwMi9ld1djekdDNnF2ejI4VUVoYnYzV2pvY01K
VkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2V3V2N6R0M2cXZ6MjhVRWhidjNXam9jTUpWRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTYxMzEvMEZDQjNEMzgyOEQ2MTFFQjg0RTRDOTNCQzRGOUFFMDIvQkIzRUQzNDY5
MUQ5MTFFREExNjVENTZEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAAr/1MwDQYJKoZIhvcNAQELBQADggEBAH+AV0KivjqGDVR1
vnxKY/3sKnJC4NfDIIPgbwV+eekVj4932TlhVEGrFFqChAfewZ0yxAUCLdIaJL7m
8d6jmgfgmV1Ync1YFj7ameURu+6ylpuU6z56tNS7lgi/9bmzIgARGyMUS7l1duJF
iZ+RPnSv2rKfhECtpofs9UBQZDNLJE1mx8t9cxxvIOBbk8JXJIAc93DWi2Yu50pF
0JDMI+ZFm6D0c3k7jyaTz1fe3pzBdump2azF0XxQ8CaGcKOPpNjy2eG2Qifd+0o8
DFPMmAB2UElAfJNaHeK5cqX71I6jGq/0fQKC+HXdh8TqhIJyYIlwohsyGq/1X1nx
mqvo8Vc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:54 2024 by rpki-client on console-ams.rpki-client.org