Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCAB4/6AA6872AEFE911E9B1993352C4F9AE02/F21AA120E84D11EA8B9D532CC4F9AE02.roa
File: F21AA120E84D11EA8B9D532CC4F9AE02.roa (raw, json)
Hash identifier: DCbGd6ZRwPVUzAkMS1jEim5jqjI8bCdKk46Et9oUAZI=
Subject key identifier: CF:84:78:49:63:C5:89:EB:FC:5E:1C:0F:F2:C8:7B:BB:C9:6E:5B:86
Certificate issuer: /CN=A91BCAB4/serialNumber=6760EF251C37EB0CF1EB85C8475D6AA7013B2A18
Certificate serial: 06CC
Authority key identifier: 67:60:EF:25:1C:37:EB:0C:F1:EB:85:C8:47:5D:6A:A7:01:3B:2A:18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z2DvJRw36wzx64XIR11qpwE7Khg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BCAB4/6AA6872AEFE911E9B1993352C4F9AE02/F21AA120E84D11EA8B9D532CC4F9AE02.roa
Signing time: Fri 14 May 2021 07:44:21 +0000
ROA not before: Fri 14 May 2021 07:44:21 +0000
ROA not after: Sat 30 Jul 2022 00:00:00 +0000
asID: 23860
IP address blocks: 103.215.52.0/22 maxlen: 24
144.48.224.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1740 (0x6cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BCAB4/serialNumber=6760EF251C37EB0CF1EB85C8475D6AA7013B2A18
Validity
Not Before: May 14 07:44:21 2021 GMT
Not After : Jul 30 00:00:00 2022 GMT
Subject: CN=609e2a54-a7f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f9:dd:b9:ff:27:1f:2c:27:c3:e3:b4:e8:eb:
01:58:08:86:a3:68:41:68:c5:62:f3:95:4a:d2:ce:
5e:0a:f1:40:b3:96:54:4c:52:91:e6:16:3c:74:cd:
82:e4:c3:e7:c5:6d:9f:0d:ca:8b:fa:e2:29:31:28:
33:7a:99:ee:22:45:76:03:3b:81:99:88:38:0f:23:
58:59:c7:41:4c:35:ae:a6:07:05:88:d1:ed:58:81:
25:fe:5f:4b:8e:79:6f:f6:cb:55:78:cf:13:4a:a8:
dd:2c:5b:2c:2d:1a:b5:87:13:91:2d:8d:91:e0:fa:
b6:ac:1b:48:5b:a6:d1:e2:5c:06:7c:9e:e2:44:b6:
2f:7b:1d:d5:96:e1:15:23:83:9f:d5:a0:6f:44:cd:
39:e6:d7:5b:b7:7c:95:b3:6b:e2:70:0a:96:5a:f6:
c7:e7:5d:d9:02:fa:0f:34:97:76:02:ba:d2:2c:ca:
a1:2c:b6:eb:65:2f:03:47:1e:0c:62:bb:06:3b:c9:
aa:5e:52:55:8f:9e:a1:f8:6d:b2:04:fe:99:ff:86:
81:06:60:a2:c4:e1:f7:1a:ac:e1:cb:ac:b9:3e:85:
14:8b:7a:0a:5a:24:4b:4e:27:21:58:6a:15:a1:fe:
a8:98:d1:a3:1e:1d:f8:78:49:17:0e:49:ce:75:75:
0b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:84:78:49:63:C5:89:EB:FC:5E:1C:0F:F2:C8:7B:BB:C9:6E:5B:86
X509v3 Authority Key Identifier:
keyid:67:60:EF:25:1C:37:EB:0C:F1:EB:85:C8:47:5D:6A:A7:01:3B:2A:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BCAB4/6AA6872AEFE911E9B1993352C4F9AE02/Z2DvJRw36wzx64XIR11qpwE7Khg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z2DvJRw36wzx64XIR11qpwE7Khg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCAB4/6AA6872AEFE911E9B1993352C4F9AE02/F21AA120E84D11EA8B9D532CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.215.52.0/22
144.48.224.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:f2:ff:02:99:26:2a:5e:ba:c7:93:c5:4d:8c:72:da:d3:6b:
9b:4d:f7:dd:1f:f2:b3:19:9c:27:40:a2:f4:f0:a8:77:a8:2a:
14:80:91:8c:35:bc:f7:3d:f3:7c:f6:9f:fd:09:3e:86:fe:c4:
7e:18:1e:0b:5b:ee:ff:aa:7f:20:40:08:02:ea:b9:35:d8:ea:
50:26:c3:c5:34:6e:35:36:74:0d:ea:23:08:dc:c4:c8:90:a6:
5a:7b:2a:ae:95:b3:68:cb:60:01:4d:d8:78:19:91:b4:43:36:
0d:74:bc:6f:aa:31:c7:1b:33:a9:17:6a:1c:80:10:3b:9f:77:
ff:16:c8:33:50:60:10:87:96:93:01:30:91:35:54:53:6d:18:
69:0b:2a:85:99:f4:9d:e0:76:49:49:0c:06:45:e5:2d:30:ad:
9f:b2:df:25:43:e0:48:16:f8:7c:79:89:1c:e2:49:42:82:bc:
a8:73:78:db:ff:02:c4:54:de:92:e4:75:ed:47:c6:22:ac:d5:
d2:b6:ec:28:49:46:30:e2:c0:b2:6a:fc:0c:72:be:61:6f:02:
8e:b8:ed:4a:1c:e3:6e:7f:09:8f:25:78:d2:70:f0:82:60:f2:
98:7a:e0:fd:5c:8e:86:1c:b9:46:b4:03:75:dd:5c:f9:5d:f2:
b3:ee:20:55
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICBswwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkNBQjQxMTAvBgNVBAUTKDY3NjBFRjI1MUMzN0VCMENGMUVCODVDODQ3NUQ2QUE3
MDEzQjJBMTgwHhcNMjEwNTE0MDc0NDIxWhcNMjIwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02MDllMmE1NC1hN2Y1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArPnduf8nHywnw+O06OsBWAiGo2hBaMVi85VK0s5eCvFAs5ZUTFKR5hY8dM2C
5MPnxW2fDcqL+uIpMSgzepnuIkV2AzuBmYg4DyNYWcdBTDWupgcFiNHtWIEl/l9L
jnlv9stVeM8TSqjdLFssLRq1hxORLY2R4Pq2rBtIW6bR4lwGfJ7iRLYvex3VluEV
I4Of1aBvRM055tdbt3yVs2vicAqWWvbH513ZAvoPNJd2ArrSLMqhLLbrZS8DRx4M
YrsGO8mqXlJVj56h+G2yBP6Z/4aBBmCixOH3Gqzhy6y5PoUUi3oKWiRLTichWGoV
of6omNGjHh34eEkXDknOdXUL0wIDAQABo4ICmzCCApcwHQYDVR0OBBYEFM+EeElj
xYnr/F4cD/LIe7vJbluGMB8GA1UdIwQYMBaAFGdg7yUcN+sM8euFyEddaqcBOyoY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQ0FCNC82QUE2ODcyQUVG
RTkxMUU5QjE5OTMzNTJDNEY5QUUwMi9aMkR2SlJ3MzZ3eng2NFhJUjExcXB3RTdL
aGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1oyRHZKUnczNnd6eDY0WElSMTFxcHdFN0toZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QkNBQjQvNkFBNjg3MkFFRkU5MTFFOUIxOTkzMzUyQzRGOUFFMDIvRjIxQUExMjBF
ODREMTFFQThCOUQ1MzJDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAJn1zQDBAKQMOAwDQYJKoZIhvcNAQELBQADggEBADvy/wKZ
JipeuseTxU2MctrTa5tN990f8rMZnCdAovTwqHeoKhSAkYw1vPc983z2n/0JPob+
xH4YHgtb7v+qfyBACALquTXY6lAmw8U0bjU2dA3qIwjcxMiQplp7Kq6Vs2jLYAFN
2HgZkbRDNg10vG+qMccbM6kXahyAEDufd/8WyDNQYBCHlpMBMJE1VFNtGGkLKoWZ
9J3gdklJDAZF5S0wrZ+y3yVD4EgW+Hx5iRziSUKCvKhzeNv/AsRU3pLkde1HxiKs
1dK27ChJRjDiwLJq/AxyvmFvAo647Uoc425/CY8leNJw8IJg8ph64P1cjoYcuUa0
A3XdXPld8rPuIFU=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:03 2023 by rpki-client on console-ams.rpki-client.org