Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDE77/3A66965C1D8411E291A515DA08B02CD2/2BF0CE58C98E11E583B5610BC4F9AE02.roa
File: 2BF0CE58C98E11E583B5610BC4F9AE02.roa (raw, json)
Hash identifier: eTnsmRJ47OW94l+NF+6eSiiDxRsYfx4c6jX6KZC40I4=
Subject key identifier: 1F:09:6E:CD:51:8E:5A:68:E4:39:A5:2B:C7:0F:78:3D:2B:7C:6F:BB
Certificate issuer: /CN=A91BDE77/serialNumber=9C0BD53F9C4B7C8E3C1C0C7F2BD3FD17CE2C2FE2
Certificate serial: 3333
Authority key identifier: 9C:0B:D5:3F:9C:4B:7C:8E:3C:1C:0C:7F:2B:D3:FD:17:CE:2C:2F:E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAvVP5xLfI48HAx_K9P9F84sL-I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BDE77/3A66965C1D8411E291A515DA08B02CD2/2BF0CE58C98E11E583B5610BC4F9AE02.roa
Signing time: Tue 16 Aug 2022 02:30:22 +0000
ROA not before: Tue 16 Aug 2022 02:30:22 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 65001
IP address blocks: 202.188.30.0/24 maxlen: 24
202.188.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13107 (0x3333)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDE77/serialNumber=9C0BD53F9C4B7C8E3C1C0C7F2BD3FD17CE2C2FE2
Validity
Not Before: Aug 16 02:30:22 2022 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=62fb013d-c17f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bb:d5:f4:fc:fd:3b:5b:b8:0d:c1:79:33:cf:
c2:3a:21:c2:4d:fd:a8:0e:1c:97:86:38:55:8c:92:
d8:32:f4:d1:87:6e:a7:f1:b1:cb:fb:24:78:03:2e:
88:6f:e8:3d:29:10:88:57:89:f7:27:cc:fc:dc:cc:
23:30:13:15:c2:82:6e:0f:34:c0:82:1d:6d:f5:42:
8e:e7:7c:3f:7d:09:3d:55:e3:10:59:36:27:8f:15:
7a:d5:f0:6f:a7:12:a4:95:ca:0a:25:6c:aa:c0:ec:
b1:ec:fb:7f:05:a5:b2:3c:2d:e1:21:ad:62:6f:e4:
98:72:24:d3:07:7d:59:0d:20:2f:af:a3:b5:dc:02:
db:27:56:a3:2e:90:51:82:55:91:fb:32:4a:b1:3c:
16:71:0d:8d:08:ba:30:01:b0:20:f9:30:6e:4b:50:
66:e9:b5:28:91:5f:19:d3:06:8d:6f:94:6f:97:c1:
ad:30:15:66:71:06:cf:bb:dd:84:ba:60:e3:74:9e:
2b:19:37:d9:40:63:ff:ae:88:9f:33:d5:3b:6a:6a:
2f:2b:c3:37:4f:b2:a3:8d:12:a0:76:a9:3e:79:ed:
51:18:a5:ee:16:ea:aa:c4:84:2e:8d:32:15:e5:91:
95:58:75:9e:ee:34:8b:fe:36:02:92:d4:30:2e:f8:
2b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:09:6E:CD:51:8E:5A:68:E4:39:A5:2B:C7:0F:78:3D:2B:7C:6F:BB
X509v3 Authority Key Identifier:
keyid:9C:0B:D5:3F:9C:4B:7C:8E:3C:1C:0C:7F:2B:D3:FD:17:CE:2C:2F:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BDE77/3A66965C1D8411E291A515DA08B02CD2/nAvVP5xLfI48HAx_K9P9F84sL-I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAvVP5xLfI48HAx_K9P9F84sL-I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDE77/3A66965C1D8411E291A515DA08B02CD2/2BF0CE58C98E11E583B5610BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.188.30.0/24
202.188.245.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:d8:fd:1c:15:fb:a9:a6:57:2e:43:28:71:dc:16:ab:d7:a9:
39:b3:90:b5:49:31:5d:0b:67:6f:59:ea:96:1f:14:bf:e2:99:
cf:44:c1:6c:1a:5b:3c:b1:3b:b3:33:21:e4:36:41:a7:47:ad:
49:76:1f:9c:a1:b8:6b:08:75:f3:41:c7:50:4d:5b:6c:00:e6:
ad:04:2b:45:6c:f8:be:60:91:46:b0:55:39:a7:a8:f8:75:6e:
cd:0a:57:84:86:74:4d:1c:f1:d2:25:dc:f9:cf:d8:28:74:5b:
e1:19:9b:4d:0e:4a:b5:5c:48:bf:07:91:31:b2:6f:0c:ec:5a:
d5:a5:49:88:8a:85:73:ee:a1:3c:95:10:16:c1:65:18:3d:97:
45:0b:8c:60:b2:11:a4:5e:9c:47:4f:6e:30:7b:86:68:f3:4b:
71:d5:23:ef:63:db:bc:f3:e8:3b:d5:e7:c1:28:14:6c:67:bc:
0a:c5:09:73:e3:55:73:7a:cd:01:75:99:68:77:de:c6:44:28:
cc:16:df:e1:a4:04:f2:f9:9e:64:2d:92:51:b1:7a:ac:65:75:
cf:88:9d:a9:a4:6a:d2:30:97:80:5e:cc:ea:93:cb:28:84:16:
c1:4f:47:ce:1f:ad:7f:c9:c0:91:5e:87:a2:f9:52:83:1a:67:
4c:cc:7c:09
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICMzMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkRFNzcxMTAvBgNVBAUTKDlDMEJENTNGOUM0QjdDOEUzQzFDMEM3RjJCRDNGRDE3
Q0UyQzJGRTIwHhcNMjIwODE2MDIzMDIyWhcNMjMxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MmZiMDEzZC1jMTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu7vV9Pz9O1u4DcF5M8/COiHCTf2oDhyXhjhVjJLYMvTRh26n8bHL+yR4Ay6I
b+g9KRCIV4n3J8z83MwjMBMVwoJuDzTAgh1t9UKO53w/fQk9VeMQWTYnjxV61fBv
pxKklcoKJWyqwOyx7Pt/BaWyPC3hIa1ib+SYciTTB31ZDSAvr6O13ALbJ1ajLpBR
glWR+zJKsTwWcQ2NCLowAbAg+TBuS1Bm6bUokV8Z0waNb5Rvl8GtMBVmcQbPu92E
umDjdJ4rGTfZQGP/roifM9U7amovK8M3T7KjjRKgdqk+ee1RGKXuFuqqxIQujTIV
5ZGVWHWe7jSL/jYCktQwLvgrPwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFB8Jbs1R
jlpo5DmlK8cPeD0rfG+7MB8GA1UdIwQYMBaAFJwL1T+cS3yOPBwMfyvT/RfOLC/i
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREU3Ny8zQTY2OTY1QzFE
ODQxMUUyOTFBNTE1REEwOEIwMkNEMi9uQXZWUDV4TGZJNDhIQXhfSzlQOUY4NHNM
LUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25BdlZQNXhMZkk0OEhBeF9LOVA5Rjg0c0wtSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QkRFNzcvM0E2Njk2NUMxRDg0MTFFMjkxQTUxNURBMDhCMDJDRDIvMkJGMENFNThD
OThFMTFFNTgzQjU2MTBCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBADKvB4DBADKvPUwDQYJKoZIhvcNAQELBQADggEBADvY/RwV
+6mmVy5DKHHcFqvXqTmzkLVJMV0LZ29Z6pYfFL/imc9EwWwaWzyxO7MzIeQ2QadH
rUl2H5yhuGsIdfNBx1BNW2wA5q0EK0Vs+L5gkUawVTmnqPh1bs0KV4SGdE0c8dIl
3PnP2Ch0W+EZm00OSrVcSL8HkTGybwzsWtWlSYiKhXPuoTyVEBbBZRg9l0ULjGCy
EaRenEdPbjB7hmjzS3HVI+9j27zz6DvV58EoFGxnvArFCXPjVXN6zQF1mWh33sZE
KMwW3+GkBPL5nmQtklGxeqxldc+InamkatIwl4BezOqTyyiEFsFPR84frX/JwJFe
h6L5UoMaZ0zMfAk=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:06 2023 by rpki-client on console-fra.rpki-client.org