Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDE77/3A66965C1D8411E291A515DA08B02CD2/30BFF59EC98E11E583B5610BC4F9AE02.roa
File: 30BFF59EC98E11E583B5610BC4F9AE02.roa (raw, json)
Hash identifier: 19UA6F/ANfWoORVDR+n5tqJOPyooVuGbcXwFcmNPPkI=
Subject key identifier: 15:FC:5C:06:1A:46:F4:3E:88:F3:76:29:12:3F:B9:86:C1:D8:9E:34
Certificate issuer: /CN=A91BDE77/serialNumber=9C0BD53F9C4B7C8E3C1C0C7F2BD3FD17CE2C2FE2
Certificate serial: 333A
Authority key identifier: 9C:0B:D5:3F:9C:4B:7C:8E:3C:1C:0C:7F:2B:D3:FD:17:CE:2C:2F:E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAvVP5xLfI48HAx_K9P9F84sL-I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BDE77/3A66965C1D8411E291A515DA08B02CD2/30BFF59EC98E11E583B5610BC4F9AE02.roa
Signing time: Tue 16 Aug 2022 02:30:30 +0000
ROA not before: Tue 16 Aug 2022 02:30:30 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 65530
IP address blocks: 202.188.95.0/24 maxlen: 24
202.188.100.0/24 maxlen: 24
2001:e68:2001:1::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13114 (0x333a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDE77/serialNumber=9C0BD53F9C4B7C8E3C1C0C7F2BD3FD17CE2C2FE2
Validity
Not Before: Aug 16 02:30:30 2022 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=62fb0145-d12e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5f:39:0d:b8:51:67:d3:5c:1d:a0:73:5a:e6:
e4:ed:77:02:c7:4e:47:1f:71:ed:18:b5:4a:e5:dc:
e3:c9:1e:61:e7:0d:ac:fb:e6:3c:95:3f:0d:da:b7:
ba:60:59:77:9a:35:9c:d6:ae:1f:33:c0:cb:22:75:
5d:9f:e3:ff:07:be:dd:fe:ac:10:46:09:c0:ee:88:
d8:4c:3e:14:96:2b:86:e9:7f:5e:ce:38:d9:f5:0a:
30:42:03:fd:16:e3:1d:5f:f8:9b:93:77:9f:02:ff:
96:15:81:9b:43:b6:2f:14:1e:48:88:3d:66:4f:36:
b7:57:24:84:e1:ed:c4:5d:03:c3:59:93:67:41:83:
77:2b:12:a8:40:8e:ff:0f:ca:c8:54:8e:b8:4e:65:
44:c8:b8:97:5c:e7:a6:7a:d6:1d:2c:40:8d:8b:4c:
c4:49:f5:a8:4a:87:1a:9e:ba:a1:c1:8d:19:75:11:
cf:32:00:a4:ea:0b:55:06:7c:ff:14:0c:dd:48:11:
ba:f3:6c:4f:ab:2c:a7:38:00:f1:34:91:16:a2:ee:
21:06:d8:dd:42:22:75:5d:cf:96:b4:4c:40:78:dc:
8c:21:e1:09:fc:f3:f3:43:80:68:ab:0f:aa:31:7c:
7d:7f:c1:4d:9d:f2:d3:e3:f7:6d:b3:76:ac:52:15:
07:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:FC:5C:06:1A:46:F4:3E:88:F3:76:29:12:3F:B9:86:C1:D8:9E:34
X509v3 Authority Key Identifier:
keyid:9C:0B:D5:3F:9C:4B:7C:8E:3C:1C:0C:7F:2B:D3:FD:17:CE:2C:2F:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BDE77/3A66965C1D8411E291A515DA08B02CD2/nAvVP5xLfI48HAx_K9P9F84sL-I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAvVP5xLfI48HAx_K9P9F84sL-I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDE77/3A66965C1D8411E291A515DA08B02CD2/30BFF59EC98E11E583B5610BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.188.95.0/24
202.188.100.0/24
IPv6:
2001:e68:2001:1::/64
Signature Algorithm: sha256WithRSAEncryption
5a:f0:2a:4c:d1:8b:7a:02:84:f3:9f:c8:e3:51:40:18:f6:6d:
8c:79:01:c7:0e:23:fa:37:71:ae:1a:5c:b2:c1:9c:91:73:9c:
de:77:37:4a:f4:76:8d:6b:16:2f:c1:e4:4d:26:92:27:af:00:
02:5e:c4:bf:87:ec:12:8a:0f:8e:a4:48:ec:f9:b6:96:73:a9:
f0:bc:75:e5:0d:47:9b:e4:cf:cf:80:3c:b0:cd:ce:ce:07:a9:
58:a0:0d:0b:c1:00:6d:fc:68:b8:3a:ab:55:60:ff:b7:11:61:
f9:b4:f2:a1:14:84:a3:b0:a5:cb:e1:03:cf:3e:58:c9:a3:89:
86:91:41:40:03:f6:b7:8a:06:7d:91:1c:86:f3:6f:d5:5e:d8:
56:ad:22:97:1e:de:6b:2c:79:4f:3a:fd:e6:f8:5d:ee:ab:6a:
23:14:7f:d4:ae:1a:e3:ce:29:21:1c:af:0e:4a:75:6c:0e:f7:
7e:7e:ed:05:bf:8a:52:e5:24:a0:11:43:09:6a:35:e1:f4:79:
d6:1f:c2:d2:b7:27:93:6e:a3:87:85:73:bf:90:cb:c7:15:ba:
50:d5:2d:4c:ef:3a:4e:b4:c9:a5:18:34:8c:58:d4:7d:8d:34:
1b:e2:9d:d4:4b:6a:87:f5:6f:64:d4:90:33:6c:c1:cb:6f:7c:
7b:6c:41:28
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgICMzowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkRFNzcxMTAvBgNVBAUTKDlDMEJENTNGOUM0QjdDOEUzQzFDMEM3RjJCRDNGRDE3
Q0UyQzJGRTIwHhcNMjIwODE2MDIzMDMwWhcNMjMxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MmZiMDE0NS1kMTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwV85DbhRZ9NcHaBzWubk7XcCx05HH3HtGLVK5dzjyR5h5w2s++Y8lT8N2re6
YFl3mjWc1q4fM8DLInVdn+P/B77d/qwQRgnA7ojYTD4UliuG6X9ezjjZ9QowQgP9
FuMdX/ibk3efAv+WFYGbQ7YvFB5IiD1mTza3VySE4e3EXQPDWZNnQYN3KxKoQI7/
D8rIVI64TmVEyLiXXOemetYdLECNi0zESfWoSocanrqhwY0ZdRHPMgCk6gtVBnz/
FAzdSBG682xPqyynOADxNJEWou4hBtjdQiJ1Xc+WtExAeNyMIeEJ/PPzQ4Boqw+q
MXx9f8FNnfLT4/dts3asUhUHzwIDAQABo4ICrjCCAqowHQYDVR0OBBYEFBX8XAYa
RvQ+iPN2KRI/uYbB2J40MB8GA1UdIwQYMBaAFJwL1T+cS3yOPBwMfyvT/RfOLC/i
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREU3Ny8zQTY2OTY1QzFE
ODQxMUUyOTFBNTE1REEwOEIwMkNEMi9uQXZWUDV4TGZJNDhIQXhfSzlQOUY4NHNM
LUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25BdlZQNXhMZkk0OEhBeF9LOVA5Rjg0c0wtSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QkRFNzcvM0E2Njk2NUMxRDg0MTFFMjkxQTUxNURBMDhCMDJDRDIvMzBCRkY1OUVD
OThFMTFFNTgzQjU2MTBCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOAYIKwYBBQUHAQcBAf8E
KTAnMBIEAgABMAwDBADKvF8DBADKvGQwEQQCAAIwCwMJACABDmggAQABMA0GCSqG
SIb3DQEBCwUAA4IBAQBa8CpM0Yt6AoTzn8jjUUAY9m2MeQHHDiP6N3GuGlyywZyR
c5zedzdK9HaNaxYvweRNJpInrwACXsS/h+wSig+OpEjs+baWc6nwvHXlDUeb5M/P
gDywzc7OB6lYoA0LwQBt/Gi4OqtVYP+3EWH5tPKhFISjsKXL4QPPPljJo4mGkUFA
A/a3igZ9kRyG82/VXthWrSKXHt5rLHlPOv3m+F3uq2ojFH/UrhrjzikhHK8OSnVs
Dvd+fu0Fv4pS5SSgEUMJajXh9HnWH8LStyeTbqOHhXO/kMvHFbpQ1S1M7zpOtMml
GDSMWNR9jTQb4p3US2qH9W9k1JAzbMHLb3x7bEEo
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:39 2024 by rpki-client on console-fra.rpki-client.org