Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C83F1/0D43B1F0AFA711EB8AF34435C4F9AE02/04568E9C592311EDB489136BC4F9AE02.roa
File: 04568E9C592311EDB489136BC4F9AE02.roa (raw, json)
Hash identifier: w8S6bAhNnZB2R5K8kWT+ERpjS6XGcIWvh2MsmUiOfQg=
Subject key identifier: DB:E3:D0:64:A4:AC:B5:24:C8:9B:DA:EF:9C:B7:E1:3A:CB:D5:93:BE
Certificate issuer: /CN=A91C83F1/serialNumber=5A5A330994A66CFA1284F32606E39E195C7CA967
Certificate serial: 0506
Authority key identifier: 5A:5A:33:09:94:A6:6C:FA:12:84:F3:26:06:E3:9E:19:5C:7C:A9:67
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WlozCZSmbPoShPMmBuOeGVx8qWc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C83F1/0D43B1F0AFA711EB8AF34435C4F9AE02/04568E9C592311EDB489136BC4F9AE02.roa
Signing time: Fri 03 Nov 2023 00:53:02 +0000
ROA not before: Fri 03 Nov 2023 00:53:02 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 51649
IP address blocks: 103.166.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1286 (0x506)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C83F1/serialNumber=5A5A330994A66CFA1284F32606E39E195C7CA967
Validity
Not Before: Nov 3 00:53:02 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=6544446e-c87b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7e:e5:dc:50:33:fb:f6:fd:14:cc:cd:a8:4a:
72:b6:4f:f0:15:e4:2b:09:45:50:0a:c9:d4:a7:6e:
46:bd:56:37:9c:5b:34:15:ed:fe:cd:16:3d:71:3e:
68:77:0f:17:97:2c:67:6c:5b:7e:76:2c:9d:31:b0:
4e:e4:e0:dd:dc:af:e7:0e:2b:b3:cf:7d:6d:87:11:
79:cf:1f:d7:09:46:45:da:92:0a:48:c7:71:a9:32:
ae:a6:ee:a1:a3:27:81:e3:ca:f0:58:1f:b8:82:28:
53:76:f5:34:0e:93:42:c4:fc:a2:70:de:16:70:02:
12:f7:6f:3e:67:06:05:a0:ff:24:46:b8:14:44:fd:
80:84:53:f3:45:6c:91:6f:dd:85:61:c1:52:99:5f:
65:06:80:92:fa:19:90:68:6b:90:a8:5c:78:d8:b1:
47:f7:5f:e7:bd:b3:44:15:c3:de:5e:56:2e:b6:4c:
27:dc:16:b4:62:69:47:e5:6a:60:f7:e9:94:ac:4d:
12:a9:bc:13:f7:15:92:e4:64:17:5d:c9:b5:cb:59:
5e:09:41:b9:18:9f:8f:58:da:3d:f7:8d:c0:c6:3c:
3e:ce:5a:d4:d2:3c:8c:f7:f7:e9:13:31:26:e0:73:
6a:ef:33:93:e9:61:a4:cf:aa:53:a9:cf:eb:14:d3:
b1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E3:D0:64:A4:AC:B5:24:C8:9B:DA:EF:9C:B7:E1:3A:CB:D5:93:BE
X509v3 Authority Key Identifier:
keyid:5A:5A:33:09:94:A6:6C:FA:12:84:F3:26:06:E3:9E:19:5C:7C:A9:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C83F1/0D43B1F0AFA711EB8AF34435C4F9AE02/WlozCZSmbPoShPMmBuOeGVx8qWc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WlozCZSmbPoShPMmBuOeGVx8qWc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C83F1/0D43B1F0AFA711EB8AF34435C4F9AE02/04568E9C592311EDB489136BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.166.247.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:74:ce:11:17:62:a1:42:b3:01:ed:d0:43:6d:25:da:cc:4c:
1a:54:a2:8d:7d:01:97:3c:8d:da:f3:c0:57:fb:e7:5f:7c:54:
ee:8f:7a:f6:a4:f6:3f:5c:68:41:0e:a2:11:ed:f6:cf:6d:db:
ae:c5:6d:17:ec:2e:9b:2a:4a:64:06:6e:e2:2e:52:88:df:8f:
9b:34:73:77:9b:c9:be:24:1e:59:2f:f7:0e:ee:68:22:44:d1:
49:e0:a7:a1:40:fe:ce:d3:5f:53:95:6f:31:60:07:9b:7e:6b:
17:0f:65:c7:90:1e:5b:55:93:ab:ff:6b:9c:73:00:2c:eb:d6:
56:54:ac:54:75:c9:36:fb:2a:4d:26:9a:ae:4e:0c:ad:77:47:
ce:f6:79:02:24:59:0a:9e:0b:fc:79:ff:e6:ca:a0:6e:18:cf:
85:af:b3:60:a7:cc:ae:65:73:17:30:89:9e:ef:52:0e:35:32:
3f:8c:10:b1:c7:d2:d8:93:c0:91:f6:f9:52:06:66:d0:4e:23:
06:fc:66:ea:3d:07:3f:6d:d7:c5:e8:e5:ee:5c:6c:be:fe:36:
a8:f5:83:86:eb:35:9d:d9:ee:0b:6b:22:44:dd:89:86:c2:7a:
34:00:e3:cf:be:4d:56:bd:42:08:02:9c:10:b5:49:39:0b:d9:
fd:aa:f9:eb
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzgzRjExMTAvBgNVBAUTKDVBNUEzMzA5OTRBNjZDRkExMjg0RjMyNjA2RTM5RTE5
NUM3Q0E5NjcwHhcNMjMxMTAzMDA1MzAyWhcNMjQwMzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTQ0NDQ2ZS1jODdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy37l3FAz+/b9FMzNqEpytk/wFeQrCUVQCsnUp25GvVY3nFs0Fe3+zRY9cT5o
dw8XlyxnbFt+diydMbBO5ODd3K/nDiuzz31thxF5zx/XCUZF2pIKSMdxqTKupu6h
oyeB48rwWB+4gihTdvU0DpNCxPyicN4WcAIS928+ZwYFoP8kRrgURP2AhFPzRWyR
b92FYcFSmV9lBoCS+hmQaGuQqFx42LFH91/nvbNEFcPeXlYutkwn3Ba0YmlH5Wpg
9+mUrE0SqbwT9xWS5GQXXcm1y1leCUG5GJ+PWNo9943Axjw+zlrU0jyM9/fpEzEm
4HNq7zOT6WGkz6pTqc/rFNOxgwIDAQABo4IClTCCApEwHQYDVR0OBBYEFNvj0GSk
rLUkyJva75y34TrL1ZO+MB8GA1UdIwQYMBaAFFpaMwmUpmz6EoTzJgbjnhlcfKln
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODNGMS8wRDQzQjFGMEFG
QTcxMUVCOEFGMzQ0MzVDNEY5QUUwMi9XbG96Q1pTbWJQb1NoUE1tQnVPZUdWeDhx
V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dsb3pDWlNtYlBvU2hQTW1CdU9lR1Z4OHFXYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzgzRjEvMEQ0M0IxRjBBRkE3MTFFQjhBRjM0NDM1QzRGOUFFMDIvMDQ1NjhFOUM1
OTIzMTFFREI0ODkxMzZCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnpvcwDQYJKoZIhvcNAQELBQADggEBAKp0zhEXYqFCswHt
0ENtJdrMTBpUoo19AZc8jdrzwFf75198VO6Pevak9j9caEEOohHt9s9t267FbRfs
LpsqSmQGbuIuUojfj5s0c3ebyb4kHlkv9w7uaCJE0Ungp6FA/s7TX1OVbzFgB5t+
axcPZceQHltVk6v/a5xzACzr1lZUrFR1yTb7Kk0mmq5ODK13R872eQIkWQqeC/x5
/+bKoG4Yz4Wvs2CnzK5lcxcwiZ7vUg41Mj+MELHH0tiTwJH2+VIGZtBOIwb8Zuo9
Bz9t18Xo5e5cbL7+Nqj1g4brNZ3Z7gtrIkTdiYbCejQA48++TVa9QggCnBC1STkL
2f2q+es=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:40 2024 by rpki-client on console-fra.rpki-client.org