Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBF15/373597AA4BF511EB82F05A7BC4F9AE02/61ACBF8C275911EC8F89CE0FC4F9AE02.roa
File: 61ACBF8C275911EC8F89CE0FC4F9AE02.roa (raw, json)
Hash identifier: OwD3OJ8ZgoTY4JfK34kIjT2eCDpJroVIXfbc84Zb+v4=
Subject key identifier: ED:26:98:FF:60:EA:F9:64:66:64:A3:25:A6:62:91:5B:9F:5D:B8:25
Certificate issuer: /CN=A91CBF15/serialNumber=58CA41BB9146721CBA9DBCC01755FFD6C36E71FA
Certificate serial: 0413
Authority key identifier: 58:CA:41:BB:91:46:72:1C:BA:9D:BC:C0:17:55:FF:D6:C3:6E:71:FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WMpBu5FGchy6nbzAF1X_1sNucfo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CBF15/373597AA4BF511EB82F05A7BC4F9AE02/61ACBF8C275911EC8F89CE0FC4F9AE02.roa
Signing time: Tue 31 May 2022 12:55:30 +0000
ROA not before: Tue 31 May 2022 12:55:30 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 134196
IP address blocks: 103.24.206.0/24 maxlen: 24
103.24.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1043 (0x413)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CBF15/serialNumber=58CA41BB9146721CBA9DBCC01755FFD6C36E71FA
Validity
Not Before: May 31 12:55:30 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=62961042-4b90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ff:40:a1:e7:ab:7e:db:fa:f8:9d:d8:1b:74:
b7:68:51:18:be:5f:ef:02:1a:40:af:db:54:31:dd:
24:35:6a:93:a2:47:8a:86:21:b9:3b:dc:47:f2:57:
f9:ef:b9:68:f8:0a:76:32:ad:1d:30:7d:e8:0f:30:
bb:82:62:31:ec:1f:e2:5a:e8:0b:ee:1a:9d:fb:84:
9c:ae:9b:c1:98:a5:99:1e:ef:62:d6:bc:fb:da:37:
9b:61:b4:4f:9c:57:04:79:d8:bb:46:25:be:e0:60:
e4:d5:9d:4a:54:4c:92:5e:6d:0e:c7:a1:f7:ad:a1:
2c:2c:b0:ed:f0:18:3a:66:9f:bb:f7:af:0c:4b:37:
3e:eb:d6:98:86:72:9b:1b:95:5b:7f:57:73:66:f8:
ae:48:d1:6f:dc:34:bc:33:60:b0:6b:dc:61:53:25:
49:d2:95:cf:98:d7:6c:b2:70:61:b9:f8:7f:b3:5c:
c5:52:9c:0b:01:e1:31:c8:73:22:30:3c:b8:c2:b3:
b3:0e:c2:f2:45:31:3c:a8:36:52:68:69:08:ba:69:
4e:6b:62:4b:c3:e1:bb:44:35:c6:a7:45:ac:f7:d0:
b2:00:dd:36:33:ef:0f:eb:86:4b:64:dc:29:38:c8:
ed:b7:79:ec:8e:85:03:85:fb:d0:53:43:22:24:a7:
07:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:26:98:FF:60:EA:F9:64:66:64:A3:25:A6:62:91:5B:9F:5D:B8:25
X509v3 Authority Key Identifier:
keyid:58:CA:41:BB:91:46:72:1C:BA:9D:BC:C0:17:55:FF:D6:C3:6E:71:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CBF15/373597AA4BF511EB82F05A7BC4F9AE02/WMpBu5FGchy6nbzAF1X_1sNucfo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WMpBu5FGchy6nbzAF1X_1sNucfo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBF15/373597AA4BF511EB82F05A7BC4F9AE02/61ACBF8C275911EC8F89CE0FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.24.206.0/23
Signature Algorithm: sha256WithRSAEncryption
45:0e:5b:20:d3:59:13:5e:1c:43:f7:d7:9a:fa:8a:db:4d:7f:
ad:2d:e8:3e:2c:38:ea:7b:56:f3:3e:d3:64:c5:95:33:09:fe:
55:0a:df:60:e2:e7:13:cc:3d:ed:53:e0:61:ef:1b:cd:ba:ed:
ac:f9:2b:5e:f5:1c:68:ca:e8:a0:3c:46:7c:c3:b6:81:cb:ef:
c1:3a:7e:1e:66:57:11:05:74:33:2a:0f:63:83:84:d0:ea:0b:
2a:c2:e1:63:29:af:b2:5e:a2:90:32:6d:7c:29:9f:c8:2f:40:
e0:83:e9:d5:b6:ba:b4:52:60:02:6a:e0:58:03:01:89:4a:b0:
b6:3e:ef:b5:4d:5b:e1:1f:66:e1:c8:40:02:a5:80:e8:25:c7:
6c:b6:6d:09:75:ff:2f:0f:d1:e5:24:ed:0e:4a:c7:c2:ec:13:
cd:47:ba:42:74:0f:7c:69:c2:26:c5:ab:ba:ac:f7:0d:ee:cf:
f0:27:ee:e6:5d:49:7c:51:4b:a8:b0:aa:e7:28:e9:26:c4:4f:
0e:6e:1e:28:ad:36:4b:b0:7e:68:87:71:8e:67:4b:d0:63:0f:
bf:ca:12:44:a9:40:9f:d5:74:f2:1a:89:13:a1:b4:d3:f1:cf:
1f:3b:1d:30:26:97:ad:3a:07:53:69:c0:c9:da:bc:70:e4:30:
d4:ff:83:f5
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBBMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0JGMTUxMTAvBgNVBAUTKDU4Q0E0MUJCOTE0NjcyMUNCQTlEQkNDMDE3NTVGRkQ2
QzM2RTcxRkEwHhcNMjIwNTMxMTI1NTMwWhcNMjMwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02Mjk2MTA0Mi00YjkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv/9Aoeerftv6+J3YG3S3aFEYvl/vAhpAr9tUMd0kNWqTokeKhiG5O9xH8lf5
77lo+Ap2Mq0dMH3oDzC7gmIx7B/iWugL7hqd+4ScrpvBmKWZHu9i1rz72jebYbRP
nFcEedi7RiW+4GDk1Z1KVEySXm0Ox6H3raEsLLDt8Bg6Zp+7968MSzc+69aYhnKb
G5Vbf1dzZviuSNFv3DS8M2Cwa9xhUyVJ0pXPmNdssnBhufh/s1zFUpwLAeExyHMi
MDy4wrOzDsLyRTE8qDZSaGkIumlOa2JLw+G7RDXGp0Ws99CyAN02M+8P64ZLZNwp
OMjtt3nsjoUDhfvQU0MiJKcHyQIDAQABo4IClTCCApEwHQYDVR0OBBYEFO0mmP9g
6vlkZmSjJaZikVufXbglMB8GA1UdIwQYMBaAFFjKQbuRRnIcup28wBdV/9bDbnH6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkYxNS8zNzM1OTdBQTRC
RjUxMUVCODJGMDVBN0JDNEY5QUUwMi9XTXBCdTVGR2NoeTZuYnpBRjFYXzFzTnVj
Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dNcEJ1NUZHY2h5Nm5iekFGMVhfMXNOdWNmby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0JGMTUvMzczNTk3QUE0QkY1MTFFQjgyRjA1QTdCQzRGOUFFMDIvNjFBQ0JGOEMy
NzU5MTFFQzhGODlDRTBGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnGM4wDQYJKoZIhvcNAQELBQADggEBAEUOWyDTWRNeHEP3
15r6ittNf60t6D4sOOp7VvM+02TFlTMJ/lUK32Di5xPMPe1T4GHvG8267az5K171
HGjK6KA8RnzDtoHL78E6fh5mVxEFdDMqD2ODhNDqCyrC4WMpr7JeopAybXwpn8gv
QOCD6dW2urRSYAJq4FgDAYlKsLY+77VNW+EfZuHIQAKlgOglx2y2bQl1/y8P0eUk
7Q5Kx8LsE81HukJ0D3xpwibFq7qs9w3uz/An7uZdSXxRS6iwquco6SbETw5uHiit
NkuwfmiHcY5nS9BjD7/KEkSpQJ/VdPIaiROhtNPxzx87HTAml606B1NpwMnavHDk
MNT/g/U=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:41 2024 by rpki-client on console-fra.rpki-client.org