Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1EDC/54404390D06211EAA19A3411C4F9AE02/6B14AE0AA80811ED97FF083DC4F9AE02.roa
File: 6B14AE0AA80811ED97FF083DC4F9AE02.roa (raw, json)
Hash identifier: NKmLs3CNBchHT7WHlEZO0YHO3ytUpv5La4cKOYXDlys=
Subject key identifier: 48:56:FA:C3:B4:FD:BC:D8:0A:5E:82:48:F3:31:0C:A0:5B:9E:24:F9
Certificate issuer: /CN=A91D1EDC/serialNumber=5FA0CE70061E49B73C378F1C36F6959641925AED
Certificate serial: 0686
Authority key identifier: 5F:A0:CE:70:06:1E:49:B7:3C:37:8F:1C:36:F6:95:96:41:92:5A:ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X6DOcAYeSbc8N48cNvaVlkGSWu0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1EDC/54404390D06211EAA19A3411C4F9AE02/6B14AE0AA80811ED97FF083DC4F9AE02.roa
Signing time: Wed 08 Feb 2023 23:29:23 +0000
ROA not before: Wed 08 Feb 2023 23:29:23 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 45158
IP address blocks: 103.251.172.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1670 (0x686)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1EDC/serialNumber=5FA0CE70061E49B73C378F1C36F6959641925AED
Validity
Not Before: Feb 8 23:29:23 2023 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=63e43053-b66b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:8a:61:3f:50:cc:52:94:6c:84:27:37:ab:cb:
31:9f:08:c9:fa:4d:e0:8b:51:8b:b7:4c:f3:4e:91:
73:68:05:8c:3a:ab:8d:54:31:63:5d:87:c5:af:ba:
84:b6:e9:8d:b6:19:3c:d3:87:be:2f:77:da:8e:6e:
2e:21:3b:bd:f3:6c:57:23:fb:65:2a:b5:d6:cf:57:
18:d0:d9:8a:58:40:0f:a8:e6:87:f8:5e:47:b3:b8:
03:10:da:c9:82:64:cc:f5:e4:67:b8:41:6f:be:8e:
db:0a:06:1f:f2:92:95:85:78:4c:d8:ea:32:3a:f0:
08:48:ba:8a:1c:de:45:cf:cd:e0:68:a0:db:1c:dc:
81:9c:36:c1:4e:ee:06:53:d0:cf:8c:84:75:b4:10:
b0:53:a9:cc:37:26:60:b6:a9:b1:a9:79:b5:c6:9d:
eb:56:82:20:4a:0d:b0:7b:92:ea:58:a4:31:6d:b2:
9f:8f:1e:fe:10:48:49:d3:fe:c3:6d:96:75:d7:6f:
72:b3:2f:f9:10:42:e4:d5:0c:0a:32:1b:e7:ce:52:
1e:53:90:74:75:ca:de:56:22:ae:70:e1:63:d5:91:
aa:6d:19:51:1e:08:eb:59:ab:77:38:84:ba:1c:82:
29:a6:85:90:00:a9:26:49:1c:56:60:0a:25:d7:e0:
eb:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:56:FA:C3:B4:FD:BC:D8:0A:5E:82:48:F3:31:0C:A0:5B:9E:24:F9
X509v3 Authority Key Identifier:
keyid:5F:A0:CE:70:06:1E:49:B7:3C:37:8F:1C:36:F6:95:96:41:92:5A:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1EDC/54404390D06211EAA19A3411C4F9AE02/X6DOcAYeSbc8N48cNvaVlkGSWu0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X6DOcAYeSbc8N48cNvaVlkGSWu0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1EDC/54404390D06211EAA19A3411C4F9AE02/6B14AE0AA80811ED97FF083DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.251.172.0/22
Signature Algorithm: sha256WithRSAEncryption
76:e0:01:49:e2:ca:de:ac:d0:ca:25:d7:8f:59:2e:e6:d1:15:
8b:58:12:f0:a7:30:98:04:b0:1e:79:37:fa:e9:7c:72:eb:45:
d4:be:93:48:93:11:1f:14:25:d3:78:e6:46:67:dc:62:d7:f0:
6d:fb:6c:2c:6b:b9:c9:6f:12:b8:9a:7c:d0:eb:8a:cf:db:35:
80:f3:c9:57:f7:ac:d2:31:7e:50:4f:7d:c7:45:cd:9e:91:c1:
93:82:5f:4c:9d:c6:6e:f4:b5:02:f1:b3:59:62:10:bd:df:ed:
3d:e5:c3:c4:76:ff:c7:df:2d:45:42:1e:30:32:b6:db:56:b7:
6a:64:e6:1c:0e:cb:81:7e:13:b5:ae:21:17:2f:89:0a:ca:ef:
46:86:37:e3:fa:55:be:ec:16:6c:6d:86:10:e7:ad:fb:27:13:
87:5a:fc:a3:0d:6c:38:93:a0:9a:7a:6b:c9:d0:c3:3a:46:c9:
1a:7c:12:5a:71:b2:05:6d:c5:87:b5:1f:d3:23:c9:33:55:07:
a5:68:1f:ae:2a:1a:9f:0d:95:be:06:da:b3:c7:2e:9f:ce:c4:
6b:01:a7:ad:b1:3a:db:eb:f1:97:fd:59:ce:85:17:a1:20:02:
a7:28:9a:ca:42:b8:ca:84:ec:b8:ee:e9:89:70:cf:20:c7:6a:
bb:4c:93:64
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBoYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDFFREMxMTAvBgNVBAUTKDVGQTBDRTcwMDYxRTQ5QjczQzM3OEYxQzM2RjY5NTk2
NDE5MjVBRUQwHhcNMjMwMjA4MjMyOTIzWhcNMjMxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02M2U0MzA1My1iNjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6IphP1DMUpRshCc3q8sxnwjJ+k3gi1GLt0zzTpFzaAWMOquNVDFjXYfFr7qE
tumNthk804e+L3fajm4uITu982xXI/tlKrXWz1cY0NmKWEAPqOaH+F5Hs7gDENrJ
gmTM9eRnuEFvvo7bCgYf8pKVhXhM2OoyOvAISLqKHN5Fz83gaKDbHNyBnDbBTu4G
U9DPjIR1tBCwU6nMNyZgtqmxqXm1xp3rVoIgSg2we5LqWKQxbbKfjx7+EEhJ0/7D
bZZ1129ysy/5EELk1QwKMhvnzlIeU5B0dcreViKucOFj1ZGqbRlRHgjrWat3OIS6
HIIppoWQAKkmSRxWYAol1+DrZQIDAQABo4IClTCCApEwHQYDVR0OBBYEFEhW+sO0
/bzYCl6CSPMxDKBbniT5MB8GA1UdIwQYMBaAFF+gznAGHkm3PDePHDb2lZZBklrt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUVEQy81NDQwNDM5MEQw
NjIxMUVBQTE5QTM0MTFDNEY5QUUwMi9YNkRPY0FZZVNiYzhONDhjTnZhVmxrR1NX
dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1g2RE9jQVllU2JjOE40OGNOdmFWbGtHU1d1MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDFFREMvNTQ0MDQzOTBEMDYyMTFFQUExOUEzNDExQzRGOUFFMDIvNkIxNEFFMEFB
ODA4MTFFRDk3RkYwODNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJn+6wwDQYJKoZIhvcNAQELBQADggEBAHbgAUniyt6s0Mol
149ZLubRFYtYEvCnMJgEsB55N/rpfHLrRdS+k0iTER8UJdN45kZn3GLX8G37bCxr
uclvEriafNDris/bNYDzyVf3rNIxflBPfcdFzZ6RwZOCX0ydxm70tQLxs1liEL3f
7T3lw8R2/8ffLUVCHjAytttWt2pk5hwOy4F+E7WuIRcviQrK70aGN+P6Vb7sFmxt
hhDnrfsnE4da/KMNbDiToJp6a8nQwzpGyRp8ElpxsgVtxYe1H9MjyTNVB6VoH64q
Gp8Nlb4G2rPHLp/OxGsBp62xOtvr8Zf9Wc6FF6EgAqcomspCuMqE7Lju6YlwzyDH
artMk2Q=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:29 2024 by rpki-client on console-ams.rpki-client.org