Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D253A/E0EB8380BE1811ED9C216D64C4F9AE02/28E92C80ED9611EDA02CDC7AC4F9AE02.roa
File: 28E92C80ED9611EDA02CDC7AC4F9AE02.roa (raw, json)
Hash identifier: VwBTTIq0BN1D7LO1bAqpVb2IaPQyu/EcF+zoEV6+rq8=
Subject key identifier: BC:57:B7:C4:12:2B:A5:D3:AA:2B:8D:20:F9:95:EB:E1:25:6A:9F:33
Certificate issuer: /CN=A91D253A/serialNumber=D73797618E855FAC96221B83719D5ADEA47F9829
Certificate serial: 39
Authority key identifier: D7:37:97:61:8E:85:5F:AC:96:22:1B:83:71:9D:5A:DE:A4:7F:98:29
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1zeXYY6FX6yWIhuDcZ1a3qR_mCk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D253A/E0EB8380BE1811ED9C216D64C4F9AE02/28E92C80ED9611EDA02CDC7AC4F9AE02.roa
Signing time: Tue 23 May 2023 08:20:08 +0000
ROA not before: Tue 23 May 2023 08:20:08 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 17941
IP address blocks: 103.54.120.0/24 maxlen: 24
103.54.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57 (0x39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D253A/serialNumber=D73797618E855FAC96221B83719D5ADEA47F9829
Validity
Not Before: May 23 08:20:08 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=646c7738-4282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1d:af:bc:47:86:33:92:2b:77:8b:12:41:d4:
9a:a2:9b:1e:49:77:b7:91:11:8b:ec:e1:2c:a8:7b:
75:bd:95:d7:92:72:4d:bd:49:bd:f7:c5:08:bf:01:
ad:ce:43:83:f5:a1:c4:3b:5f:02:3c:e1:28:6b:b9:
a9:0a:fe:9f:43:10:6c:e3:eb:0b:51:98:d7:f5:05:
da:45:7a:49:8a:82:36:e0:30:56:8f:2c:47:c1:e6:
8e:35:c4:b6:07:c9:ac:03:1f:a5:b0:dd:97:f6:87:
c5:16:38:33:68:df:60:6c:d0:2a:44:3a:60:07:02:
30:e9:fc:75:eb:b1:87:56:57:a9:22:f3:45:c8:f2:
13:2a:77:a8:e6:a0:c4:d6:fd:48:07:ea:26:a5:ae:
a5:81:42:b0:4a:01:b6:78:69:dc:32:04:5b:5b:1d:
34:2c:3c:9c:69:2e:65:92:7c:08:58:51:f1:ce:39:
a0:76:68:5c:d6:6b:bf:e1:dd:6c:b4:f7:fe:df:c4:
ef:61:c5:33:40:ba:a5:7c:44:06:62:07:9e:67:fe:
56:63:a4:51:95:51:4d:f2:0c:a7:19:e8:9d:fd:9a:
18:c4:e0:ab:cb:9b:bb:db:6e:33:d8:6a:54:26:3e:
7b:d5:8c:89:60:d6:05:e9:85:d5:fd:a9:4b:48:7d:
60:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:57:B7:C4:12:2B:A5:D3:AA:2B:8D:20:F9:95:EB:E1:25:6A:9F:33
X509v3 Authority Key Identifier:
keyid:D7:37:97:61:8E:85:5F:AC:96:22:1B:83:71:9D:5A:DE:A4:7F:98:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D253A/E0EB8380BE1811ED9C216D64C4F9AE02/1zeXYY6FX6yWIhuDcZ1a3qR_mCk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1zeXYY6FX6yWIhuDcZ1a3qR_mCk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D253A/E0EB8380BE1811ED9C216D64C4F9AE02/28E92C80ED9611EDA02CDC7AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.54.120.0/24
103.54.122.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:ad:8b:08:06:6e:ea:d2:d2:2c:15:ac:6c:b7:12:8e:43:5d:
5d:68:00:15:45:40:93:52:16:a0:6c:bf:da:1a:92:76:99:3c:
6b:fc:bd:63:ca:2b:af:7a:61:96:d0:44:a0:4e:ff:58:ee:53:
7f:33:fd:16:d9:42:7d:ed:22:ed:d4:8e:a7:53:bc:3c:50:f7:
51:7e:8a:53:d1:38:c5:12:39:61:77:bc:8f:cb:5a:cd:75:48:
bc:12:72:ee:6a:a9:4a:54:2b:a6:94:fa:fa:3f:01:1c:e1:d1:
44:a7:d1:5d:a6:ea:a6:fb:2c:2b:68:86:67:cf:50:2a:3d:19:
64:5b:66:f5:17:5a:e5:08:8d:76:4a:ab:8f:cb:b9:bf:4d:9d:
f3:50:03:a2:f7:a0:a8:02:b2:05:f8:14:e9:b1:be:d0:1a:dd:
70:0c:9c:e7:79:fc:39:0d:73:c7:4d:17:0e:c3:d4:a6:26:92:
6f:d0:6e:63:19:c3:24:af:13:fe:cc:f9:c8:cb:ef:2e:12:f6:
76:2e:06:4a:5d:9e:6d:29:92:3e:6d:ba:74:8c:a9:2c:6e:96:
85:94:e4:3c:2a:16:48:4b:29:6f:01:55:29:86:01:49:cd:15:
b7:e9:c7:21:5e:47:ee:ae:30:4b:29:77:c6:6f:d4:46:f6:ad:
5e:33:58:a5
-----BEGIN CERTIFICATE-----
MIIFdjCCBF6gAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
MjUzQTExMC8GA1UEBRMoRDczNzk3NjE4RTg1NUZBQzk2MjIxQjgzNzE5RDVBREVB
NDdGOTgyOTAeFw0yMzA1MjMwODIwMDhaFw0yNDA3MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY0NmM3NzM4LTQyODIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDCHa+8R4Yzkit3ixJB1Jqimx5Jd7eREYvs4Syoe3W9ldeSck29Sb33xQi/Aa3O
Q4P1ocQ7XwI84ShruakK/p9DEGzj6wtRmNf1BdpFekmKgjbgMFaPLEfB5o41xLYH
yawDH6Ww3Zf2h8UWODNo32Bs0CpEOmAHAjDp/HXrsYdWV6ki80XI8hMqd6jmoMTW
/UgH6ialrqWBQrBKAbZ4adwyBFtbHTQsPJxpLmWSfAhYUfHOOaB2aFzWa7/h3Wy0
9/7fxO9hxTNAuqV8RAZiB55n/lZjpFGVUU3yDKcZ6J39mhjE4KvLm7vbbjPYalQm
PnvVjIlg1gXphdX9qUtIfWA3AgMBAAGjggKbMIIClzAdBgNVHQ4EFgQUvFe3xBIr
pdOqK40g+ZXr4SVqnzMwHwYDVR0jBBgwFoAU1zeXYY6FX6yWIhuDcZ1a3qR/mCkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQyNTNBL0UwRUI4MzgwQkUx
ODExRUQ5QzIxNkQ2NEM0RjlBRTAyLzF6ZVhZWTZGWDZ5V0lodURjWjFhM3FSX21D
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvMXplWFlZNkZYNnlXSWh1RGNaMWEzcVJfbUNrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MjUzQS9FMEVCODM4MEJFMTgxMUVEOUMyMTZENjRDNEY5QUUwMi8yOEU5MkM4MEVE
OTYxMUVEQTAyQ0RDN0FDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEAGc2eAMEAGc2ejANBgkqhkiG9w0BAQsFAAOCAQEApq2LCAZu
6tLSLBWsbLcSjkNdXWgAFUVAk1IWoGy/2hqSdpk8a/y9Y8orr3phltBEoE7/WO5T
fzP9FtlCfe0i7dSOp1O8PFD3UX6KU9E4xRI5YXe8j8tazXVIvBJy7mqpSlQrppT6
+j8BHOHRRKfRXabqpvssK2iGZ89QKj0ZZFtm9Rda5QiNdkqrj8u5v02d81ADoveg
qAKyBfgU6bG+0BrdcAyc53n8OQ1zx00XDsPUpiaSb9BuYxnDJK8T/sz5yMvvLhL2
di4GSl2ebSmSPm26dIypLG6WhZTkPCoWSEspbwFVKYYBSc0Vt+nHIV5H7q4wSyl3
xm/URvatXjNYpQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:42 2024 by rpki-client on console-fra.rpki-client.org