Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D253A/E0EB8380BE1811ED9C216D64C4F9AE02/908E106ED75A11EDA33F380DC4F9AE02.roa
File: 908E106ED75A11EDA33F380DC4F9AE02.roa (raw, json)
Hash identifier: +HRYvmsPy8Z25/KohiJW2uVigMUZ9p2S28vh4pglTk0=
Subject key identifier: AC:38:00:A7:DD:6C:8A:D5:43:41:D7:5B:6B:4E:6E:F8:1B:49:FB:D2
Certificate issuer: /CN=A91D253A/serialNumber=D73797618E855FAC96221B83719D5ADEA47F9829
Certificate serial: 18
Authority key identifier: D7:37:97:61:8E:85:5F:AC:96:22:1B:83:71:9D:5A:DE:A4:7F:98:29
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1zeXYY6FX6yWIhuDcZ1a3qR_mCk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D253A/E0EB8380BE1811ED9C216D64C4F9AE02/908E106ED75A11EDA33F380DC4F9AE02.roa
Signing time: Mon 10 Apr 2023 04:45:49 +0000
ROA not before: Mon 10 Apr 2023 04:45:49 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 150785
IP address blocks: 103.54.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24 (0x18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D253A/serialNumber=D73797618E855FAC96221B83719D5ADEA47F9829
Validity
Not Before: Apr 10 04:45:49 2023 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=6433947d-dba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:68:2f:b9:f2:e5:6b:ec:23:dd:49:f5:33:26:
0d:bd:02:3e:8b:16:7e:5f:76:fd:a1:7b:99:91:ca:
aa:d0:1e:ce:61:dc:5c:90:1b:ba:35:22:b6:8b:83:
28:9f:f0:19:79:b3:61:c2:37:d4:b1:de:ad:05:f2:
84:1b:dc:6b:16:48:c5:07:dd:1f:f5:86:f3:75:08:
a1:69:e0:b0:86:78:91:00:8a:6c:1e:48:62:9b:9d:
b8:f7:ce:80:2c:0f:13:fa:cd:16:67:2f:99:16:d9:
fd:79:a9:70:0d:f3:f5:33:25:60:4b:e3:31:23:db:
eb:ab:9c:5a:1d:d3:69:5f:ad:b7:75:5d:e4:f0:bb:
2d:ff:63:30:b2:d2:bc:e8:ef:bc:02:09:1c:b1:8e:
c2:b9:2e:bc:1c:18:89:4f:06:68:ca:09:2d:7d:17:
d0:92:93:8c:df:72:a9:5f:4c:54:1a:62:72:b9:70:
89:5c:30:a6:a6:8b:f0:ae:67:1e:4d:84:29:96:d2:
fe:ab:46:b1:23:03:49:77:3e:b5:5f:b8:03:d3:ce:
12:1a:07:07:a0:7e:ba:d0:db:cc:88:47:ce:98:df:
d9:09:c8:0d:4f:64:3c:99:89:f7:8d:3a:3f:e0:cc:
f6:cf:a3:88:48:1d:9c:d3:be:7a:6d:af:e4:9e:9f:
ef:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:38:00:A7:DD:6C:8A:D5:43:41:D7:5B:6B:4E:6E:F8:1B:49:FB:D2
X509v3 Authority Key Identifier:
keyid:D7:37:97:61:8E:85:5F:AC:96:22:1B:83:71:9D:5A:DE:A4:7F:98:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D253A/E0EB8380BE1811ED9C216D64C4F9AE02/1zeXYY6FX6yWIhuDcZ1a3qR_mCk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1zeXYY6FX6yWIhuDcZ1a3qR_mCk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D253A/E0EB8380BE1811ED9C216D64C4F9AE02/908E106ED75A11EDA33F380DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.54.123.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:cd:68:31:a8:32:e9:72:00:a9:50:34:5d:76:db:e8:a0:39:
ca:7a:ac:c4:2f:8b:be:77:b2:6d:d6:4e:84:14:c4:44:8f:bb:
13:0e:80:15:49:a0:25:0b:6b:05:18:74:72:c3:7d:49:de:86:
73:d2:f1:9c:0d:26:ae:f2:31:d3:6c:77:5f:08:60:31:45:68:
5e:94:df:a4:4a:a4:16:31:21:d4:ba:a2:9c:bd:09:9f:3b:fc:
df:28:d0:d3:71:c4:d5:b5:54:c1:08:59:e7:0c:6c:09:a4:3a:
6b:98:4e:4e:bc:68:60:77:fa:28:c0:b4:5f:80:3c:1b:f4:96:
45:ff:5c:ac:46:49:18:43:ed:f3:b0:b1:c1:75:06:4d:69:d7:
47:2c:73:b7:47:b6:35:6a:f2:7f:75:1e:9d:47:a5:12:ae:8e:
9f:16:53:e8:2d:59:55:ce:0e:c1:04:1e:d8:1c:f2:3b:98:92:
02:7b:10:ec:3a:b1:a3:0f:7b:69:43:da:03:ec:2e:2a:2f:93:
b1:7d:f0:03:03:b7:42:ab:8a:46:80:d7:41:c4:c6:44:48:96:
32:de:1b:9e:f1:b0:25:2c:6d:56:7a:e4:b4:31:98:0e:45:3b:
81:ef:64:b9:25:12:95:eb:d5:5e:27:70:c4:6e:92:a5:1f:3c:
5b:8f:9f:76
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
MjUzQTExMC8GA1UEBRMoRDczNzk3NjE4RTg1NUZBQzk2MjIxQjgzNzE5RDVBREVB
NDdGOTgyOTAeFw0yMzA0MTAwNDQ1NDlaFw0yMzA3MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY0MzM5NDdkLWRiYTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDLaC+58uVr7CPdSfUzJg29Aj6LFn5fdv2he5mRyqrQHs5h3FyQG7o1IraLgyif
8Bl5s2HCN9Sx3q0F8oQb3GsWSMUH3R/1hvN1CKFp4LCGeJEAimweSGKbnbj3zoAs
DxP6zRZnL5kW2f15qXAN8/UzJWBL4zEj2+urnFod02lfrbd1XeTwuy3/YzCy0rzo
77wCCRyxjsK5LrwcGIlPBmjKCS19F9CSk4zfcqlfTFQaYnK5cIlcMKami/CuZx5N
hCmW0v6rRrEjA0l3PrVfuAPTzhIaBwegfrrQ28yIR86Y39kJyA1PZDyZifeNOj/g
zPbPo4hIHZzTvnptr+Sen+8lAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUrDgAp91s
itVDQddba05u+BtJ+9IwHwYDVR0jBBgwFoAU1zeXYY6FX6yWIhuDcZ1a3qR/mCkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQyNTNBL0UwRUI4MzgwQkUx
ODExRUQ5QzIxNkQ2NEM0RjlBRTAyLzF6ZVhZWTZGWDZ5V0lodURjWjFhM3FSX21D
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvMXplWFlZNkZYNnlXSWh1RGNaMWEzcVJfbUNrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MjUzQS9FMEVCODM4MEJFMTgxMUVEOUMyMTZENjRDNEY5QUUwMi85MDhFMTA2RUQ3
NUExMUVEQTMzRjM4MERDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAGc2ezANBgkqhkiG9w0BAQsFAAOCAQEAss1oMagy6XIAqVA0
XXbb6KA5ynqsxC+LvneybdZOhBTERI+7Ew6AFUmgJQtrBRh0csN9Sd6Gc9LxnA0m
rvIx02x3XwhgMUVoXpTfpEqkFjEh1LqinL0Jnzv83yjQ03HE1bVUwQhZ5wxsCaQ6
a5hOTrxoYHf6KMC0X4A8G/SWRf9crEZJGEPt87CxwXUGTWnXRyxzt0e2NWryf3Ue
nUelEq6OnxZT6C1ZVc4OwQQe2BzyO5iSAnsQ7Dqxow97aUPaA+wuKi+TsX3wAwO3
QquKRoDXQcTGREiWMt4bnvGwJSxtVnrktDGYDkU7ge9kuSUSlevVXidwxG6SpR88
W4+fdg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:42 2024 by rpki-client on console-fra.rpki-client.org