Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D930D/E4D28FA4110B11EC8E66081CC4F9AE02/B6E3B7BA110D11ECB21A841CC4F9AE02.roa
File: B6E3B7BA110D11ECB21A841CC4F9AE02.roa (raw, json)
Hash identifier: JxbEsEApeNLnmo4mFmM96hgXMsx+/jM8esAo/Rw1DYs=
Subject key identifier: 42:E6:C9:E4:62:66:CB:E9:E8:6F:51:A2:CD:2E:13:F7:40:72:22:0A
Certificate issuer: /CN=A91D930D/serialNumber=E2DD62B1BD250DB6232E64F12671D0348B6C6876
Certificate serial: 0291
Authority key identifier: E2:DD:62:B1:BD:25:0D:B6:23:2E:64:F1:26:71:D0:34:8B:6C:68:76
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4t1isb0lDbYjLmTxJnHQNItsaHY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D930D/E4D28FA4110B11EC8E66081CC4F9AE02/B6E3B7BA110D11ECB21A841CC4F9AE02.roa
Signing time: Wed 03 Aug 2022 15:11:55 +0000
ROA not before: Wed 03 Aug 2022 15:11:55 +0000
ROA not after: Sat 30 Sep 2023 00:00:00 +0000
asID: 21859
IP address blocks: 103.152.58.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 657 (0x291)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D930D/serialNumber=E2DD62B1BD250DB6232E64F12671D0348B6C6876
Validity
Not Before: Aug 3 15:11:55 2022 GMT
Not After : Sep 30 00:00:00 2023 GMT
Subject: CN=62ea903a-6ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b0:5d:6e:0b:ff:8f:ed:11:d3:4e:ac:44:f7:
18:72:49:c4:65:26:3e:77:8c:2e:86:58:5b:fe:6f:
90:5f:07:a1:71:16:34:f2:1d:4f:c3:2b:cf:30:38:
d9:f1:1b:4d:6b:cb:b2:b1:83:9e:a5:2e:e3:e5:94:
99:9c:3b:2e:c2:e4:9f:11:23:07:7f:95:ef:0a:45:
37:52:35:5e:d3:38:ba:e0:f0:03:28:43:1f:85:61:
db:84:aa:94:d2:53:35:05:01:1b:ca:c9:81:85:e7:
ee:b0:6e:b4:44:75:2b:36:52:fb:04:5f:8b:d6:b5:
e4:42:fe:e2:70:d4:00:a4:95:1b:0a:2b:b8:21:01:
db:27:7f:97:07:26:b8:d1:4b:e3:75:d1:eb:92:f7:
2a:f8:0b:de:4a:d8:d0:45:9a:ba:bf:01:0f:ee:48:
8e:ea:eb:c6:54:f3:25:2d:e3:1b:4f:11:84:ce:44:
1b:69:6f:01:8a:74:25:eb:3d:97:fd:1b:63:d3:34:
d1:52:c9:c9:57:d8:fe:c4:71:52:39:8a:f9:f3:4f:
e4:8f:44:7d:34:86:59:50:f2:25:8b:68:49:aa:40:
c5:dd:89:b9:d0:ef:b7:6a:90:4e:6c:4d:77:a7:a2:
fe:0a:b1:cf:42:56:f4:fc:90:cd:d9:cf:0e:db:49:
40:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E6:C9:E4:62:66:CB:E9:E8:6F:51:A2:CD:2E:13:F7:40:72:22:0A
X509v3 Authority Key Identifier:
keyid:E2:DD:62:B1:BD:25:0D:B6:23:2E:64:F1:26:71:D0:34:8B:6C:68:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D930D/E4D28FA4110B11EC8E66081CC4F9AE02/4t1isb0lDbYjLmTxJnHQNItsaHY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4t1isb0lDbYjLmTxJnHQNItsaHY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D930D/E4D28FA4110B11EC8E66081CC4F9AE02/B6E3B7BA110D11ECB21A841CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.152.58.0/23
Signature Algorithm: sha256WithRSAEncryption
22:4d:82:04:51:b7:98:e0:05:47:a1:e5:36:d4:e4:ff:3e:f1:
72:c0:30:87:1c:05:59:bf:9a:33:df:90:67:aa:99:89:4f:fd:
0c:2e:1a:73:04:29:75:4e:ac:59:68:95:52:4e:c1:e7:a0:df:
8f:40:b5:7e:3a:76:44:1d:96:22:78:14:86:28:0e:7a:f8:02:
e6:a2:bd:93:49:77:6b:b6:58:63:dc:c1:14:8e:f8:f7:b6:3d:
0a:4b:b5:1e:82:0c:4d:fb:da:83:f2:2c:0a:a3:95:02:c8:ec:
ad:28:4a:00:5f:4f:6b:51:1a:e6:95:3a:23:19:81:21:c9:a0:
08:37:2a:45:ff:fb:79:49:5e:fe:ab:ff:ed:a9:79:b2:4f:ea:
b2:a5:d5:a4:4d:cf:a5:aa:88:e0:1f:74:a7:61:e0:e1:7e:6a:
72:82:09:52:06:78:5c:49:7a:15:e3:45:49:18:d8:68:ca:ef:
2b:c7:9b:de:32:9c:ad:90:b3:84:ce:1c:23:98:34:22:e0:8a:
d3:9a:c8:7c:a9:bf:49:8a:d6:1b:d5:ac:18:13:f6:6f:2f:22:
83:0a:f2:48:52:43:fa:c8:91:38:e6:73:3f:d8:bc:7f:5e:2c:
f6:54:a0:94:be:72:d1:5d:66:1c:b4:62:1f:55:2b:81:7d:f0:
f7:76:94:32
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICApEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDkzMEQxMTAvBgNVBAUTKEUyREQ2MkIxQkQyNTBEQjYyMzJFNjRGMTI2NzFEMDM0
OEI2QzY4NzYwHhcNMjIwODAzMTUxMTU1WhcNMjMwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02MmVhOTAzYS02Y2U4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz7Bdbgv/j+0R006sRPcYcknEZSY+d4wuhlhb/m+QXwehcRY08h1PwyvPMDjZ
8RtNa8uysYOepS7j5ZSZnDsuwuSfESMHf5XvCkU3UjVe0zi64PADKEMfhWHbhKqU
0lM1BQEbysmBhefusG60RHUrNlL7BF+L1rXkQv7icNQApJUbCiu4IQHbJ3+XBya4
0UvjddHrkvcq+AveStjQRZq6vwEP7kiO6uvGVPMlLeMbTxGEzkQbaW8BinQl6z2X
/Rtj0zTRUsnJV9j+xHFSOYr580/kj0R9NIZZUPIli2hJqkDF3Ym50O+3apBObE13
p6L+CrHPQlb0/JDN2c8O20lAyQIDAQABo4IClTCCApEwHQYDVR0OBBYEFELmyeRi
Zsvp6G9Ros0uE/dAciIKMB8GA1UdIwQYMBaAFOLdYrG9JQ22Iy5k8SZx0DSLbGh2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTMwRC9FNEQyOEZBNDEx
MEIxMUVDOEU2NjA4MUNDNEY5QUUwMi80dDFpc2IwbERiWWpMbVR4Sm5IUU5JdHNh
SFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzR0MWlzYjBsRGJZakxtVHhKbkhRTkl0c2FIWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDkzMEQvRTREMjhGQTQxMTBCMTFFQzhFNjYwODFDQzRGOUFFMDIvQjZFM0I3QkEx
MTBEMTFFQ0IyMUE4NDFDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnmDowDQYJKoZIhvcNAQELBQADggEBACJNggRRt5jgBUeh
5TbU5P8+8XLAMIccBVm/mjPfkGeqmYlP/QwuGnMEKXVOrFlolVJOweeg349AtX46
dkQdliJ4FIYoDnr4AuaivZNJd2u2WGPcwRSO+Pe2PQpLtR6CDE372oPyLAqjlQLI
7K0oSgBfT2tRGuaVOiMZgSHJoAg3KkX/+3lJXv6r/+2pebJP6rKl1aRNz6WqiOAf
dKdh4OF+anKCCVIGeFxJehXjRUkY2GjK7yvHm94ynK2Qs4TOHCOYNCLgitOayHyp
v0mK1hvVrBgT9m8vIoMK8khSQ/rIkTjmcz/YvH9eLPZUoJS+ctFdZhy0Yh9VK4F9
8Pd2lDI=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:07 2023 by rpki-client on console-ams.rpki-client.org