Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB917/486E04087A3011EB9C2FA91AC4F9AE02/64344ED07A3111EB9375FE1AC4F9AE02.roa
File: 64344ED07A3111EB9375FE1AC4F9AE02.roa (raw, json)
Hash identifier: CJnmuHe1TxJC/r/2Jq7bamtW4Caedq2OIv9h1CszVDk=
Subject key identifier: EB:37:0A:89:89:B9:D0:C6:6D:46:DB:15:EB:A7:23:A3:76:8C:BF:24
Certificate issuer: /CN=A91DB917/serialNumber=D4E167FF81565CC5ED32337F065CA7EB4A68867B
Certificate serial: 04CD
Authority key identifier: D4:E1:67:FF:81:56:5C:C5:ED:32:33:7F:06:5C:A7:EB:4A:68:86:7B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1OFn_4FWXMXtMjN_Blyn60pohns.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB917/486E04087A3011EB9C2FA91AC4F9AE02/64344ED07A3111EB9375FE1AC4F9AE02.roa
Signing time: Fri 17 Feb 2023 01:21:26 +0000
ROA not before: Fri 17 Feb 2023 01:21:26 +0000
ROA not after: Wed 01 May 2024 00:00:00 +0000
asID: 58561
IP address blocks: 103.247.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1229 (0x4cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB917/serialNumber=D4E167FF81565CC5ED32337F065CA7EB4A68867B
Validity
Not Before: Feb 17 01:21:26 2023 GMT
Not After : May 1 00:00:00 2024 GMT
Subject: CN=63eed696-eea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ad:e7:b7:99:1a:73:47:cc:e6:1d:34:70:d4:
b4:b1:a3:fc:29:75:07:49:f7:84:9b:ff:3f:0f:21:
33:e5:6a:98:7e:c0:2b:29:71:2e:8a:d6:7f:9f:da:
c8:7f:43:c3:24:9b:ae:60:d6:8d:bf:ab:4a:df:fe:
e2:9e:d9:65:5c:1f:af:86:f1:fb:47:83:9f:1d:51:
08:60:31:80:14:51:0c:eb:54:34:5a:dc:52:26:cf:
43:79:bf:15:4c:05:41:b4:a7:02:e7:5b:3f:06:cb:
bb:ab:87:6d:54:16:6e:4a:56:21:c6:74:2f:2c:06:
01:02:0c:7c:18:17:11:a7:d5:14:20:1f:1a:b5:3c:
ed:c5:00:58:f9:db:aa:23:0d:c7:8a:5a:d8:f4:89:
32:2c:83:ac:62:4d:44:c9:82:26:00:e2:69:5a:09:
b2:39:90:63:ea:2b:d8:fb:df:4a:fa:bb:20:47:32:
8d:ec:c4:08:97:45:15:32:e3:43:b3:51:71:a1:e1:
61:79:e5:ac:8c:07:70:8f:7d:54:08:88:04:8d:5d:
11:82:66:d7:b0:59:9e:eb:c6:d3:39:ce:42:a9:90:
b3:f2:33:e9:2f:bb:45:23:09:c8:df:1f:d6:ee:1a:
0c:31:a4:34:80:be:c5:0f:a6:e4:79:d1:5b:f3:de:
c2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:37:0A:89:89:B9:D0:C6:6D:46:DB:15:EB:A7:23:A3:76:8C:BF:24
X509v3 Authority Key Identifier:
keyid:D4:E1:67:FF:81:56:5C:C5:ED:32:33:7F:06:5C:A7:EB:4A:68:86:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB917/486E04087A3011EB9C2FA91AC4F9AE02/1OFn_4FWXMXtMjN_Blyn60pohns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1OFn_4FWXMXtMjN_Blyn60pohns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB917/486E04087A3011EB9C2FA91AC4F9AE02/64344ED07A3111EB9375FE1AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.247.117.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:f5:7b:9d:b6:4e:a2:37:53:c0:00:ee:5b:eb:6a:7a:9e:0c:
b5:02:e9:40:f4:66:df:a1:85:08:93:cc:e7:84:73:d2:2b:3b:
b5:dd:66:b8:06:8c:b9:01:47:af:9d:f3:bb:5d:d0:ed:b0:58:
fe:0e:a3:29:90:04:68:1a:2a:62:63:fc:03:e2:4b:bc:33:aa:
82:86:d9:d3:17:dc:e2:af:1f:85:b8:48:66:0d:ff:64:a0:7a:
d1:9a:92:d6:16:df:f0:73:d5:1c:ae:d5:83:e6:c1:66:83:b6:
5a:13:15:9d:01:14:75:1a:11:5e:35:7e:1c:52:03:f6:22:be:
e6:fa:00:f2:ff:89:39:0d:17:5e:e4:4a:20:b2:3b:3d:44:ae:
53:78:43:09:a6:c2:61:b3:58:7d:e4:c4:a1:a9:c8:08:9f:cb:
66:d0:43:0f:45:32:3b:4d:e0:af:36:a6:7f:40:13:38:64:06:
f4:51:db:b9:24:a5:2c:8c:3d:98:a7:42:3e:b5:0f:19:4c:23:
2d:09:b1:3c:5a:1f:f1:ff:2a:64:f2:b8:63:b4:0b:89:03:f2:
92:5a:36:b3:93:64:b2:85:36:6a:a4:53:96:c1:8b:bc:64:1e:
f4:03:b7:6d:c4:42:00:7c:e1:ea:eb:27:69:3a:ab:ed:1f:3f:
e3:8b:25:ff
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REI5MTcxMTAvBgNVBAUTKEQ0RTE2N0ZGODE1NjVDQzVFRDMyMzM3RjA2NUNBN0VC
NEE2ODg2N0IwHhcNMjMwMjE3MDEyMTI2WhcNMjQwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02M2VlZDY5Ni1lZWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2a3nt5kac0fM5h00cNS0saP8KXUHSfeEm/8/DyEz5WqYfsArKXEuitZ/n9rI
f0PDJJuuYNaNv6tK3/7intllXB+vhvH7R4OfHVEIYDGAFFEM61Q0WtxSJs9Deb8V
TAVBtKcC51s/Bsu7q4dtVBZuSlYhxnQvLAYBAgx8GBcRp9UUIB8atTztxQBY+duq
Iw3HilrY9IkyLIOsYk1EyYImAOJpWgmyOZBj6ivY+99K+rsgRzKN7MQIl0UVMuND
s1FxoeFheeWsjAdwj31UCIgEjV0RgmbXsFme68bTOc5CqZCz8jPpL7tFIwnI3x/W
7hoMMaQ0gL7FD6bkedFb897CmwIDAQABo4IClTCCApEwHQYDVR0OBBYEFOs3ComJ
udDGbUbbFeunI6N2jL8kMB8GA1UdIwQYMBaAFNThZ/+BVlzF7TIzfwZcp+tKaIZ7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjkxNy80ODZFMDQwODdB
MzAxMUVCOUMyRkE5MUFDNEY5QUUwMi8xT0ZuXzRGV1hNWHRNak5fQmx5bjYwcG9o
bnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFPRm5fNEZXWE1YdE1qTl9CbHluNjBwb2hucy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REI5MTcvNDg2RTA0MDg3QTMwMTFFQjlDMkZBOTFBQzRGOUFFMDIvNjQzNDRFRDA3
QTMxMTFFQjkzNzVGRTFBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABn93UwDQYJKoZIhvcNAQELBQADggEBAD31e522TqI3U8AA
7lvranqeDLUC6UD0Zt+hhQiTzOeEc9IrO7XdZrgGjLkBR6+d87td0O2wWP4OoymQ
BGgaKmJj/APiS7wzqoKG2dMX3OKvH4W4SGYN/2SgetGaktYW3/Bz1Ryu1YPmwWaD
tloTFZ0BFHUaEV41fhxSA/Yivub6APL/iTkNF17kSiCyOz1ErlN4QwmmwmGzWH3k
xKGpyAify2bQQw9FMjtN4K82pn9AEzhkBvRR27kkpSyMPZinQj61DxlMIy0JsTxa
H/H/KmTyuGO0C4kD8pJaNrOTZLKFNmqkU5bBi7xkHvQDt23EQgB84errJ2k6q+0f
P+OLJf8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:42 2024 by rpki-client on console-fra.rpki-client.org