Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6E3D/F5B37EEE225B11E2B3438FBC08B02CD2/E4C4C8C4B0EA11E5A2DD683CC4F9AE02.roa
File: E4C4C8C4B0EA11E5A2DD683CC4F9AE02.roa (raw, json)
Hash identifier: F57cCPfwGEXgd/ugPD/JWilhJ/d69b8FurZCOpZzobo=
Subject key identifier: 91:F0:22:BB:B3:F6:B3:42:D9:75:6E:67:26:94:87:40:71:F9:98:89
Certificate issuer: /CN=A91E6E3D/serialNumber=088F03E652D84BC6B39B348E801029BB9AA160D1
Certificate serial: 32C7
Authority key identifier: 08:8F:03:E6:52:D8:4B:C6:B3:9B:34:8E:80:10:29:BB:9A:A1:60:D1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CI8D5lLYS8azmzSOgBApu5qhYNE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6E3D/F5B37EEE225B11E2B3438FBC08B02CD2/E4C4C8C4B0EA11E5A2DD683CC4F9AE02.roa
Signing time: Thu 12 Jan 2023 15:50:57 +0000
ROA not before: Thu 12 Jan 2023 15:50:57 +0000
ROA not after: Sun 31 Mar 2024 00:00:00 +0000
asID: 38590
IP address blocks: 192.138.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12999 (0x32c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6E3D/serialNumber=088F03E652D84BC6B39B348E801029BB9AA160D1
Validity
Not Before: Jan 12 15:50:57 2023 GMT
Not After : Mar 31 00:00:00 2024 GMT
Subject: CN=63c02c61-bd1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3e:3a:08:1c:d6:54:a4:cb:47:9c:a6:cc:85:
41:a4:7b:1e:4d:25:d4:6f:47:89:11:3d:aa:8e:a6:
11:ec:49:77:96:17:8d:29:48:13:42:50:a8:4b:10:
57:2d:d3:b8:93:a8:b5:c3:82:3f:b7:30:6e:a4:73:
33:c4:a2:09:70:b5:88:dc:3d:7f:62:bd:03:c6:e9:
54:ce:e2:ef:fb:b3:b3:3d:f0:d6:fd:14:8c:15:c0:
ea:54:e4:14:68:ae:cc:14:ba:34:25:53:f5:50:a8:
93:9b:b4:da:14:61:5c:6c:7b:5a:c0:fe:f6:bb:e6:
c8:d2:12:63:2d:aa:35:97:c1:95:04:17:d9:6a:6b:
9c:f0:b9:d3:88:f1:e4:46:63:30:9c:f0:a2:66:1c:
fb:45:4b:46:7f:7a:b6:f8:52:8f:55:43:b9:19:b6:
4d:5d:e8:64:6e:aa:f3:ea:22:22:30:69:bd:d6:11:
74:ba:bc:7a:ef:d8:e0:69:ae:07:4c:bc:02:11:cd:
b7:1d:bf:ec:ea:ae:7a:bc:93:77:ae:85:0d:a2:e5:
7a:d1:fa:86:7f:cd:0a:96:aa:ec:b8:92:87:95:d8:
15:b9:0a:ab:f1:ba:93:a6:dd:71:25:94:9e:ad:88:
0b:67:d3:89:23:7a:45:0a:24:4d:03:45:2e:4d:31:
97:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:F0:22:BB:B3:F6:B3:42:D9:75:6E:67:26:94:87:40:71:F9:98:89
X509v3 Authority Key Identifier:
keyid:08:8F:03:E6:52:D8:4B:C6:B3:9B:34:8E:80:10:29:BB:9A:A1:60:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6E3D/F5B37EEE225B11E2B3438FBC08B02CD2/CI8D5lLYS8azmzSOgBApu5qhYNE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CI8D5lLYS8azmzSOgBApu5qhYNE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6E3D/F5B37EEE225B11E2B3438FBC08B02CD2/E4C4C8C4B0EA11E5A2DD683CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.138.251.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:d0:31:a4:1d:82:83:18:7f:26:35:8d:bc:b4:f9:13:cb:8c:
27:1b:ad:54:e7:47:06:87:c2:1c:f5:6a:69:29:a4:0e:98:94:
73:54:07:8b:13:ed:ae:09:eb:05:dd:c9:db:9f:d7:ac:84:63:
c3:a9:55:77:c9:1c:14:b0:da:e5:0d:22:1b:4c:81:ba:0d:b9:
ea:db:78:fc:f1:4f:28:b8:f2:d5:6d:25:e8:98:59:60:f3:86:
1d:46:9d:8b:3d:93:70:ba:aa:e4:70:e4:6a:88:7c:b7:36:72:
cc:45:6a:9a:b4:d1:ed:d9:36:4e:63:96:a2:c5:47:4d:50:28:
36:e8:83:98:d6:f4:0f:5f:c5:40:be:92:d0:75:43:26:ba:17:
59:b8:28:df:ea:6b:bf:65:88:0d:c2:90:7f:fe:59:ce:69:7c:
1e:bd:9d:fa:c5:f3:97:73:d9:37:ae:ec:9a:9d:87:21:65:98:
de:27:ad:e2:ac:c6:1b:f8:af:3f:8b:b6:a0:e2:76:9d:41:86:
12:99:97:a8:3e:28:5a:a9:a8:2b:14:1c:fd:2c:77:c0:97:4e:
6f:7d:55:25:03:b7:38:88:17:51:7b:74:f4:ee:d6:ec:88:dc:
6e:55:99:84:bb:9e:83:06:e0:92:68:ea:5a:95:6e:ef:ff:b8:
67:81:a0:99
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICMscwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTZFM0QxMTAvBgNVBAUTKDA4OEYwM0U2NTJEODRCQzZCMzlCMzQ4RTgwMTAyOUJC
OUFBMTYwRDEwHhcNMjMwMTEyMTU1MDU3WhcNMjQwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02M2MwMmM2MS1iZDFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApD46CBzWVKTLR5ymzIVBpHseTSXUb0eJET2qjqYR7El3lheNKUgTQlCoSxBX
LdO4k6i1w4I/tzBupHMzxKIJcLWI3D1/Yr0DxulUzuLv+7OzPfDW/RSMFcDqVOQU
aK7MFLo0JVP1UKiTm7TaFGFcbHtawP72u+bI0hJjLao1l8GVBBfZamuc8LnTiPHk
RmMwnPCiZhz7RUtGf3q2+FKPVUO5GbZNXehkbqrz6iIiMGm91hF0urx679jgaa4H
TLwCEc23Hb/s6q56vJN3roUNouV60fqGf80KlqrsuJKHldgVuQqr8bqTpt1xJZSe
rYgLZ9OJI3pFCiRNA0UuTTGXPwIDAQABo4IClTCCApEwHQYDVR0OBBYEFJHwIruz
9rNC2XVuZyaUh0Bx+ZiJMB8GA1UdIwQYMBaAFAiPA+ZS2EvGs5s0joAQKbuaoWDR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkUzRC9GNUIzN0VFRTIy
NUIxMUUyQjM0MzhGQkMwOEIwMkNEMi9DSThENWxMWVM4YXptelNPZ0JBcHU1cWhZ
TkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0NJOEQ1bExZUzhhem16U09nQkFwdTVxaFlORS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTZFM0QvRjVCMzdFRUUyMjVCMTFFMkIzNDM4RkJDMDhCMDJDRDIvRTRDNEM4QzRC
MEVBMTFFNUEyREQ2ODNDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADAivswDQYJKoZIhvcNAQELBQADggEBABrQMaQdgoMYfyY1
jby0+RPLjCcbrVTnRwaHwhz1amkppA6YlHNUB4sT7a4J6wXdyduf16yEY8OpVXfJ
HBSw2uUNIhtMgboNuerbePzxTyi48tVtJeiYWWDzhh1GnYs9k3C6quRw5GqIfLc2
csxFapq00e3ZNk5jlqLFR01QKDbog5jW9A9fxUC+ktB1Qya6F1m4KN/qa79liA3C
kH/+Wc5pfB69nfrF85dz2Teu7JqdhyFlmN4nreKsxhv4rz+LtqDidp1BhhKZl6g+
KFqpqCsUHP0sd8CXTm99VSUDtziIF1F7dPTu1uyI3G5VmYS7noMG4JJo6lqVbu//
uGeBoJk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:46 2024 by rpki-client on console-fra.rpki-client.org