Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5675/27DFF290861C11EAA1EBC46DC4F9AE02/7BE0283C0BE611ECAB99E558C4F9AE02.roa
File: 7BE0283C0BE611ECAB99E558C4F9AE02.roa (raw, json)
Hash identifier: g660aniGJn182P5NILigk6nyjCseJmOvC4D0qkd7O7I=
Subject key identifier: 83:9B:6F:59:58:B4:52:04:BA:37:16:A3:F7:BA:EF:4C:82:B5:B0:DD
Certificate issuer: /CN=A91F5675/serialNumber=15D0E35EB6D70F3EF30C6ADCE2D02B7B5AF9703F
Certificate serial: 0664
Authority key identifier: 15:D0:E3:5E:B6:D7:0F:3E:F3:0C:6A:DC:E2:D0:2B:7B:5A:F9:70:3F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FdDjXrbXDz7zDGrc4tAre1r5cD8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F5675/27DFF290861C11EAA1EBC46DC4F9AE02/7BE0283C0BE611ECAB99E558C4F9AE02.roa
Signing time: Wed 06 Apr 2022 22:09:11 +0000
ROA not before: Wed 06 Apr 2022 22:09:11 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 147001
IP address blocks: 103.150.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1636 (0x664)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F5675/serialNumber=15D0E35EB6D70F3EF30C6ADCE2D02B7B5AF9703F
Validity
Not Before: Apr 6 22:09:11 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=624e0f87-0501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ff:a7:d5:a6:45:71:f8:2f:eb:9c:19:60:36:
ba:6d:cd:ea:2a:b7:27:74:a0:07:bb:d8:b5:c0:d3:
7b:af:1c:62:01:ac:5a:17:54:a8:65:3b:10:5d:a8:
16:9b:a4:4e:b6:42:d3:46:00:40:84:9a:16:5e:85:
5c:a1:ee:67:6a:3c:1b:b8:54:bf:42:fb:35:b7:c2:
ad:92:1a:32:bc:cc:8a:82:f2:e7:bc:ac:5a:7b:d4:
b7:16:b1:a2:72:a5:db:6c:be:61:bd:cd:5c:2a:22:
80:85:5b:fc:7f:c3:13:bf:db:a4:ca:fd:4e:44:7f:
92:be:65:61:6d:d5:56:a7:d8:8c:d6:dd:54:42:5f:
2d:a2:0c:80:c0:8e:f8:8b:99:87:db:94:72:fc:38:
50:39:36:b3:e1:03:57:ae:09:a6:09:d9:d1:20:71:
68:05:bb:61:c6:d6:fb:d2:18:ef:05:0a:24:b6:1c:
a5:36:b6:86:62:bc:2f:1a:a9:0b:6e:f2:a2:91:b1:
20:84:ad:df:97:e4:29:18:ba:b0:7d:25:9d:a5:e5:
c6:41:af:83:6f:4e:50:02:55:06:2d:cc:65:f8:f9:
4b:b5:4a:a6:f4:74:44:d3:6f:17:14:4e:b7:09:c9:
85:a5:4d:12:d1:3b:73:ed:fd:39:85:8a:6c:0d:7a:
f2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:9B:6F:59:58:B4:52:04:BA:37:16:A3:F7:BA:EF:4C:82:B5:B0:DD
X509v3 Authority Key Identifier:
keyid:15:D0:E3:5E:B6:D7:0F:3E:F3:0C:6A:DC:E2:D0:2B:7B:5A:F9:70:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F5675/27DFF290861C11EAA1EBC46DC4F9AE02/FdDjXrbXDz7zDGrc4tAre1r5cD8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FdDjXrbXDz7zDGrc4tAre1r5cD8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5675/27DFF290861C11EAA1EBC46DC4F9AE02/7BE0283C0BE611ECAB99E558C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.150.173.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:ae:c5:7f:b9:a4:49:4c:6f:5e:b9:fa:16:3c:99:38:32:2f:
74:78:21:30:35:0d:af:43:d8:cf:65:f4:d4:aa:75:6a:ad:58:
83:5d:cd:e7:e3:d1:69:92:45:eb:be:65:09:3d:a7:91:cf:d2:
ef:f8:91:d8:67:b6:42:b5:08:09:a4:92:16:ae:0f:e8:90:ec:
86:74:54:bb:03:07:25:7b:e7:5a:86:e7:c0:79:4d:83:76:79:
37:e4:9a:43:54:5a:59:b4:36:93:1e:75:5d:8a:fc:d9:c1:91:
b6:1c:00:67:6f:27:53:09:ce:57:46:06:5d:0c:6e:e4:9e:c9:
48:d6:07:17:fb:a7:14:8d:46:07:e1:de:32:48:15:d2:fc:d6:
8f:c1:07:ff:ad:75:60:5f:41:ec:9c:00:26:0a:c1:e9:ca:0b:
dd:a5:c8:39:c7:e9:88:bc:2a:87:7b:87:6c:66:9f:8f:84:46:
84:75:20:4f:bd:83:4f:ad:f1:7c:6a:27:39:5d:a4:c1:80:1e:
2f:e0:d7:de:88:2b:2c:be:d4:84:2d:55:8a:0f:df:76:67:d5:
ad:96:27:49:5f:fb:e5:b1:94:04:60:e1:6b:a3:bc:b4:d3:90:
d0:37:4c:2b:a2:0f:be:39:63:41:f8:cf:a8:df:1b:b2:25:27:
4f:36:65:9a
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBmQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjU2NzUxMTAvBgNVBAUTKDE1RDBFMzVFQjZENzBGM0VGMzBDNkFEQ0UyRDAyQjdC
NUFGOTcwM0YwHhcNMjIwNDA2MjIwOTExWhcNMjMwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02MjRlMGY4Ny0wNTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm/+n1aZFcfgv65wZYDa6bc3qKrcndKAHu9i1wNN7rxxiAaxaF1SoZTsQXagW
m6ROtkLTRgBAhJoWXoVcoe5najwbuFS/Qvs1t8KtkhoyvMyKgvLnvKxae9S3FrGi
cqXbbL5hvc1cKiKAhVv8f8MTv9ukyv1ORH+SvmVhbdVWp9iM1t1UQl8togyAwI74
i5mH25Ry/DhQOTaz4QNXrgmmCdnRIHFoBbthxtb70hjvBQokthylNraGYrwvGqkL
bvKikbEghK3fl+QpGLqwfSWdpeXGQa+Db05QAlUGLcxl+PlLtUqm9HRE028XFE63
CcmFpU0S0Ttz7f05hYpsDXryawIDAQABo4IClTCCApEwHQYDVR0OBBYEFIObb1lY
tFIEujcWo/e670yCtbDdMB8GA1UdIwQYMBaAFBXQ41621w8+8wxq3OLQK3ta+XA/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTY3NS8yN0RGRjI5MDg2
MUMxMUVBQTFFQkM0NkRDNEY5QUUwMi9GZERqWHJiWER6N3pER3JjNHRBcmUxcjVj
RDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZkRGpYcmJYRHo3ekRHcmM0dEFyZTFyNWNEOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjU2NzUvMjdERkYyOTA4NjFDMTFFQUExRUJDNDZEQzRGOUFFMDIvN0JFMDI4M0Mw
QkU2MTFFQ0FCOTlFNTU4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnlq0wDQYJKoZIhvcNAQELBQADggEBAG+uxX+5pElMb165
+hY8mTgyL3R4ITA1Da9D2M9l9NSqdWqtWINdzefj0WmSReu+ZQk9p5HP0u/4kdhn
tkK1CAmkkhauD+iQ7IZ0VLsDByV751qG58B5TYN2eTfkmkNUWlm0NpMedV2K/NnB
kbYcAGdvJ1MJzldGBl0MbuSeyUjWBxf7pxSNRgfh3jJIFdL81o/BB/+tdWBfQeyc
ACYKwenKC92lyDnH6Yi8Kod7h2xmn4+ERoR1IE+9g0+t8XxqJzldpMGAHi/g196I
Kyy+1IQtVYoP33Zn1a2WJ0lf++WxlARg4WujvLTTkNA3TCuiD745Y0H4z6jfG7Il
J082ZZo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:48 2024 by rpki-client on console-fra.rpki-client.org