Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5675/27DFF290861C11EAA1EBC46DC4F9AE02/7F18504EDE1511EDBFB67746C4F9AE02.roa
File: 7F18504EDE1511EDBFB67746C4F9AE02.roa (raw, json)
Hash identifier: kDopLilAoXo1iyivds3v3tYYKzy8EaMZ88OFSTBQtBI=
Subject key identifier: 1D:4C:0D:AD:3F:A2:CF:6C:14:1A:08:5B:2D:AE:BD:22:B0:76:71:76
Certificate issuer: /CN=A91F5675/serialNumber=15D0E35EB6D70F3EF30C6ADCE2D02B7B5AF9703F
Certificate serial: 0831
Authority key identifier: 15:D0:E3:5E:B6:D7:0F:3E:F3:0C:6A:DC:E2:D0:2B:7B:5A:F9:70:3F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FdDjXrbXDz7zDGrc4tAre1r5cD8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F5675/27DFF290861C11EAA1EBC46DC4F9AE02/7F18504EDE1511EDBFB67746C4F9AE02.roa
Signing time: Tue 18 Apr 2023 18:19:03 +0000
ROA not before: Tue 18 Apr 2023 18:19:03 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 150452
IP address blocks: 103.150.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2097 (0x831)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F5675/serialNumber=15D0E35EB6D70F3EF30C6ADCE2D02B7B5AF9703F
Validity
Not Before: Apr 18 18:19:03 2023 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=643edf16-6c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:71:17:cf:55:2c:c6:2c:57:71:33:8b:90:51:
3e:e7:11:92:22:37:63:ce:15:3c:a4:7b:f1:e3:5c:
8b:85:29:84:a1:5a:5b:72:23:a5:f1:b1:94:e7:3d:
ab:ce:d9:16:db:5b:21:25:d4:89:fa:ae:74:d6:cf:
06:52:f0:2c:7b:60:61:0a:93:fd:f2:dc:64:79:1c:
07:99:22:c6:4f:bd:8f:a0:bf:c7:0e:ce:ec:1c:5c:
1f:be:39:9c:1c:3d:c2:ef:6b:e5:97:b1:e5:0b:ec:
c8:58:22:06:cb:e4:ce:3c:f4:3c:ba:1d:63:70:34:
1a:cf:93:37:02:ce:7b:25:c0:30:cc:29:a8:08:8b:
91:6e:23:b4:7d:17:72:e8:5a:4d:62:e3:30:58:1a:
7c:d5:a7:a6:ca:d6:50:da:82:de:61:34:ef:b3:5c:
36:bd:8c:96:49:42:11:5b:39:e2:7b:98:2f:f6:a7:
01:6e:4d:79:f6:24:83:9d:b8:8b:43:41:41:ca:8c:
32:5c:ce:8f:0e:fd:a5:b5:e4:63:d1:e0:16:e4:aa:
f1:87:f3:b7:2b:15:38:3d:0c:75:b3:48:37:5c:b9:
41:13:81:0b:0d:d6:57:05:58:93:ba:b8:ff:97:53:
7c:77:3a:f1:f6:52:e6:7f:32:20:41:6b:85:af:5d:
2c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:4C:0D:AD:3F:A2:CF:6C:14:1A:08:5B:2D:AE:BD:22:B0:76:71:76
X509v3 Authority Key Identifier:
keyid:15:D0:E3:5E:B6:D7:0F:3E:F3:0C:6A:DC:E2:D0:2B:7B:5A:F9:70:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F5675/27DFF290861C11EAA1EBC46DC4F9AE02/FdDjXrbXDz7zDGrc4tAre1r5cD8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FdDjXrbXDz7zDGrc4tAre1r5cD8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5675/27DFF290861C11EAA1EBC46DC4F9AE02/7F18504EDE1511EDBFB67746C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.150.173.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:62:2c:bc:94:92:35:8b:71:3c:56:58:bf:0d:6b:9a:e4:47:
74:48:73:44:e6:d7:93:e3:5c:f4:fb:07:1d:9e:e1:73:1d:ef:
83:71:0f:f9:55:f3:df:bd:57:10:55:8c:a8:31:a1:07:5a:b6:
99:23:be:0f:75:be:83:d8:24:95:77:c7:1e:33:85:3e:13:ec:
58:9e:26:be:42:27:17:7e:2b:c0:40:01:a8:17:ad:af:70:fb:
33:11:68:26:0e:a3:24:ce:39:2d:ba:b7:35:ba:e4:10:a0:e9:
d4:60:a5:64:33:b0:36:d9:6d:32:9d:ee:51:75:74:62:8f:62:
ac:82:06:46:04:1a:57:c6:dd:f0:86:2c:bd:74:14:5d:94:3a:
40:26:ed:63:00:35:2c:6e:b1:1d:4a:d2:d7:32:d8:02:e8:85:
af:50:b2:51:74:ff:d5:51:f9:90:36:64:05:27:52:07:29:cd:
cb:62:60:f0:1f:1e:76:ed:47:be:42:6e:1c:86:6b:88:38:20:
f0:05:b9:1e:67:fb:69:d0:69:19:be:b6:91:4f:b5:bd:49:0e:
14:c3:ac:b6:53:87:61:31:eb:08:04:4d:7b:94:c5:33:ff:bc:
08:85:8c:c1:47:39:31:60:6a:38:1d:12:67:02:32:ba:58:89:
4b:5d:e3:a4
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCDEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjU2NzUxMTAvBgNVBAUTKDE1RDBFMzVFQjZENzBGM0VGMzBDNkFEQ0UyRDAyQjdC
NUFGOTcwM0YwHhcNMjMwNDE4MTgxOTAzWhcNMjMwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDNlZGYxNi02Yzc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqnEXz1UsxixXcTOLkFE+5xGSIjdjzhU8pHvx41yLhSmEoVpbciOl8bGU5z2r
ztkW21shJdSJ+q501s8GUvAse2BhCpP98txkeRwHmSLGT72PoL/HDs7sHFwfvjmc
HD3C72vll7HlC+zIWCIGy+TOPPQ8uh1jcDQaz5M3As57JcAwzCmoCIuRbiO0fRdy
6FpNYuMwWBp81aemytZQ2oLeYTTvs1w2vYyWSUIRWznie5gv9qcBbk159iSDnbiL
Q0FByowyXM6PDv2lteRj0eAW5Krxh/O3KxU4PQx1s0g3XLlBE4ELDdZXBViTurj/
l1N8dzrx9lLmfzIgQWuFr10sEQIDAQABo4IClTCCApEwHQYDVR0OBBYEFB1MDa0/
os9sFBoIWy2uvSKwdnF2MB8GA1UdIwQYMBaAFBXQ41621w8+8wxq3OLQK3ta+XA/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTY3NS8yN0RGRjI5MDg2
MUMxMUVBQTFFQkM0NkRDNEY5QUUwMi9GZERqWHJiWER6N3pER3JjNHRBcmUxcjVj
RDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZkRGpYcmJYRHo3ekRHcmM0dEFyZTFyNWNEOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjU2NzUvMjdERkYyOTA4NjFDMTFFQUExRUJDNDZEQzRGOUFFMDIvN0YxODUwNEVE
RTE1MTFFREJGQjY3NzQ2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnlq0wDQYJKoZIhvcNAQELBQADggEBANNiLLyUkjWLcTxW
WL8Na5rkR3RIc0Tm15PjXPT7Bx2e4XMd74NxD/lV89+9VxBVjKgxoQdatpkjvg91
voPYJJV3xx4zhT4T7FieJr5CJxd+K8BAAagXra9w+zMRaCYOoyTOOS26tzW65BCg
6dRgpWQzsDbZbTKd7lF1dGKPYqyCBkYEGlfG3fCGLL10FF2UOkAm7WMANSxusR1K
0tcy2ALoha9QslF0/9VR+ZA2ZAUnUgcpzctiYPAfHnbtR75CbhyGa4g4IPAFuR5n
+2nQaRm+tpFPtb1JDhTDrLZTh2Ex6wgETXuUxTP/vAiFjMFHOTFgajgdEmcCMrpY
iUtd46Q=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:38 2024 by rpki-client on console-ams.rpki-client.org