Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDCA4/EED99E32CB7E11E8993D1776C4F9AE02/D56AD2EEFDAE11EB974B4383C4F9AE02.roa
File: D56AD2EEFDAE11EB974B4383C4F9AE02.roa (raw, json)
Hash identifier: 4nyt8xkGt9FTcH0IeFNrv6KG3k8NmPtkWYhflNPqfkE=
Subject key identifier: A5:05:01:BE:C1:40:1D:2F:FB:07:84:5A:88:BE:9E:56:B2:7B:D5:83
Certificate issuer: /CN=A91FDCA4/serialNumber=762763B7D600972930E9DE7A1442C5D30F68C484
Certificate serial: 1155
Authority key identifier: 76:27:63:B7:D6:00:97:29:30:E9:DE:7A:14:42:C5:D3:0F:68:C4:84
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/didjt9YAlykw6d56FELF0w9oxIQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDCA4/EED99E32CB7E11E8993D1776C4F9AE02/D56AD2EEFDAE11EB974B4383C4F9AE02.roa
Signing time: Mon 18 Sep 2023 17:34:48 +0000
ROA not before: Mon 18 Sep 2023 17:34:48 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 57497
IP address blocks: 103.130.144.0/24 maxlen: 24
103.130.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4437 (0x1155)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDCA4/serialNumber=762763B7D600972930E9DE7A1442C5D30F68C484
Validity
Not Before: Sep 18 17:34:48 2023 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=65088a38-94fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d0:36:68:28:c9:fb:ce:5c:db:57:00:21:18:
c3:e9:07:4a:53:18:a1:a7:25:46:a9:6b:ce:5b:18:
c7:6b:da:90:bc:a7:88:e7:27:92:ca:53:07:f6:68:
4e:a5:9c:a2:05:7f:47:43:ae:48:6f:75:41:10:80:
58:f4:0f:e3:22:8a:8a:c7:00:d3:08:85:c3:8a:b0:
c4:3b:92:69:b2:ea:76:41:71:7e:78:5b:cc:fd:15:
f1:c9:05:31:0f:f2:5c:e0:bc:a3:98:0e:ae:b1:cc:
c2:67:8e:3a:39:56:ca:bb:72:49:38:59:f4:59:50:
79:de:a6:60:09:31:5a:83:b8:e2:7d:e0:9e:0a:02:
ed:bb:78:b3:a2:05:e1:f8:78:5a:7c:06:9b:07:9a:
69:dd:62:65:f5:b7:94:1a:7b:32:52:d0:87:82:92:
ab:cd:18:1a:02:9b:f6:9d:cd:6b:23:d3:be:9c:ed:
8c:8d:49:8d:13:08:6d:10:b0:31:46:c5:2c:e0:9e:
ec:9e:bb:aa:37:f9:f1:55:8d:0c:79:fb:1f:30:e0:
a8:8c:c6:90:41:01:3c:e9:9f:e5:43:81:0d:69:4b:
b0:b3:7a:76:1f:c9:ad:01:42:ab:27:79:55:31:cf:
77:4a:ec:1f:69:30:9a:71:03:ad:a9:35:ae:e3:0e:
6e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:05:01:BE:C1:40:1D:2F:FB:07:84:5A:88:BE:9E:56:B2:7B:D5:83
X509v3 Authority Key Identifier:
keyid:76:27:63:B7:D6:00:97:29:30:E9:DE:7A:14:42:C5:D3:0F:68:C4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDCA4/EED99E32CB7E11E8993D1776C4F9AE02/didjt9YAlykw6d56FELF0w9oxIQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/didjt9YAlykw6d56FELF0w9oxIQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDCA4/EED99E32CB7E11E8993D1776C4F9AE02/D56AD2EEFDAE11EB974B4383C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.144.0/24
103.130.146.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:c2:66:89:4f:42:6c:33:39:e8:a6:cb:89:1c:bf:99:0d:95:
11:27:fe:d4:46:0a:64:1c:fb:24:be:af:1e:59:5f:70:0c:fc:
b8:0d:bd:af:fc:39:08:50:3a:94:7e:d5:c7:07:8b:6d:18:81:
f7:af:88:0d:68:c9:05:dc:6c:1e:25:ea:3d:5f:0d:be:23:9c:
a9:88:9d:f6:38:a7:8d:28:19:4f:77:be:41:75:d1:e8:59:3e:
cc:af:1b:bc:61:80:9d:c5:a0:5b:fd:14:17:38:d7:c0:fc:0f:
fc:c8:8a:e2:5f:36:1d:19:0f:f1:e9:39:a0:07:4f:db:94:29:
82:24:1c:87:ba:11:99:90:1f:61:b7:ca:ce:5b:92:d9:e3:e2:
b3:bf:9d:c4:b6:f6:52:bd:88:de:6e:74:a3:d2:4a:6d:6a:ba:
5e:49:51:f4:8f:54:a4:ae:ae:4b:28:2d:f6:3b:f4:0b:8f:11:
a9:06:68:27:32:db:f0:9b:c9:a4:e3:d7:d3:14:35:e3:5d:13:
6b:e9:37:79:83:33:d1:83:a9:b0:91:65:b2:72:da:eb:b2:ca:
4a:40:18:e8:a4:7f:b6:73:b4:f0:09:9c:4c:5f:17:61:e5:25:
29:7f:e4:83:f0:3a:8d:a6:b6:10:36:6c:8e:c3:a5:db:7b:db:
94:53:aa:52
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICEVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkRDQTQxMTAvBgNVBAUTKDc2Mjc2M0I3RDYwMDk3MjkzMEU5REU3QTE0NDJDNUQz
MEY2OEM0ODQwHhcNMjMwOTE4MTczNDQ4WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTA4OGEzOC05NGZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAldA2aCjJ+85c21cAIRjD6QdKUxihpyVGqWvOWxjHa9qQvKeI5yeSylMH9mhO
pZyiBX9HQ65Ib3VBEIBY9A/jIoqKxwDTCIXDirDEO5Jpsup2QXF+eFvM/RXxyQUx
D/Jc4LyjmA6usczCZ446OVbKu3JJOFn0WVB53qZgCTFag7jifeCeCgLtu3izogXh
+HhafAabB5pp3WJl9beUGnsyUtCHgpKrzRgaApv2nc1rI9O+nO2MjUmNEwhtELAx
RsUs4J7snruqN/nxVY0MefsfMOCojMaQQQE86Z/lQ4ENaUuws3p2H8mtAUKrJ3lV
Mc93SuwfaTCacQOtqTWu4w5u9QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFKUFAb7B
QB0v+weEWoi+nlaye9WDMB8GA1UdIwQYMBaAFHYnY7fWAJcpMOneehRCxdMPaMSE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRENBNC9FRUQ5OUUzMkNC
N0UxMUU4OTkzRDE3NzZDNEY5QUUwMi9kaWRqdDlZQWx5a3c2ZDU2RkVMRjB3OW94
SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RpZGp0OVlBbHlrdzZkNTZGRUxGMHc5b3hJUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RkRDQTQvRUVEOTlFMzJDQjdFMTFFODk5M0QxNzc2QzRGOUFFMDIvRDU2QUQyRUVG
REFFMTFFQjk3NEI0MzgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABngpADBABngpIwDQYJKoZIhvcNAQELBQADggEBAA3CZolP
QmwzOeimy4kcv5kNlREn/tRGCmQc+yS+rx5ZX3AM/LgNva/8OQhQOpR+1ccHi20Y
gfeviA1oyQXcbB4l6j1fDb4jnKmInfY4p40oGU93vkF10ehZPsyvG7xhgJ3FoFv9
FBc418D8D/zIiuJfNh0ZD/HpOaAHT9uUKYIkHIe6EZmQH2G3ys5bktnj4rO/ncS2
9lK9iN5udKPSSm1qul5JUfSPVKSurksoLfY79AuPEakGaCcy2/CbyaTj19MUNeNd
E2vpN3mDM9GDqbCRZbJy2uuyykpAGOikf7ZztPAJnExfF2HlJSl/5IPwOo2mthA2
bI7Dpdt725RTqlI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:52 2024 by rpki-client on console-fra.rpki-client.org