Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/54187DCCFF5011ED905E291BC4F9AE02.roa
File: 54187DCCFF5011ED905E291BC4F9AE02.roa (raw, json)
Hash identifier: svn6TMEslla/vCcsK5/ps16zXbcMAnnJA0gmUoqKcOs=
Subject key identifier: 86:4A:BE:18:3B:A3:38:DE:CC:4D:3B:D8:38:A5:91:4F:02:A8:E4:1F
Certificate issuer: /CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Certificate serial: 2764
Authority key identifier: F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/54187DCCFF5011ED905E291BC4F9AE02.roa
Signing time: Wed 28 Jun 2023 16:02:28 +0000
ROA not before: Wed 28 Jun 2023 16:02:28 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 133153
IP address blocks: 122.254.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10084 (0x2764)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Validity
Not Before: Jun 28 16:02:28 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=649c5993-df0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c0:7b:12:e8:04:d3:0a:ab:bd:cc:8a:a8:47:
b0:b1:b3:6d:61:45:64:0b:48:2a:fa:df:03:2a:58:
12:ed:03:22:41:d9:a4:d2:ea:68:a6:91:2f:6e:a7:
53:2f:91:aa:ac:34:ec:63:37:81:fd:19:21:94:33:
a8:50:45:d4:cd:32:88:65:67:13:45:f3:82:b4:fb:
38:20:a8:52:ed:dc:f6:58:ea:bc:d7:f3:15:24:eb:
64:3e:5a:76:ab:9c:10:b4:12:6d:34:44:5c:ed:78:
1a:a6:02:6e:cf:8f:46:f5:b8:75:47:d5:cf:8d:f8:
d0:25:af:b6:a9:fa:cc:fc:f5:93:09:8b:65:34:1b:
c5:f9:f7:1b:5f:d1:a7:3b:21:94:3b:b9:68:38:dc:
8c:12:3a:9c:51:86:02:59:d1:87:60:02:f8:55:76:
95:55:59:57:6b:73:b9:31:e4:ac:4a:48:69:fd:9a:
11:e9:66:6a:27:10:a2:3b:ae:6f:01:99:04:74:5f:
44:84:12:f5:05:fb:f7:c2:bf:85:e4:72:52:d0:cb:
62:93:c1:0d:c3:d4:53:0e:54:40:13:fd:38:31:3c:
64:d0:70:18:e5:38:1e:a3:bf:a8:12:74:9d:0d:80:
0f:e4:86:3f:5a:ee:5b:5f:ef:42:6b:67:45:6b:b8:
55:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:4A:BE:18:3B:A3:38:DE:CC:4D:3B:D8:38:A5:91:4F:02:A8:E4:1F
X509v3 Authority Key Identifier:
keyid:F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/8A5-TIBTz_oGjrc-lYiS3YvmGow.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/54187DCCFF5011ED905E291BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.116.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:58:73:40:ee:b9:47:5d:73:09:69:74:8f:37:d9:cc:76:4b:
e0:a0:27:72:94:4a:cc:fd:22:7b:19:77:4e:7f:ee:74:a3:70:
23:55:04:45:0b:b2:12:a8:63:db:a6:9e:97:78:4d:d4:9e:1b:
42:db:66:a2:7f:77:f9:4a:53:cc:e9:48:53:4c:16:ca:a0:36:
f5:21:93:f2:ec:de:e6:c0:c0:68:e6:c4:34:22:b1:67:aa:e1:
e4:5f:fd:d7:c0:2d:23:a1:9b:f2:b6:59:20:ac:95:3e:26:5a:
92:ba:07:d2:ba:3c:79:87:50:6d:95:75:52:7e:10:64:ff:5f:
e0:75:41:4d:e8:02:27:27:8d:f4:58:67:6e:13:bb:e5:c3:29:
95:39:37:d7:41:f1:0c:76:95:ef:61:94:b2:04:e2:9c:2d:06:
ce:9c:45:b9:30:3a:c1:36:4e:1d:7a:75:4e:66:d5:9a:13:52:
dd:1e:53:f6:48:28:af:47:a3:6a:b6:3a:73:8a:77:bd:82:32:
ca:d4:70:e9:45:88:81:a6:49:73:bf:fd:0d:1a:2a:5f:46:3f:
98:9f:fa:26:a5:0a:63:90:68:46:8e:b9:ae:db:3a:93:57:f5:
be:ff:48:c0:a2:09:ed:85:67:02:ca:73:f9:4a:c8:7b:a4:55:
ce:12:1f:1c
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICJ2QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkU3NDkxMTAvBgNVBAUTKEYwMEU3RTRDODA1M0NGRkEwNjhFQjczRTk1ODg5MkRE
OEJFNjFBOEMwHhcNMjMwNjI4MTYwMjI4WhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDljNTk5My1kZjBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtcB7EugE0wqrvcyKqEewsbNtYUVkC0gq+t8DKlgS7QMiQdmk0upoppEvbqdT
L5GqrDTsYzeB/RkhlDOoUEXUzTKIZWcTRfOCtPs4IKhS7dz2WOq81/MVJOtkPlp2
q5wQtBJtNERc7XgapgJuz49G9bh1R9XPjfjQJa+2qfrM/PWTCYtlNBvF+fcbX9Gn
OyGUO7loONyMEjqcUYYCWdGHYAL4VXaVVVlXa3O5MeSsSkhp/ZoR6WZqJxCiO65v
AZkEdF9EhBL1Bfv3wr+F5HJS0Mtik8ENw9RTDlRAE/04MTxk0HAY5Tgeo7+oEnSd
DYAP5IY/Wu5bX+9Ca2dFa7hV1QIDAQABo4IClTCCApEwHQYDVR0OBBYEFIZKvhg7
ozjezE072DilkU8CqOQfMB8GA1UdIwQYMBaAFPAOfkyAU8/6Bo63PpWIkt2L5hqM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTc0OS9CRDY0NDE5MDlG
QTQxMUU0QjhERkREMzdDNEY5QUUwMi84QTUtVElCVHpfb0dqcmMtbFlpUzNZdm1H
b3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhBNS1USUJUel9vR2pyYy1sWWlTM1l2bUdvdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RkU3NDkvQkQ2NDQxOTA5RkE0MTFFNEI4REZERDM3QzRGOUFFMDIvNTQxODdEQ0NG
RjUwMTFFRDkwNUUyOTFCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAB6/nQwDQYJKoZIhvcNAQELBQADggEBAJxYc0DuuUddcwlp
dI832cx2S+CgJ3KUSsz9InsZd05/7nSjcCNVBEULshKoY9umnpd4TdSeG0LbZqJ/
d/lKU8zpSFNMFsqgNvUhk/Ls3ubAwGjmxDQisWeq4eRf/dfALSOhm/K2WSCslT4m
WpK6B9K6PHmHUG2VdVJ+EGT/X+B1QU3oAicnjfRYZ24Tu+XDKZU5N9dB8Qx2le9h
lLIE4pwtBs6cRbkwOsE2Th16dU5m1ZoTUt0eU/ZIKK9Ho2q2OnOKd72CMsrUcOlF
iIGmSXO//Q0aKl9GP5if+ialCmOQaEaOua7bOpNX9b7/SMCiCe2FZwLKc/lKyHuk
Vc4SHxw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:40 2024 by rpki-client on console-ams.rpki-client.org