Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/54406142458811EEA7338C19C4F9AE02.roa
File: 54406142458811EEA7338C19C4F9AE02.roa (raw, json)
Hash identifier: RkyHth4LTIzBpnqzrgCPOruY4ieZtDCPhi7CqwWjLr4=
Subject key identifier: 50:BA:3F:11:68:24:B1:91:8E:12:2D:8C:39:BE:B9:87:E0:18:99:FC
Certificate issuer: /CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Certificate serial: 27B5
Authority key identifier: F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/54406142458811EEA7338C19C4F9AE02.roa
Signing time: Mon 28 Aug 2023 09:50:32 +0000
ROA not before: Mon 28 Aug 2023 09:50:32 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 136933
IP address blocks: 122.254.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10165 (0x27b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Validity
Not Before: Aug 28 09:50:32 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=64ec6de8-5f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:28:a6:4b:d6:f2:20:cb:c8:d4:29:ad:23:37:
70:d9:01:80:f2:25:56:0d:58:9c:57:3d:62:5c:5a:
4a:19:9e:e2:dd:18:15:77:86:06:e1:23:9e:b5:ee:
0c:75:24:e1:d0:06:ba:69:43:93:b3:a1:bf:ee:4b:
37:e9:7f:e3:bd:25:5c:cc:31:d7:e0:fe:cc:62:3b:
dd:c1:7c:3b:90:ff:27:fe:aa:2b:cc:d1:11:c3:59:
e0:b4:c9:5f:ce:ae:e9:36:bb:c0:af:64:c3:4c:96:
1f:0d:06:a7:d7:32:7e:b7:13:16:53:56:4e:9d:dd:
58:b5:f3:31:b6:6b:a0:db:f8:43:7c:28:ef:91:e2:
c5:46:82:c1:40:9b:bf:9b:ae:b5:82:c6:c1:7c:41:
12:19:1f:8a:93:00:21:87:52:c9:10:46:a7:31:d8:
4b:28:64:67:58:38:ac:94:91:cd:ef:09:42:6f:70:
bc:7b:13:a6:fa:19:3a:ee:36:3f:e0:f3:52:29:20:
e7:45:80:66:63:b0:2f:9f:2d:6b:96:ff:1a:90:3c:
f4:79:3d:5c:65:e5:9a:84:98:5e:12:b0:04:4c:36:
bd:47:b3:54:22:ed:1d:03:78:29:1d:2e:18:ef:1a:
c9:b5:68:84:ac:84:c4:71:50:eb:bc:1e:73:a3:74:
9f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:BA:3F:11:68:24:B1:91:8E:12:2D:8C:39:BE:B9:87:E0:18:99:FC
X509v3 Authority Key Identifier:
keyid:F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/8A5-TIBTz_oGjrc-lYiS3YvmGow.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/54406142458811EEA7338C19C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.64.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:bb:95:8b:5e:0e:46:0e:bc:cd:c2:57:46:96:34:83:92:c2:
39:8e:60:de:4c:60:b4:12:62:a4:05:cb:15:4e:2c:cd:14:c1:
8f:6a:1a:f3:e6:7e:79:81:55:07:91:d8:40:35:a3:9b:ea:7b:
91:81:f4:cf:55:28:cd:ca:71:2a:1c:a4:39:b6:d3:4d:b0:eb:
18:5d:76:e3:0e:c8:67:f6:df:0d:18:e7:15:7c:85:bc:c1:2c:
7c:bb:ac:77:c3:f5:21:14:b7:75:06:0f:6f:3d:3f:4d:f0:e4:
5f:27:3b:bb:a1:c5:00:6d:30:62:bd:e1:0c:0b:45:08:b8:b3:
c8:8d:9c:bb:79:be:97:f2:aa:d5:84:58:91:aa:f4:b7:77:7a:
e2:a3:f1:0d:22:eb:ba:ec:c1:62:47:c1:e1:ab:f5:66:88:96:
c5:87:b2:e3:81:dc:fe:1e:eb:e6:91:fb:b1:44:cd:b2:70:2c:
d4:8b:93:db:50:5b:07:eb:81:20:e1:e3:3e:ad:44:51:fe:52:
80:4f:41:ac:b8:e6:5b:69:4c:56:b5:fb:25:6f:72:aa:72:19:
02:dc:cc:a5:54:38:ae:63:3a:a3:6c:82:ee:bc:f5:25:8d:81:
23:aa:14:9c:f1:ff:7d:62:a9:26:16:b0:aa:4c:b7:5f:33:43:
95:97:9c:19
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICJ7UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkU3NDkxMTAvBgNVBAUTKEYwMEU3RTRDODA1M0NGRkEwNjhFQjczRTk1ODg5MkRE
OEJFNjFBOEMwHhcNMjMwODI4MDk1MDMyWhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGVjNmRlOC01ZjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4SimS9byIMvI1CmtIzdw2QGA8iVWDVicVz1iXFpKGZ7i3RgVd4YG4SOete4M
dSTh0Aa6aUOTs6G/7ks36X/jvSVczDHX4P7MYjvdwXw7kP8n/qorzNERw1ngtMlf
zq7pNrvAr2TDTJYfDQan1zJ+txMWU1ZOnd1YtfMxtmug2/hDfCjvkeLFRoLBQJu/
m661gsbBfEESGR+KkwAhh1LJEEanMdhLKGRnWDislJHN7wlCb3C8exOm+hk67jY/
4PNSKSDnRYBmY7Avny1rlv8akDz0eT1cZeWahJheErAETDa9R7NUIu0dA3gpHS4Y
7xrJtWiErITEcVDrvB5zo3SfSwIDAQABo4IClTCCApEwHQYDVR0OBBYEFFC6PxFo
JLGRjhItjDm+uYfgGJn8MB8GA1UdIwQYMBaAFPAOfkyAU8/6Bo63PpWIkt2L5hqM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTc0OS9CRDY0NDE5MDlG
QTQxMUU0QjhERkREMzdDNEY5QUUwMi84QTUtVElCVHpfb0dqcmMtbFlpUzNZdm1H
b3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhBNS1USUJUel9vR2pyYy1sWWlTM1l2bUdvdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RkU3NDkvQkQ2NDQxOTA5RkE0MTFFNEI4REZERDM3QzRGOUFFMDIvNTQ0MDYxNDI0
NTg4MTFFRUE3MzM4QzE5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAB6/kAwDQYJKoZIhvcNAQELBQADggEBANO7lYteDkYOvM3C
V0aWNIOSwjmOYN5MYLQSYqQFyxVOLM0UwY9qGvPmfnmBVQeR2EA1o5vqe5GB9M9V
KM3KcSocpDm2002w6xhdduMOyGf23w0Y5xV8hbzBLHy7rHfD9SEUt3UGD289P03w
5F8nO7uhxQBtMGK94QwLRQi4s8iNnLt5vpfyqtWEWJGq9Ld3euKj8Q0i67rswWJH
weGr9WaIlsWHsuOB3P4e6+aR+7FEzbJwLNSLk9tQWwfrgSDh4z6tRFH+UoBPQay4
5ltpTFa1+yVvcqpyGQLczKVUOK5jOqNsgu689SWNgSOqFJzx/31iqSYWsKpMt18z
Q5WXnBk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:40 2024 by rpki-client on console-ams.rpki-client.org