Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/9BE4A856A08111EE8DDC9C39C4F9AE02.roa
File: 9BE4A856A08111EE8DDC9C39C4F9AE02.roa (raw, json)
Hash identifier: 5rx2KOBB2W5foYFCiyYDGt0awSfrE79Uv3T6YFSnquQ=
Subject key identifier: E5:A5:DF:04:4B:A5:B1:60:09:FF:A4:66:22:79:CB:86:14:C7:3F:A8
Certificate issuer: /CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Certificate serial: 2823
Authority key identifier: F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/9BE4A856A08111EE8DDC9C39C4F9AE02.roa
Signing time: Fri 22 Dec 2023 04:21:42 +0000
ROA not before: Fri 22 Dec 2023 04:21:42 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 140057
IP address blocks: 122.254.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10275 (0x2823)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Validity
Not Before: Dec 22 04:21:42 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=65850ed6-84ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:60:05:60:a4:16:c4:7a:47:7d:28:ac:e7:76:
05:f1:cd:04:f4:b5:0e:37:43:cb:b6:9d:7d:77:7a:
7c:ef:58:d1:4c:99:6d:24:2e:38:bb:97:18:de:52:
a4:cd:25:0c:9b:ac:1e:46:56:3e:2b:93:d3:81:2a:
11:39:be:f0:14:db:90:29:42:bc:0b:5d:fa:5f:7a:
82:54:91:51:6f:57:51:ae:08:fa:d3:00:ad:bf:8f:
89:03:d9:e7:22:20:ac:2e:b4:e4:59:e2:01:ca:cc:
4a:76:aa:6b:14:3e:10:1f:e8:64:bb:36:86:e6:b3:
f0:75:44:c7:71:9a:46:32:32:8b:25:f6:35:9f:f1:
96:cc:9a:07:ba:d4:f9:a4:54:89:31:66:af:ff:55:
57:ac:46:07:43:1d:b9:3a:de:5e:8c:15:28:78:fa:
f2:02:8e:48:cc:b9:17:35:4c:bf:ba:72:1d:f7:cd:
61:c8:98:6e:82:16:d7:a1:78:1d:a2:ad:e0:cb:67:
bf:a8:13:de:70:b9:52:30:d3:70:1e:3e:11:e8:62:
d7:b3:07:68:a8:c7:01:12:cf:94:23:d5:82:ff:09:
00:6c:42:8f:59:07:50:fe:ba:31:5b:2b:00:e3:de:
d2:5b:8f:b9:82:1b:82:ed:4e:c8:a0:b0:19:48:7b:
6f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:A5:DF:04:4B:A5:B1:60:09:FF:A4:66:22:79:CB:86:14:C7:3F:A8
X509v3 Authority Key Identifier:
keyid:F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/8A5-TIBTz_oGjrc-lYiS3YvmGow.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/9BE4A856A08111EE8DDC9C39C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.76.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:96:4d:68:1d:47:4a:cf:91:ac:65:e9:da:55:9f:d3:0e:6c:
1e:0b:33:d8:ac:1c:41:09:df:1d:aa:6d:74:49:af:b4:a3:d9:
a3:c4:01:b5:1e:0d:21:67:8c:9d:eb:72:fe:bd:49:3e:bc:c5:
ad:6f:c3:68:7b:60:bf:53:ee:6e:42:21:d4:a1:63:4d:74:00:
40:47:fb:0b:bd:72:55:7b:23:17:ef:8d:9c:b9:d1:fa:11:c1:
b9:04:84:24:b8:3b:12:8f:19:17:25:5a:0b:7f:bc:47:b0:ba:
ce:5f:1a:c4:2c:e6:6e:c4:ae:2e:3a:5d:b6:aa:38:29:67:72:
26:df:e4:10:5d:89:cb:5b:db:5a:fa:77:63:94:7d:ab:60:c7:
86:7b:82:c8:98:22:a4:57:6f:5d:d9:b9:51:32:5b:bc:d8:80:
f3:1d:f3:86:29:29:d9:2d:64:56:cf:17:d7:ae:5e:cc:d2:34:
08:66:9b:32:cc:c8:08:fd:9a:29:97:f6:b2:60:4e:75:79:15:
ed:1a:79:e6:91:00:a7:ed:71:15:f1:e7:6c:4b:6e:3f:e1:1e:
0d:6e:a8:91:ea:84:e9:31:d6:7c:56:ed:92:a4:0c:39:fe:9e:
c0:cd:08:2c:99:54:de:7d:4e:04:d6:43:a2:25:f4:3f:5d:b0:
59:93:8f:ab
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICKCMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkU3NDkxMTAvBgNVBAUTKEYwMEU3RTRDODA1M0NGRkEwNjhFQjczRTk1ODg5MkRE
OEJFNjFBOEMwHhcNMjMxMjIyMDQyMTQyWhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTg1MGVkNi04NGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6GAFYKQWxHpHfSis53YF8c0E9LUON0PLtp19d3p871jRTJltJC44u5cY3lKk
zSUMm6weRlY+K5PTgSoROb7wFNuQKUK8C136X3qCVJFRb1dRrgj60wCtv4+JA9nn
IiCsLrTkWeIBysxKdqprFD4QH+hkuzaG5rPwdUTHcZpGMjKLJfY1n/GWzJoHutT5
pFSJMWav/1VXrEYHQx25Ot5ejBUoePryAo5IzLkXNUy/unId981hyJhughbXoXgd
oq3gy2e/qBPecLlSMNNwHj4R6GLXswdoqMcBEs+UI9WC/wkAbEKPWQdQ/roxWysA
497SW4+5ghuC7U7IoLAZSHtvZQIDAQABo4IClTCCApEwHQYDVR0OBBYEFOWl3wRL
pbFgCf+kZiJ5y4YUxz+oMB8GA1UdIwQYMBaAFPAOfkyAU8/6Bo63PpWIkt2L5hqM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTc0OS9CRDY0NDE5MDlG
QTQxMUU0QjhERkREMzdDNEY5QUUwMi84QTUtVElCVHpfb0dqcmMtbFlpUzNZdm1H
b3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhBNS1USUJUel9vR2pyYy1sWWlTM1l2bUdvdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RkU3NDkvQkQ2NDQxOTA5RkE0MTFFNEI4REZERDM3QzRGOUFFMDIvOUJFNEE4NTZB
MDgxMTFFRThEREM5QzM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAB6/kwwDQYJKoZIhvcNAQELBQADggEBALmWTWgdR0rPkaxl
6dpVn9MObB4LM9isHEEJ3x2qbXRJr7Sj2aPEAbUeDSFnjJ3rcv69ST68xa1vw2h7
YL9T7m5CIdShY010AEBH+wu9clV7IxfvjZy50foRwbkEhCS4OxKPGRclWgt/vEew
us5fGsQs5m7Eri46XbaqOClncibf5BBdictb21r6d2OUfatgx4Z7gsiYIqRXb13Z
uVEyW7zYgPMd84YpKdktZFbPF9euXszSNAhmmzLMyAj9mimX9rJgTnV5Fe0aeeaR
AKftcRXx52xLbj/hHg1uqJHqhOkx1nxW7ZKkDDn+nsDNCCyZVN59TgTWQ6Il9D9d
sFmTj6s=
-----END CERTIFICATE-----
Generated at Sat Feb 24 01:09:35 2024 by rpki-client on console-ams.rpki-client.org