Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/A1C94A1493D711EC85DCC43FC4F9AE02.roa
File: A1C94A1493D711EC85DCC43FC4F9AE02.roa (raw, json)
Hash identifier: //fQ2i5bluG4Oi1Fo0/ukDxyL3G9kx1bvi2Y3ZmWCig=
Subject key identifier: 25:1F:A2:05:D1:C8:4F:23:BF:EF:BB:20:67:38:61:D3:C0:EB:BD:40
Certificate issuer: /CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Certificate serial: 24C7
Authority key identifier: F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/A1C94A1493D711EC85DCC43FC4F9AE02.roa
Signing time: Tue 22 Feb 2022 12:04:49 +0000
ROA not before: Tue 22 Feb 2022 12:04:49 +0000
ROA not after: Wed 31 Aug 2022 00:00:00 +0000
asID: 55933
IP address blocks: 122.254.92.0/22 maxlen: 22
122.254.96.0/22 maxlen: 22
122.254.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9415 (0x24c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Validity
Not Before: Feb 22 12:04:49 2022 GMT
Not After : Aug 31 00:00:00 2022 GMT
Subject: CN=6214d160-fc87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:71:aa:38:04:43:d5:d8:b1:db:0a:3a:0f:e6:
54:0d:6d:21:ee:50:18:ce:01:8b:3a:c4:4f:b7:d1:
59:e2:9d:b3:83:41:23:ca:3c:15:89:de:15:c5:e5:
c7:d6:10:ce:c3:f0:0a:eb:60:f8:d1:98:17:bc:57:
1e:22:0a:aa:11:5a:22:37:2f:36:43:40:af:30:ed:
42:0d:0a:1e:84:ad:03:53:69:45:64:9c:2f:c5:18:
09:5b:5d:8b:a9:f9:8c:86:88:87:cc:f4:db:6d:c7:
98:26:55:f1:f9:0e:0f:2d:bb:81:77:d0:68:c9:62:
91:a5:10:62:55:67:0e:2f:12:ae:88:13:9a:f0:a4:
34:a9:34:e4:75:2b:3c:6e:3c:cc:8c:5d:c0:25:e3:
67:ae:72:fa:5a:04:b8:9d:7f:2e:91:cf:27:1d:27:
85:88:36:60:76:d3:41:fc:57:2f:20:db:4e:54:89:
e1:1f:ed:05:5f:c7:37:19:eb:e3:00:3e:08:3e:19:
58:d6:9d:b1:19:58:80:de:f1:05:72:af:9d:51:20:
00:97:36:e6:a8:a7:e1:e5:87:1c:db:8b:b2:82:86:
d9:44:33:7e:48:64:ee:b9:d3:63:95:b2:c7:12:d7:
5e:1c:b3:3c:a5:1b:51:a5:a2:75:28:e4:a6:cf:5f:
b4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:1F:A2:05:D1:C8:4F:23:BF:EF:BB:20:67:38:61:D3:C0:EB:BD:40
X509v3 Authority Key Identifier:
keyid:F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/8A5-TIBTz_oGjrc-lYiS3YvmGow.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/A1C94A1493D711EC85DCC43FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.92.0-122.254.99.255
122.254.107.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:6f:34:50:92:72:1a:55:b0:0d:7a:c0:44:06:30:46:45:f0:
7e:6e:63:bf:70:a5:95:28:1a:99:dd:d6:cf:9c:7b:d4:b0:32:
e7:58:17:8c:dc:8c:02:91:9f:57:ba:ef:ef:97:f0:ff:37:65:
48:d4:b4:ef:e8:05:de:87:87:9b:46:97:4a:c6:90:f3:93:44:
7b:7d:7c:f7:e9:4e:64:e6:e2:d8:30:e8:f0:af:fb:85:ea:a0:
7c:87:27:df:c7:7b:fd:35:81:8f:fc:0d:9d:b7:f3:54:ed:35:
14:70:b0:84:78:9b:2d:3e:60:8a:e6:d4:bb:12:7a:34:c8:68:
ee:ce:44:84:08:38:a6:87:cc:c3:25:fa:a6:c1:4f:93:ff:21:
04:43:d6:df:47:a5:9c:59:20:e5:13:64:32:07:5a:3b:a3:8c:
f1:4c:f9:91:5b:92:1d:96:82:e8:f3:d5:af:53:6b:d2:2b:73:
58:ba:fd:4d:29:e7:f3:83:f8:1b:70:e6:7d:a8:ab:0f:29:12:
a4:a6:44:13:a7:d9:16:1b:e2:69:6c:e9:96:a0:22:0a:46:29:
56:ff:f5:f6:f1:d2:8c:52:85:7d:f5:50:01:98:f2:3e:ad:6f:
30:ec:5d:74:cf:51:60:42:de:30:b9:02:66:79:31:7a:56:19:
eb:8d:77:a8
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgICJMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkU3NDkxMTAvBgNVBAUTKEYwMEU3RTRDODA1M0NGRkEwNjhFQjczRTk1ODg5MkRE
OEJFNjFBOEMwHhcNMjIwMjIyMTIwNDQ5WhcNMjIwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MjE0ZDE2MC1mYzg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8XGqOARD1dix2wo6D+ZUDW0h7lAYzgGLOsRPt9FZ4p2zg0EjyjwVid4VxeXH
1hDOw/AK62D40ZgXvFceIgqqEVoiNy82Q0CvMO1CDQoehK0DU2lFZJwvxRgJW12L
qfmMhoiHzPTbbceYJlXx+Q4PLbuBd9BoyWKRpRBiVWcOLxKuiBOa8KQ0qTTkdSs8
bjzMjF3AJeNnrnL6WgS4nX8ukc8nHSeFiDZgdtNB/FcvINtOVInhH+0FX8c3Gevj
AD4IPhlY1p2xGViA3vEFcq+dUSAAlzbmqKfh5Ycc24uygobZRDN+SGTuudNjlbLH
EtdeHLM8pRtRpaJ1KOSmz1+01wIDAQABo4ICozCCAp8wHQYDVR0OBBYEFCUfogXR
yE8jv++7IGc4YdPA671AMB8GA1UdIwQYMBaAFPAOfkyAU8/6Bo63PpWIkt2L5hqM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTc0OS9CRDY0NDE5MDlG
QTQxMUU0QjhERkREMzdDNEY5QUUwMi84QTUtVElCVHpfb0dqcmMtbFlpUzNZdm1H
b3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhBNS1USUJUel9vR2pyYy1sWWlTM1l2bUdvdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RkU3NDkvQkQ2NDQxOTA5RkE0MTFFNEI4REZERDM3QzRGOUFFMDIvQTFDOTRBMTQ5
M0Q3MTFFQzg1RENDNDNGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLQYIKwYBBQUHAQcBAf8E
HjAcMBoEAgABMBQwDAMEAnr+XAMEAnr+YAMEAHr+azANBgkqhkiG9w0BAQsFAAOC
AQEALm80UJJyGlWwDXrARAYwRkXwfm5jv3CllSgamd3Wz5x71LAy51gXjNyMApGf
V7rv75fw/zdlSNS07+gF3oeHm0aXSsaQ85NEe3189+lOZObi2DDo8K/7heqgfIcn
38d7/TWBj/wNnbfzVO01FHCwhHibLT5giubUuxJ6NMho7s5EhAg4pofMwyX6psFP
k/8hBEPW30elnFkg5RNkMgdaO6OM8Uz5kVuSHZaC6PPVr1Nr0itzWLr9TSnn84P4
G3DmfairDykSpKZEE6fZFhviaWzplqAiCkYpVv/19vHSjFKFffVQAZjyPq1vMOxd
dM9RYELeMLkCZnkxelYZ6413qA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:40 2024 by rpki-client on console-ams.rpki-client.org