Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/A88E942229C611EEBD323E22C4F9AE02.roa
File: A88E942229C611EEBD323E22C4F9AE02.roa (raw, json)
Hash identifier: f1m56dUWbU3UcIT7QEJxqzaPMDOeMeE0QAXSVkEgPOQ=
Subject key identifier: 01:86:65:F2:40:CD:69:26:45:D2:47:A4:46:F8:E3:13:20:66:62:BC
Certificate issuer: /CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Certificate serial: 277E
Authority key identifier: F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/A88E942229C611EEBD323E22C4F9AE02.roa
Signing time: Mon 24 Jul 2023 02:06:10 +0000
ROA not before: Mon 24 Jul 2023 02:06:10 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 213030
IP address blocks: 122.254.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10110 (0x277e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Validity
Not Before: Jul 24 02:06:10 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=64bddc92-78e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:12:19:52:65:1f:0f:24:48:64:80:a5:29:e8:
e4:12:9e:ab:0e:6b:4a:68:d8:f2:e0:43:25:64:b6:
20:46:58:25:31:d9:16:67:32:72:64:9f:4d:48:e1:
61:27:7d:59:49:78:21:a5:fc:7d:15:f0:93:b0:f2:
ed:21:08:c6:ff:79:5f:51:61:02:69:64:57:ff:9b:
c8:5a:cb:c7:a7:d0:bf:72:d3:96:dd:4d:47:1e:cb:
db:81:b0:02:37:39:a0:6d:20:ee:55:f6:8d:67:e3:
d3:ef:a5:21:2a:c5:93:ba:87:e9:7f:5d:a9:b4:fc:
14:00:19:c3:e5:49:32:4c:b7:9c:fe:9d:29:b6:d8:
fe:32:de:b6:52:07:6c:af:3e:d0:bf:10:4c:eb:8b:
1e:b6:d0:d4:15:5b:af:7f:40:4a:76:df:75:f6:3b:
63:80:2b:45:8c:ff:3b:5c:22:4d:f1:bc:3c:7b:47:
9e:6b:55:af:17:8c:8d:b5:79:49:dd:b9:1b:4c:d5:
b6:87:f8:95:f5:8e:5f:43:35:9c:35:9d:15:0b:b7:
3b:c2:a1:2f:66:08:6c:da:5a:55:84:4a:0d:25:f5:
67:14:40:08:c4:6c:63:d9:ce:8f:79:f1:83:be:6a:
48:0a:27:63:33:8b:b5:02:d3:5f:80:24:4b:55:72:
57:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:86:65:F2:40:CD:69:26:45:D2:47:A4:46:F8:E3:13:20:66:62:BC
X509v3 Authority Key Identifier:
keyid:F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/8A5-TIBTz_oGjrc-lYiS3YvmGow.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/A88E942229C611EEBD323E22C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.108.0/24
Signature Algorithm: sha256WithRSAEncryption
66:92:1c:a2:c1:be:a0:89:6a:6e:e7:8a:f9:51:3a:f0:7f:66:
49:b8:e6:40:35:b9:cf:8c:9c:7d:ea:92:76:59:68:22:7a:aa:
4a:83:3c:fb:d7:46:2e:ae:be:3f:d0:6d:ca:52:90:03:60:65:
26:92:31:fc:b2:f8:60:95:08:0b:a3:ef:c1:4f:c1:7f:d3:d5:
36:37:55:8d:a9:c0:54:0e:1b:80:18:3f:75:0e:d0:88:59:a2:
a2:8b:3f:1b:08:f9:23:25:6e:1e:d1:b0:24:f9:68:21:e6:e0:
02:ba:3a:59:7e:9f:93:78:45:c8:44:6f:66:14:13:bf:4b:de:
54:96:26:b0:d8:3e:17:de:88:cb:11:21:fc:a1:78:96:f0:70:
95:d5:0e:3b:3f:03:c5:a8:c0:f0:3d:71:96:09:b5:0e:ed:d6:
40:b0:db:5c:2f:81:ee:59:8d:d5:de:80:65:52:d8:33:b4:45:
4d:25:82:fb:06:ab:b8:4f:e7:83:80:75:26:73:6f:8e:93:40:
2f:8d:1a:74:1f:4c:d3:c3:9b:d9:f9:dc:e9:11:c8:fa:90:8c:
87:b4:06:b8:57:f7:8f:44:92:f2:72:99:13:f1:64:75:f1:5f:
b2:af:9a:50:e0:0f:a0:a6:d3:20:1a:fd:02:c5:5d:0a:63:29:
b2:9e:ac:f9
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICJ34wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkU3NDkxMTAvBgNVBAUTKEYwMEU3RTRDODA1M0NGRkEwNjhFQjczRTk1ODg5MkRE
OEJFNjFBOEMwHhcNMjMwNzI0MDIwNjEwWhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGJkZGM5Mi03OGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9BIZUmUfDyRIZIClKejkEp6rDmtKaNjy4EMlZLYgRlglMdkWZzJyZJ9NSOFh
J31ZSXghpfx9FfCTsPLtIQjG/3lfUWECaWRX/5vIWsvHp9C/ctOW3U1HHsvbgbAC
NzmgbSDuVfaNZ+PT76UhKsWTuofpf12ptPwUABnD5UkyTLec/p0pttj+Mt62Ugds
rz7QvxBM64settDUFVuvf0BKdt919jtjgCtFjP87XCJN8bw8e0eea1WvF4yNtXlJ
3bkbTNW2h/iV9Y5fQzWcNZ0VC7c7wqEvZghs2lpVhEoNJfVnFEAIxGxj2c6PefGD
vmpICidjM4u1AtNfgCRLVXJXKQIDAQABo4IClTCCApEwHQYDVR0OBBYEFAGGZfJA
zWkmRdJHpEb44xMgZmK8MB8GA1UdIwQYMBaAFPAOfkyAU8/6Bo63PpWIkt2L5hqM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTc0OS9CRDY0NDE5MDlG
QTQxMUU0QjhERkREMzdDNEY5QUUwMi84QTUtVElCVHpfb0dqcmMtbFlpUzNZdm1H
b3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhBNS1USUJUel9vR2pyYy1sWWlTM1l2bUdvdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RkU3NDkvQkQ2NDQxOTA5RkE0MTFFNEI4REZERDM3QzRGOUFFMDIvQTg4RTk0MjIy
OUM2MTFFRUJEMzIzRTIyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAB6/mwwDQYJKoZIhvcNAQELBQADggEBAGaSHKLBvqCJam7n
ivlROvB/Zkm45kA1uc+MnH3qknZZaCJ6qkqDPPvXRi6uvj/QbcpSkANgZSaSMfyy
+GCVCAuj78FPwX/T1TY3VY2pwFQOG4AYP3UO0IhZoqKLPxsI+SMlbh7RsCT5aCHm
4AK6Oll+n5N4RchEb2YUE79L3lSWJrDYPhfeiMsRIfyheJbwcJXVDjs/A8WowPA9
cZYJtQ7t1kCw21wvge5ZjdXegGVS2DO0RU0lgvsGq7hP54OAdSZzb46TQC+NGnQf
TNPDm9n53OkRyPqQjIe0BrhX949EkvJymRPxZHXxX7KvmlDgD6Cm0yAa/QLFXQpj
KbKerPk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:40 2024 by rpki-client on console-ams.rpki-client.org