Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/AC1BEDA8779411EE87FF4F2CC4F9AE02.roa
File: AC1BEDA8779411EE87FF4F2CC4F9AE02.roa (raw, json)
Hash identifier: EUX0ekQSGObV1ooyZaiyfFneS3hB8yuX73vebYmykaM=
Subject key identifier: 37:BF:A1:45:02:68:F0:C0:14:3F:11:29:17:58:6F:A8:20:AF:1B:99
Certificate issuer: /CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Certificate serial: 2800
Authority key identifier: F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/AC1BEDA8779411EE87FF4F2CC4F9AE02.roa
Signing time: Tue 31 Oct 2023 02:24:52 +0000
ROA not before: Tue 31 Oct 2023 02:24:52 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 30860
IP address blocks: 122.254.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10240 (0x2800)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE749/serialNumber=F00E7E4C8053CFFA068EB73E958892DD8BE61A8C
Validity
Not Before: Oct 31 02:24:52 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=65406574-37f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1f:66:e2:b5:86:ae:b6:53:e2:ad:d4:05:72:
76:12:99:14:48:4f:fc:15:a3:20:94:f5:02:c7:4f:
46:0d:34:35:95:f8:eb:8a:ee:5f:9f:e9:d9:1d:15:
85:35:e2:a3:6d:9a:48:3e:a5:fd:65:32:f2:7a:e1:
cd:be:90:a5:52:c9:d2:56:2f:22:39:f9:ff:92:8e:
07:f6:e9:86:c4:ee:b4:0e:09:bf:22:95:a5:85:47:
39:d3:34:12:9b:f5:ea:fd:84:a4:fe:52:b6:21:4b:
d3:0b:32:2f:31:04:b2:e1:9f:41:79:47:41:bb:aa:
79:c3:bb:70:13:52:e3:7c:6f:d7:66:4f:a1:d0:54:
e9:3d:ab:2f:b8:6e:e4:2a:a4:19:50:71:bd:3c:64:
27:dc:f6:b6:96:78:ae:8d:ab:48:2e:94:58:e4:70:
7d:e1:57:83:da:79:73:93:4e:c4:2d:00:ef:e0:e6:
53:7d:a5:f2:40:37:1f:1c:b7:47:a0:5d:4d:b4:a5:
c9:db:51:bc:b3:2f:7f:69:9a:11:f8:c1:ad:bb:71:
3c:3e:7a:a7:fe:85:1c:61:87:61:34:f8:b2:6a:21:
46:ac:61:e6:ef:88:c3:0e:f2:19:dd:96:56:41:23:
af:4b:b1:4c:f3:45:cc:98:13:1f:85:0b:e8:71:62:
56:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:BF:A1:45:02:68:F0:C0:14:3F:11:29:17:58:6F:A8:20:AF:1B:99
X509v3 Authority Key Identifier:
keyid:F0:0E:7E:4C:80:53:CF:FA:06:8E:B7:3E:95:88:92:DD:8B:E6:1A:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/8A5-TIBTz_oGjrc-lYiS3YvmGow.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8A5-TIBTz_oGjrc-lYiS3YvmGow.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE749/BD6441909FA411E4B8DFDD37C4F9AE02/AC1BEDA8779411EE87FF4F2CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.64.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:a4:4c:65:a8:6e:2b:70:ed:d6:26:99:43:d2:df:dd:4d:f2:
0a:e4:75:71:87:41:f1:1a:5c:ba:67:e1:32:96:5e:6f:93:97:
57:e7:7b:9f:ac:d1:72:b2:73:23:f9:b8:93:b2:db:1b:28:71:
30:a8:68:4a:13:6d:3c:dc:d0:51:2a:65:9a:c5:fc:a3:56:a9:
15:e3:6f:dd:8a:65:28:a7:f4:ea:c4:2e:34:34:57:86:4f:82:
0b:1e:c8:9a:cc:cf:b5:36:42:f9:8f:a1:cc:81:dc:b6:d5:9c:
d8:7a:54:9d:99:22:b4:c6:f8:ae:69:a6:c9:74:63:38:11:05:
89:c4:36:fc:74:6c:89:67:44:8f:fe:4a:2c:88:60:01:c9:6b:
02:69:26:75:95:05:57:d2:36:be:01:27:d4:31:29:86:e8:9b:
9c:ad:e0:08:29:21:70:88:e6:fe:a5:9c:72:7a:9d:95:a8:c4:
8f:74:12:35:c7:7c:79:0e:ed:02:42:22:68:7a:28:56:ab:fd:
2a:bb:ca:71:70:df:64:50:37:bf:82:a0:36:8d:75:2c:79:b8:
da:d8:cc:68:89:cf:9e:7e:22:92:7e:fc:a1:d3:26:b2:1c:c5:
9f:ea:d0:dd:80:24:f9:c2:06:37:d6:61:57:f0:a9:bf:4c:20:
0a:33:aa:ba
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICKAAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkU3NDkxMTAvBgNVBAUTKEYwMEU3RTRDODA1M0NGRkEwNjhFQjczRTk1ODg5MkRE
OEJFNjFBOEMwHhcNMjMxMDMxMDIyNDUyWhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTQwNjU3NC0zN2Y3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxB9m4rWGrrZT4q3UBXJ2EpkUSE/8FaMglPUCx09GDTQ1lfjriu5fn+nZHRWF
NeKjbZpIPqX9ZTLyeuHNvpClUsnSVi8iOfn/ko4H9umGxO60Dgm/IpWlhUc50zQS
m/Xq/YSk/lK2IUvTCzIvMQSy4Z9BeUdBu6p5w7twE1LjfG/XZk+h0FTpPasvuG7k
KqQZUHG9PGQn3Pa2lniujatILpRY5HB94VeD2nlzk07ELQDv4OZTfaXyQDcfHLdH
oF1NtKXJ21G8sy9/aZoR+MGtu3E8Pnqn/oUcYYdhNPiyaiFGrGHm74jDDvIZ3ZZW
QSOvS7FM80XMmBMfhQvocWJWVwIDAQABo4IClTCCApEwHQYDVR0OBBYEFDe/oUUC
aPDAFD8RKRdYb6ggrxuZMB8GA1UdIwQYMBaAFPAOfkyAU8/6Bo63PpWIkt2L5hqM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTc0OS9CRDY0NDE5MDlG
QTQxMUU0QjhERkREMzdDNEY5QUUwMi84QTUtVElCVHpfb0dqcmMtbFlpUzNZdm1H
b3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhBNS1USUJUel9vR2pyYy1sWWlTM1l2bUdvdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RkU3NDkvQkQ2NDQxOTA5RkE0MTFFNEI4REZERDM3QzRGOUFFMDIvQUMxQkVEQTg3
Nzk0MTFFRTg3RkY0RjJDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAB6/kAwDQYJKoZIhvcNAQELBQADggEBANWkTGWobitw7dYm
mUPS391N8grkdXGHQfEaXLpn4TKWXm+Tl1fne5+s0XKycyP5uJOy2xsocTCoaEoT
bTzc0FEqZZrF/KNWqRXjb92KZSin9OrELjQ0V4ZPggseyJrMz7U2QvmPocyB3LbV
nNh6VJ2ZIrTG+K5ppsl0YzgRBYnENvx0bIlnRI/+SiyIYAHJawJpJnWVBVfSNr4B
J9QxKYbom5yt4AgpIXCI5v6lnHJ6nZWoxI90EjXHfHkO7QJCImh6KFar/Sq7ynFw
32RQN7+CoDaNdSx5uNrYzGiJz55+IpJ+/KHTJrIcxZ/q0N2AJPnCBjfWYVfwqb9M
IAozqro=
-----END CERTIFICATE-----
Generated at Sat Feb 24 01:09:35 2024 by rpki-client on console-ams.rpki-client.org