Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/388F2642FF7411EBAD073A1AC4F9AE02.roa
File: 388F2642FF7411EBAD073A1AC4F9AE02.roa (raw, json)
Hash identifier: VdZqLEovlPO9QcfFW0cAt3BArQ28OuwcHA0DifclWfc=
Subject key identifier: 03:57:C8:1C:31:72:CD:B6:54:EB:9C:10:95:D4:38:62:ED:04:3D:11
Certificate issuer: /CN=A91175BA/serialNumber=46E87CFFDFB0C16282AB1EEAC6DD2427328376A6
Certificate serial: 043C
Authority key identifier: 46:E8:7C:FF:DF:B0:C1:62:82:AB:1E:EA:C6:DD:24:27:32:83:76:A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ruh8_9-wwWKCqx7qxt0kJzKDdqY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/388F2642FF7411EBAD073A1AC4F9AE02.roa
Signing time: Sat 29 Apr 2023 03:22:38 +0000
ROA not before: Sat 29 Apr 2023 03:22:38 +0000
ROA not after: Mon 28 Aug 2023 00:00:00 +0000
asID: 10103
IP address blocks: 203.175.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1084 (0x43c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91175BA/serialNumber=46E87CFFDFB0C16282AB1EEAC6DD2427328376A6
Validity
Not Before: Apr 29 03:22:38 2023 GMT
Not After : Aug 28 00:00:00 2023 GMT
Subject: CN=644c8d7d-922a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8e:db:9c:ce:bf:e2:16:0c:47:59:b2:d2:85:
b3:5a:9f:1f:f4:c4:8c:00:a7:db:63:4f:c5:74:7f:
af:7d:2a:43:d6:11:c7:34:38:8c:1a:17:5a:d9:29:
3e:52:78:70:aa:e4:d2:42:6c:b6:c9:85:a2:d8:ee:
ad:ba:99:61:08:9c:f7:87:a1:84:81:62:31:59:35:
b4:ca:fd:47:f7:07:f5:00:ce:48:16:d2:3d:1f:11:
aa:af:a7:dc:fd:95:2a:dc:2e:5e:bb:05:72:b4:0b:
00:0f:0e:65:47:8f:46:0d:9c:1c:8a:d6:2c:6f:bc:
6f:13:4d:31:14:6c:b0:c4:65:ef:51:54:f5:31:12:
7a:e9:6d:80:20:31:b7:fb:d3:91:9e:7f:d4:4f:d5:
f9:2b:40:61:c4:10:5a:1b:f6:49:a2:01:98:15:44:
87:d4:01:0a:c8:fa:b3:83:0b:be:24:da:f5:0e:25:
61:bf:42:2e:0c:f4:82:11:47:4f:84:1b:69:bb:e3:
68:2a:c1:dc:87:6e:f2:72:a1:3c:1a:37:a8:9c:a9:
ee:9b:47:21:09:1b:5b:39:c9:4a:bd:95:38:45:57:
ba:ce:67:61:35:4e:f3:cc:0b:62:90:cc:71:72:23:
da:6e:c6:e1:4f:43:09:e3:6d:74:bb:d6:22:ea:93:
c5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:57:C8:1C:31:72:CD:B6:54:EB:9C:10:95:D4:38:62:ED:04:3D:11
X509v3 Authority Key Identifier:
keyid:46:E8:7C:FF:DF:B0:C1:62:82:AB:1E:EA:C6:DD:24:27:32:83:76:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/Ruh8_9-wwWKCqx7qxt0kJzKDdqY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ruh8_9-wwWKCqx7qxt0kJzKDdqY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/388F2642FF7411EBAD073A1AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.175.15.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:50:15:76:21:36:17:b0:04:84:43:1e:7f:42:f2:2b:7b:fe:
fd:7f:0b:3b:84:f9:64:0b:3d:8d:df:75:b6:0e:b5:be:2d:be:
21:4f:99:f1:f6:3b:fa:ac:0c:66:23:7f:e2:dc:e9:fb:8c:54:
2e:48:db:c6:af:8b:79:0d:aa:99:d9:99:1a:8c:40:75:1b:cc:
e0:28:41:c9:47:52:03:78:7d:0e:b7:31:33:cd:a9:50:b1:87:
c8:1d:66:61:aa:82:54:32:f8:8a:d9:7b:da:94:85:b4:65:53:
5e:23:06:9b:68:fb:40:a3:ab:69:88:ff:b7:84:86:15:19:19:
a1:6f:59:1a:06:a3:a4:77:d3:aa:cb:d8:a0:61:76:26:f0:25:
aa:41:c7:1a:a5:54:a3:ff:8e:9a:56:a5:7b:27:58:c7:39:55:
ee:00:f0:f4:a5:50:33:d0:3d:18:36:aa:11:9d:a9:b7:32:d3:
39:bd:57:e6:e7:a4:e5:83:d5:df:95:06:0c:e9:50:cf:a2:30:
bf:cb:b0:8f:5f:30:4e:78:7d:c8:6e:6d:8e:e6:62:03:f7:6a:
c6:3e:47:23:26:94:ba:7a:76:78:47:b6:65:f0:7c:07:b6:a1:
64:cc:fb:71:a6:b8:5c:f3:fc:70:de:da:9e:b0:15:99:b3:6c:
5b:7f:f3:44
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBDwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTc1QkExMTAvBgNVBAUTKDQ2RTg3Q0ZGREZCMEMxNjI4MkFCMUVFQUM2REQyNDI3
MzI4Mzc2QTYwHhcNMjMwNDI5MDMyMjM4WhcNMjMwODI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02NDRjOGQ3ZC05MjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvY7bnM6/4hYMR1my0oWzWp8f9MSMAKfbY0/FdH+vfSpD1hHHNDiMGhda2Sk+
UnhwquTSQmy2yYWi2O6tuplhCJz3h6GEgWIxWTW0yv1H9wf1AM5IFtI9HxGqr6fc
/ZUq3C5euwVytAsADw5lR49GDZwcitYsb7xvE00xFGywxGXvUVT1MRJ66W2AIDG3
+9ORnn/UT9X5K0BhxBBaG/ZJogGYFUSH1AEKyPqzgwu+JNr1DiVhv0IuDPSCEUdP
hBtpu+NoKsHch27ycqE8GjeonKnum0chCRtbOclKvZU4RVe6zmdhNU7zzAtikMxx
ciPabsbhT0MJ4210u9Yi6pPFPwIDAQABo4IClTCCApEwHQYDVR0OBBYEFANXyBwx
cs22VOucEJXUOGLtBD0RMB8GA1UdIwQYMBaAFEbofP/fsMFigqse6sbdJCcyg3am
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzVCQS8xNkM0RDJCOEM4
NEQxMUVCOTkxM0QzMkRDNEY5QUUwMi9SdWg4Xzktd3dXS0NxeDdxeHQwa0p6S0Rk
cVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1J1aDhfOS13d1dLQ3F4N3F4dDBrSnpLRGRxWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTc1QkEvMTZDNEQyQjhDODREMTFFQjk5MTNEMzJEQzRGOUFFMDIvMzg4RjI2NDJG
Rjc0MTFFQkFEMDczQTFBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADLrw8wDQYJKoZIhvcNAQELBQADggEBAH1QFXYhNhewBIRD
Hn9C8it7/v1/CzuE+WQLPY3fdbYOtb4tviFPmfH2O/qsDGYjf+Lc6fuMVC5I28av
i3kNqpnZmRqMQHUbzOAoQclHUgN4fQ63MTPNqVCxh8gdZmGqglQy+IrZe9qUhbRl
U14jBpto+0Cjq2mI/7eEhhUZGaFvWRoGo6R306rL2KBhdibwJapBxxqlVKP/jppW
pXsnWMc5Ve4A8PSlUDPQPRg2qhGdqbcy0zm9V+bnpOWD1d+VBgzpUM+iML/LsI9f
ME54fchubY7mYgP3asY+RyMmlLp6dnhHtmXwfAe2oWTM+3GmuFzz/HDe2p6wFZmz
bFt/80Q=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:24 2023 by rpki-client on console.sobornost.net