Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/82BB885E4B9811EB85F74960C4F9AE02.roa
File: 82BB885E4B9811EB85F74960C4F9AE02.roa (raw, json)
Hash identifier: SIyPVzvdBUXV45MMJo7qH7it3raxM+Gi6MA1efnGzMk=
Subject key identifier: 33:02:10:E1:26:C1:7F:12:F4:4A:FC:89:CA:AD:C9:79:0C:9A:7B:8B
Certificate issuer: /CN=A91AB20B/serialNumber=5EC1A6AD76A3ABFDC1E1329EB2637C01864B4808
Certificate serial: 0782
Authority key identifier: 5E:C1:A6:AD:76:A3:AB:FD:C1:E1:32:9E:B2:63:7C:01:86:4B:48:08
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XsGmrXajq_3B4TKesmN8AYZLSAg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/82BB885E4B9811EB85F74960C4F9AE02.roa
Signing time: Fri 29 Nov 2024 12:10:38 +0000
ROA not before: Fri 29 Nov 2024 12:10:38 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 38193
IP address blocks: 103.92.20.0/22 maxlen: 24
110.93.192.0/18 maxlen: 23
110.93.192.0/24 maxlen: 24
110.93.194.0/23 maxlen: 24
110.93.196.0/22 maxlen: 24
110.93.200.0/21 maxlen: 24
110.93.208.0/21 maxlen: 24
110.93.216.0/22 maxlen: 24
110.93.220.0/23 maxlen: 24
110.93.222.0/24 maxlen: 24
110.93.224.0/23 maxlen: 24
110.93.229.0/24 maxlen: 24
110.93.231.0/24 maxlen: 24
110.93.232.0/22 maxlen: 24
110.93.238.0/23 maxlen: 24
110.93.241.0/24 maxlen: 24
110.93.242.0/23 maxlen: 24
110.93.248.0/21 maxlen: 24
117.20.16.0/20 maxlen: 23
117.20.16.0/21 maxlen: 24
117.20.24.0/22 maxlen: 24
117.20.28.0/24 maxlen: 24
117.20.30.0/23 maxlen: 24
119.63.128.0/20 maxlen: 23
119.63.128.0/21 maxlen: 24
119.63.136.0/23 maxlen: 24
119.63.140.0/22 maxlen: 24
221.132.112.0/21 maxlen: 23
221.132.112.0/22 maxlen: 24
221.132.116.0/23 maxlen: 24
221.132.118.0/24 maxlen: 24
2404:d400::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1922 (0x782)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB20B
Validity
Not Before: Nov 29 12:10:38 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=6749af3e-ae29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:da:a2:d6:85:aa:c2:f4:8f:04:83:c9:ef:c9:
ff:5c:ba:fd:8b:cb:25:7e:ee:0a:aa:95:d3:0c:34:
0a:58:62:90:c3:ca:bf:36:74:dd:3a:c0:2a:a6:70:
35:00:7a:12:de:88:f3:7f:92:9f:9a:bb:26:75:b0:
e2:c8:5a:b9:84:9c:ae:5f:d2:5b:43:fa:93:fa:e3:
14:0c:15:68:8b:92:d0:90:96:1b:23:10:91:d3:ae:
8c:eb:3d:6f:cd:7b:bc:ee:b8:7d:18:86:e1:4d:b6:
20:e0:bf:42:ce:f2:61:38:31:7b:16:48:57:59:50:
17:d4:51:30:27:0c:38:d1:c8:c5:95:71:6e:95:3c:
3a:16:db:8b:f9:e3:dc:be:99:44:1b:53:6f:ed:c2:
07:c5:7b:cb:d5:5f:b3:16:66:94:f9:e8:7a:4c:83:
42:aa:3b:4f:b7:c2:61:f8:db:90:1f:76:b9:73:91:
5e:f8:d4:ab:d7:97:cd:59:0f:77:cd:48:e9:d6:49:
2e:00:f2:b4:a3:6b:f9:71:68:07:2b:60:33:01:e0:
97:5d:94:00:1a:c9:26:2f:47:d4:92:c2:5b:d4:3f:
01:70:f2:bc:09:28:d8:ad:8b:a6:36:34:18:56:6f:
c6:3d:50:02:70:51:aa:c0:d7:4f:27:9d:ae:5b:6a:
ab:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:02:10:E1:26:C1:7F:12:F4:4A:FC:89:CA:AD:C9:79:0C:9A:7B:8B
X509v3 Authority Key Identifier:
keyid:5E:C1:A6:AD:76:A3:AB:FD:C1:E1:32:9E:B2:63:7C:01:86:4B:48:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XsGmrXajq_3B4TKesmN8AYZLSAg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/82BB885E4B9811EB85F74960C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.92.20.0/22
110.93.192.0/18
117.20.16.0/20
119.63.128.0/20
221.132.112.0/21
IPv6:
2404:d400::/32
Signature Algorithm: sha256WithRSAEncryption
84:64:2a:04:75:e2:c0:c1:3d:04:8b:ad:c4:21:88:00:86:fd:
ac:03:bd:4c:f1:47:f2:f8:af:4e:cf:0e:ae:2d:63:01:47:f3:
5f:91:9b:38:97:5c:e9:38:cf:93:17:6d:1f:a8:86:86:61:75:
f6:c7:3a:37:83:b0:0b:ed:e7:c5:93:d5:0b:9e:86:c4:42:f4:
de:85:24:5d:bc:23:79:85:d5:08:21:d9:58:10:40:ee:c9:90:
28:83:a2:24:f6:27:8a:b6:bb:02:7d:79:f7:67:e0:55:2f:d9:
e5:86:2d:73:1f:6e:97:72:12:81:2d:95:f7:9e:7c:6b:17:dc:
28:97:7e:1b:dc:f5:6f:15:62:8f:31:9d:85:e2:1f:c4:43:ff:
2a:eb:1b:10:97:4c:3f:0f:35:b5:6a:bc:64:fd:e0:f5:b3:91:
97:5a:6e:a5:d7:5e:e3:e4:b6:83:2e:7c:46:61:2d:16:b3:1c:
ec:11:d4:2b:88:8e:ae:28:77:16:05:89:c0:46:20:c2:42:7d:
98:8c:c8:6f:7d:b4:62:fc:44:d3:fd:9c:fa:6c:0c:72:ab:d3:
e2:2e:8e:36:9d:98:46:a1:0d:0d:e2:fe:c5:38:7e:cd:50:6c:
d5:68:4c:70:14:80:cb:c3:42:8e:b4:4c:f8:20:0d:1d:4a:c0:
b3:0e:13:00
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgICB4IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUIyMEIxMTAvBgNVBAUTKDVFQzFBNkFENzZBM0FCRkRDMUUxMzI5RUIyNjM3QzAx
ODY0QjQ4MDgwHhcNMjQxMTI5MTIxMDM4WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzQ5YWYzZS1hZTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuNqi1oWqwvSPBIPJ78n/XLr9i8slfu4KqpXTDDQKWGKQw8q/NnTdOsAqpnA1
AHoS3ojzf5KfmrsmdbDiyFq5hJyuX9JbQ/qT+uMUDBVoi5LQkJYbIxCR066M6z1v
zXu87rh9GIbhTbYg4L9CzvJhODF7FkhXWVAX1FEwJww40cjFlXFulTw6FtuL+ePc
vplEG1Nv7cIHxXvL1V+zFmaU+eh6TINCqjtPt8Jh+NuQH3a5c5Fe+NSr15fNWQ93
zUjp1kkuAPK0o2v5cWgHK2AzAeCXXZQAGskmL0fUksJb1D8BcPK8CSjYrYumNjQY
Vm/GPVACcFGqwNdPJ52uW2qr8wIDAQABo4ICvDCCArgwHQYDVR0OBBYEFDMCEOEm
wX8S9Er8icqtyXkMmnuLMB8GA1UdIwQYMBaAFF7Bpq12o6v9weEynrJjfAGGS0gI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjIwQi9CQTcxQjY0ODEy
MDMxMUVCQkFBMTk0MTRDNEY5QUUwMi9Yc0dtclhhanFfM0I0VEtlc21OOEFZWkxT
QWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hzR21yWGFqcV8zQjRUS2VzbU44QVlaTFNBZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QUIyMEIvQkE3MUI2NDgxMjAzMTFFQkJBQTE5NDE0QzRGOUFFMDIvODJCQjg4NUU0
Qjk4MTFFQjg1Rjc0OTYwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRgYIKwYBBQUHAQcBAf8E
NzA1MCQEAgABMB4DBAJnXBQDBAZuXcADBAR1FBADBAR3P4ADBAPdhHAwDQQCAAIw
BwMFACQE1AAwDQYJKoZIhvcNAQELBQADggEBAIRkKgR14sDBPQSLrcQhiACG/awD
vUzxR/L4r07PDq4tYwFH81+RmziXXOk4z5MXbR+ohoZhdfbHOjeDsAvt58WT1Que
hsRC9N6FJF28I3mF1Qgh2VgQQO7JkCiDoiT2J4q2uwJ9efdn4FUv2eWGLXMfbpdy
EoEtlfeefGsX3CiXfhvc9W8VYo8xnYXiH8RD/yrrGxCXTD8PNbVqvGT94PWzkZda
bqXXXuPktoMufEZhLRazHOwR1CuIjq4odxYFicBGIMJCfZiMyG99tGL8RNP9nPps
DHKr0+IujjadmEahDQ3i/sU4fs1QbNVoTHAUgMvDQo60TPggDR1KwLMOEwA=
-----END CERTIFICATE-----
Generated at Sun Apr 6 00:40:31 2025 by rpki-client