Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDE77/3A66965C1D8411E291A515DA08B02CD2/648C217A562511E78A45783FC4F9AE02.roa
File: 648C217A562511E78A45783FC4F9AE02.roa (raw, json)
Hash identifier: pxBMAgpmkHsmuvhLo2hhFPPMw1SoX4/shyL5sJMg8ow=
Subject key identifier: 6D:7F:37:A7:79:40:48:F3:3B:CE:9B:58:8E:44:0C:56:19:3F:33:03
Certificate issuer: /CN=A91BDE77/serialNumber=9C0BD53F9C4B7C8E3C1C0C7F2BD3FD17CE2C2FE2
Certificate serial: 3332
Authority key identifier: 9C:0B:D5:3F:9C:4B:7C:8E:3C:1C:0C:7F:2B:D3:FD:17:CE:2C:2F:E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAvVP5xLfI48HAx_K9P9F84sL-I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BDE77/3A66965C1D8411E291A515DA08B02CD2/648C217A562511E78A45783FC4F9AE02.roa
Signing time: Tue 16 Aug 2022 02:30:21 +0000
ROA not before: Tue 16 Aug 2022 02:30:21 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 4788
IP address blocks: 1.9.0.0/16 maxlen: 24
45.116.244.0/22 maxlen: 24
58.26.0.0/16 maxlen: 24
58.27.0.0/17 maxlen: 24
202.188.0.0/16 maxlen: 24
202.188.0.0/17 maxlen: 24
202.188.0.0/18 maxlen: 24
202.188.64.0/18 maxlen: 24
202.188.68.0/22 maxlen: 24
202.188.72.0/24 maxlen: 24
202.188.76.0/22 maxlen: 24
202.188.80.0/23 maxlen: 24
202.188.84.0/23 maxlen: 24
202.188.86.0/23 maxlen: 24
202.188.88.0/23 maxlen: 24
202.188.128.0/17 maxlen: 24
202.188.128.0/18 maxlen: 24
202.188.192.0/18 maxlen: 24
202.188.192.0/19 maxlen: 24
202.188.224.0/19 maxlen: 24
203.106.0.0/16 maxlen: 24
203.106.0.0/17 maxlen: 24
203.106.0.0/18 maxlen: 24
203.106.32.0/19 maxlen: 24
203.106.64.0/18 maxlen: 24
203.106.64.0/22 maxlen: 22
203.106.68.0/22 maxlen: 24
203.106.72.0/22 maxlen: 24
203.106.85.0/24 maxlen: 24
203.106.96.0/23 maxlen: 24
203.106.98.0/24 maxlen: 24
203.106.99.0/24 maxlen: 24
203.106.100.0/23 maxlen: 24
203.106.112.0/23 maxlen: 24
203.106.114.0/23 maxlen: 24
203.106.116.0/23 maxlen: 24
203.106.128.0/17 maxlen: 17
203.106.128.0/17 maxlen: 24
203.106.128.0/18 maxlen: 24
203.106.192.0/18 maxlen: 24
203.106.192.0/19 maxlen: 24
210.186.0.0/16 maxlen: 24
210.186.16.0/24 maxlen: 24
210.186.17.0/24 maxlen: 24
210.186.18.0/24 maxlen: 24
210.186.20.0/24 maxlen: 24
210.186.21.0/24 maxlen: 24
210.186.27.0/24 maxlen: 24
210.186.30.0/24 maxlen: 24
210.186.33.0/24 maxlen: 24
210.186.100.0/22 maxlen: 24
210.186.104.0/22 maxlen: 24
210.186.108.0/22 maxlen: 24
210.186.112.0/22 maxlen: 24
210.186.116.0/22 maxlen: 24
210.186.120.0/22 maxlen: 24
210.186.124.0/22 maxlen: 24
210.186.192.0/21 maxlen: 24
210.186.200.0/21 maxlen: 24
210.186.208.0/21 maxlen: 24
210.186.216.0/22 maxlen: 24
210.186.220.0/22 maxlen: 24
210.186.224.0/21 maxlen: 24
210.186.232.0/21 maxlen: 24
210.186.240.0/21 maxlen: 24
210.186.248.0/22 maxlen: 24
210.187.0.0/16 maxlen: 24
210.187.42.0/24 maxlen: 24
210.187.54.0/24 maxlen: 24
210.187.64.0/18 maxlen: 24
210.187.208.0/21 maxlen: 21
210.187.216.0/21 maxlen: 21
210.187.224.0/21 maxlen: 21
210.187.232.0/21 maxlen: 21
210.187.240.0/21 maxlen: 21
210.187.248.0/21 maxlen: 21
210.195.0.0/16 maxlen: 21
218.208.0.0/16 maxlen: 24
219.92.0.0/16 maxlen: 24
219.93.0.0/16 maxlen: 24
219.94.0.0/17 maxlen: 18
219.94.0.0/18 maxlen: 24
219.95.0.0/16 maxlen: 21
2001:e68::/32 maxlen: 64
2001:e68::/35 maxlen: 35
2001:e68:2::/56 maxlen: 56
2001:e68:2000::/48 maxlen: 48
2001:e68:2001::/64 maxlen: 64
2001:e68:2001:1::/64 maxlen: 64
2001:e68:2001:2::/63 maxlen: 63
2001:e68:2001:4::/62 maxlen: 62
2001:e68:2001:8::/61 maxlen: 61
2001:e68:2001:10::/60 maxlen: 60
2001:e68:2001:20::/59 maxlen: 59
2001:e68:2001:40::/58 maxlen: 58
2001:e68:2001:80::/57 maxlen: 57
2001:e68:2001:100::/56 maxlen: 56
2001:e68:2001:200::/55 maxlen: 55
2001:e68:2001:400::/54 maxlen: 54
2001:e68:2001:800::/53 maxlen: 53
2001:e68:2001:1000::/52 maxlen: 52
2001:e68:2001:2000::/51 maxlen: 51
2001:e68:2001:4000::/50 maxlen: 50
2001:e68:2001:8000::/49 maxlen: 49
2001:e68:2002::/47 maxlen: 47
2001:e68:2004::/46 maxlen: 46
2001:e68:2008::/45 maxlen: 45
2001:e68:2010::/44 maxlen: 44
2001:e68:2020::/43 maxlen: 43
2001:e68:2040::/42 maxlen: 42
2001:e68:2080::/41 maxlen: 41
2001:e68:2100::/40 maxlen: 40
2001:e68:2200::/39 maxlen: 39
2001:e68:2400::/38 maxlen: 38
2001:e68:2800::/37 maxlen: 37
2001:e68:3000::/36 maxlen: 36
2001:e68:4000::/34 maxlen: 34
2001:e68:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13106 (0x3332)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDE77/serialNumber=9C0BD53F9C4B7C8E3C1C0C7F2BD3FD17CE2C2FE2
Validity
Not Before: Aug 16 02:30:21 2022 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=62fb013c-15c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6e:d1:16:94:a7:dd:4a:58:2b:f9:01:70:b9:
4a:41:91:08:fc:fc:6e:b2:98:db:f4:97:da:25:76:
f4:b8:4d:59:b6:01:66:06:61:88:5e:fc:4a:39:51:
38:f5:52:db:7b:66:1c:f9:ce:df:20:b1:b6:f8:3b:
9e:93:c3:d4:08:3b:b4:61:54:d0:e0:e4:06:1b:95:
9e:c9:f2:a6:87:bb:42:16:82:fb:be:b7:88:31:93:
31:60:64:54:97:c1:7d:e6:93:00:28:43:e1:a9:82:
e6:a8:08:bd:74:97:6b:23:ab:f0:ce:00:e5:60:ec:
02:6a:cb:4b:5b:ba:f0:cb:85:56:d6:b0:8f:3e:dd:
0a:7e:5e:d6:b0:81:b9:39:35:db:33:94:b9:29:d8:
fd:c2:40:c7:52:72:05:71:e7:b8:a9:41:59:49:d9:
14:05:f3:b6:7d:83:8a:f6:16:96:69:84:a3:9b:f1:
8a:6b:22:54:50:34:b5:2c:02:e5:04:83:83:85:92:
18:61:d1:27:34:a1:7a:de:cb:e0:f9:00:06:6d:39:
3d:f3:7b:b5:42:ba:b1:c9:78:9b:c1:6a:4a:ec:1e:
01:c8:df:82:03:7b:00:59:4b:76:b2:0a:5b:00:c7:
62:1f:13:23:f2:3f:14:45:62:62:e2:b8:fd:85:1c:
7d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:7F:37:A7:79:40:48:F3:3B:CE:9B:58:8E:44:0C:56:19:3F:33:03
X509v3 Authority Key Identifier:
keyid:9C:0B:D5:3F:9C:4B:7C:8E:3C:1C:0C:7F:2B:D3:FD:17:CE:2C:2F:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BDE77/3A66965C1D8411E291A515DA08B02CD2/nAvVP5xLfI48HAx_K9P9F84sL-I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAvVP5xLfI48HAx_K9P9F84sL-I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDE77/3A66965C1D8411E291A515DA08B02CD2/648C217A562511E78A45783FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.9.0.0/16
45.116.244.0/22
58.26.0.0-58.27.127.255
202.188.0.0/16
203.106.0.0/16
210.186.0.0/15
210.195.0.0/16
218.208.0.0/16
219.92.0.0-219.94.127.255
219.95.0.0/16
IPv6:
2001:e68::/32
Signature Algorithm: sha256WithRSAEncryption
8c:d5:18:1a:5a:37:9a:2f:ae:a3:96:f1:14:c9:74:69:44:c6:
55:75:91:ba:ce:24:ac:94:0f:0b:8a:90:7e:58:7d:88:5d:d0:
bc:b2:f8:92:39:b0:7a:92:8a:6e:37:a3:1a:74:78:fd:ed:58:
bf:e2:2b:9f:88:5b:e6:9d:46:ea:61:7c:58:4e:83:aa:2f:b3:
be:88:0b:b6:94:b1:57:a1:53:8a:6a:b9:6c:69:10:dd:e6:9e:
7d:69:63:76:d8:47:47:7c:fe:4a:2a:31:58:8d:d5:66:8c:ba:
ba:62:f4:16:be:f1:12:58:8f:22:9c:aa:8b:cd:33:62:7a:fd:
96:c6:56:e3:8f:5f:5b:20:84:1a:a0:a8:cc:71:76:59:6e:81:
1c:b0:15:53:8f:e3:89:39:77:5a:68:c9:ad:4b:70:35:44:4f:
f3:2c:19:b8:77:62:44:96:b4:9e:b2:a9:2a:68:04:fe:d7:fd:
0d:eb:cd:bd:d5:9d:d1:78:1b:86:99:c5:b7:7c:c5:37:b1:d0:
74:01:4f:82:05:d3:0a:45:3e:11:1e:de:e0:e5:60:4e:f5:f5:
3b:bc:50:aa:19:84:dd:ee:33:e2:d6:5d:a6:f9:5d:67:d6:07:
10:8e:6e:7e:56:4c:9a:66:d6:1c:d1:5d:2d:0c:fa:13:f2:a5:
92:59:a3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:03 2023 by rpki-client on console-ams.rpki-client.org