Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F635F/B87B64FC6F4811E8B1585164C4F9AE02/B30ED0FCC56F11E9B015B03DC4F9AE02.roa
File: B30ED0FCC56F11E9B015B03DC4F9AE02.roa (raw, json)
Hash identifier: aHgUVgYgS6teGJBgndcICWz30C8p6XPkT9siZX/B8ek=
Subject key identifier: B6:7E:40:C7:D6:3C:29:F0:45:5A:43:73:10:34:D0:4A:C0:3D:73:C5
Certificate issuer: /CN=A91F635F/serialNumber=936A0FAEF7A6FD83C26CEE1E5CFB3A42FF48E180
Certificate serial: 1123
Authority key identifier: 93:6A:0F:AE:F7:A6:FD:83:C2:6C:EE:1E:5C:FB:3A:42:FF:48:E1:80
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k2oPrvem_YPCbO4eXPs6Qv9I4YA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F635F/B87B64FC6F4811E8B1585164C4F9AE02/B30ED0FCC56F11E9B015B03DC4F9AE02.roa
Signing time: Wed 09 Feb 2022 06:04:34 +0000
ROA not before: Wed 09 Feb 2022 06:04:34 +0000
ROA not after: Mon 01 May 2023 00:00:00 +0000
asID: 38895
IP address blocks: 27.0.0.0/22 maxlen: 24
103.246.148.0/23 maxlen: 24
103.246.150.0/23 maxlen: 24
203.83.220.0/22 maxlen: 24
2406:da00:6000::/40 maxlen: 48
2406:da00:a000::/40 maxlen: 48
2406:da00:e000::/40 maxlen: 48
2406:da14::/36 maxlen: 48
2406:da16::/36 maxlen: 48
2406:da18::/36 maxlen: 48
2406:da1a::/36 maxlen: 48
2406:da1e::/36 maxlen: 48
2406:daa0:4020::/46 maxlen: 48
2406:daa0:4024::/46 maxlen: 48
2406:daa0:4028::/46 maxlen: 48
2406:daa0:402c::/46 maxlen: 48
2406:daa0:4040::/46 maxlen: 48
2406:daa0:4044::/46 maxlen: 48
2406:daa0:4048::/46 maxlen: 48
2406:daa0:404c::/46 maxlen: 48
2406:daa0:4060::/46 maxlen: 48
2406:daa0:4064::/46 maxlen: 48
2406:daa0:4068::/46 maxlen: 48
2406:daa0:406c::/46 maxlen: 48
2406:daa0:4080::/46 maxlen: 48
2406:daa0:4084::/46 maxlen: 48
2406:daa0:4088::/46 maxlen: 48
2406:daa0:408c::/46 maxlen: 48
2406:daa0:6080::/46 maxlen: 48
2406:daa0:6084::/46 maxlen: 48
2406:daa0:6088::/46 maxlen: 48
2406:daa0:608c::/46 maxlen: 48
2406:daa0:8020::/46 maxlen: 48
2406:daa0:8024::/46 maxlen: 48
2406:daa0:8028::/46 maxlen: 48
2406:daa0:802c::/46 maxlen: 48
2406:daa0:8080::/46 maxlen: 48
2406:daa0:8084::/46 maxlen: 48
2406:daa0:8088::/46 maxlen: 48
2406:daa0:808c::/46 maxlen: 48
2406:daa0:80c0::/46 maxlen: 48
2406:daa0:80c4::/46 maxlen: 48
2406:daa0:80c8::/46 maxlen: 48
2406:daa0:80cc::/46 maxlen: 48
2406:daa0:a040::/46 maxlen: 48
2406:daa0:a044::/46 maxlen: 48
2406:daa0:a048::/46 maxlen: 48
2406:daa0:a04c::/46 maxlen: 48
2406:daa0:a080::/46 maxlen: 48
2406:daa0:a084::/46 maxlen: 48
2406:daa0:a088::/46 maxlen: 48
2406:daa0:a08c::/46 maxlen: 48
2406:daa0:a0c0::/46 maxlen: 48
2406:daa0:a0c4::/46 maxlen: 48
2406:daa0:a0c8::/46 maxlen: 48
2406:daa0:a0cc::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4387 (0x1123)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F/serialNumber=936A0FAEF7A6FD83C26CEE1E5CFB3A42FF48E180
Validity
Not Before: Feb 9 06:04:34 2022 GMT
Not After : May 1 00:00:00 2023 GMT
Subject: CN=62035971-ac41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1c:9c:21:12:12:42:9e:f8:a5:df:e0:65:bf:
b9:b7:a3:34:eb:38:4f:ad:8b:f4:39:c4:15:70:43:
66:58:bb:08:f0:ce:48:6c:dd:23:d0:69:13:6c:80:
ba:cf:a3:fa:68:50:bf:37:e3:fb:b4:b5:30:57:fe:
07:a5:85:00:56:5f:a7:d7:47:cb:d8:d3:32:1e:11:
4c:75:92:9d:c7:24:41:65:3c:f6:63:fd:2d:0b:ed:
fb:f5:da:a8:dd:bd:24:49:5f:cf:ce:0e:ca:34:1b:
d1:28:d8:e2:8f:ca:dc:19:cb:8a:bf:07:72:ab:bc:
6d:70:18:08:d0:55:01:23:55:1f:3b:c1:2a:a3:42:
b8:2b:62:01:a6:ba:8c:dd:47:a6:bf:30:a4:5f:f1:
d1:a1:e6:f0:e1:76:8e:39:b4:1e:8d:53:7b:31:88:
35:1a:30:1c:67:db:bb:0d:86:b3:19:fe:b3:1b:c1:
14:dd:65:40:2c:57:0a:6e:6b:9a:30:11:6d:4f:22:
8e:62:d3:94:3f:1c:77:2b:72:07:df:fa:ce:ba:4b:
a6:cb:7f:ca:cd:80:76:36:8b:de:8a:ed:3c:c7:34:
9f:dd:0f:9f:b6:68:36:37:1b:3a:33:03:88:32:04:
f7:7d:ad:2f:6e:5c:7f:08:74:b4:ac:8d:9a:6a:53:
1c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:7E:40:C7:D6:3C:29:F0:45:5A:43:73:10:34:D0:4A:C0:3D:73:C5
X509v3 Authority Key Identifier:
keyid:93:6A:0F:AE:F7:A6:FD:83:C2:6C:EE:1E:5C:FB:3A:42:FF:48:E1:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F635F/B87B64FC6F4811E8B1585164C4F9AE02/k2oPrvem_YPCbO4eXPs6Qv9I4YA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k2oPrvem_YPCbO4eXPs6Qv9I4YA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F635F/B87B64FC6F4811E8B1585164C4F9AE02/B30ED0FCC56F11E9B015B03DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.0.0.0/22
103.246.148.0/22
203.83.220.0/22
IPv6:
2406:da00:6000::/40
2406:da00:a000::/40
2406:da00:e000::/40
2406:da14::/36
2406:da16::/36
2406:da18::/36
2406:da1a::/36
2406:da1e::/36
2406:daa0:4020::/44
2406:daa0:4040::/44
2406:daa0:4060::/44
2406:daa0:4080::/44
2406:daa0:6080::/44
2406:daa0:8020::/44
2406:daa0:8080::/44
2406:daa0:80c0::/44
2406:daa0:a040::/44
2406:daa0:a080::/44
2406:daa0:a0c0::/44
Signature Algorithm: sha256WithRSAEncryption
4d:2d:f1:49:eb:23:54:4d:24:06:3a:61:8d:08:fc:79:1c:ed:
25:40:02:28:a1:f5:0d:77:32:1e:29:e7:9f:b9:c3:96:0a:21:
5a:23:67:00:02:09:44:76:1d:7f:f1:4e:cf:0f:24:cc:94:43:
00:b2:8a:57:f2:57:54:76:5e:65:e6:95:d8:dc:ab:a2:1a:94:
99:84:16:73:35:7d:91:77:4c:0c:d6:6c:97:f7:a6:94:e8:94:
50:a9:85:51:c4:a4:0f:ea:db:92:8b:3b:f1:98:a5:d2:b5:7f:
5b:bf:1f:37:c7:b2:77:d5:8b:72:31:d1:91:1e:12:5f:72:40:
f6:a7:48:5e:91:7b:dd:a5:1c:ab:fd:34:83:a3:3a:10:86:59:
a8:57:d6:9a:6e:ef:11:3b:31:f3:00:15:52:c9:df:46:82:29:
84:08:a4:30:57:af:af:dc:b2:44:18:18:af:b7:63:2e:d4:8b:
c4:57:b8:6c:2a:34:a9:d0:20:89:83:6f:8a:21:c1:b8:89:d4:
b7:6c:91:1f:5d:86:75:a4:b1:8c:d6:71:08:cf:89:37:7c:12:
78:82:89:3b:ed:0c:4d:70:45:17:df:06:b6:fe:0e:8b:a4:a0:
00:6d:cd:fa:cc:55:47:cc:9d:7c:ec:ee:e8:fc:92:94:c4:d9:
d6:24:f3:74
-----BEGIN CERTIFICATE-----
MIIGLTCCBRWgAwIBAgICESMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjYzNUYxMTAvBgNVBAUTKDkzNkEwRkFFRjdBNkZEODNDMjZDRUUxRTVDRkIzQTQy
RkY0OEUxODAwHhcNMjIwMjA5MDYwNDM0WhcNMjMwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MjAzNTk3MS1hYzQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtRycIRISQp74pd/gZb+5t6M06zhPrYv0OcQVcENmWLsI8M5IbN0j0GkTbIC6
z6P6aFC/N+P7tLUwV/4HpYUAVl+n10fL2NMyHhFMdZKdxyRBZTz2Y/0tC+379dqo
3b0kSV/Pzg7KNBvRKNjij8rcGcuKvwdyq7xtcBgI0FUBI1UfO8Eqo0K4K2IBprqM
3UemvzCkX/HRoebw4XaOObQejVN7MYg1GjAcZ9u7DYazGf6zG8EU3WVALFcKbmua
MBFtTyKOYtOUPxx3K3IH3/rOukumy3/KzYB2Noveiu08xzSf3Q+ftmg2Nxs6MwOI
MgT3fa0vblx/CHS0rI2aalMcAQIDAQABo4IDUTCCA00wHQYDVR0OBBYEFLZ+QMfW
PCnwRVpDcxA00ErAPXPFMB8GA1UdIwQYMBaAFJNqD673pv2DwmzuHlz7OkL/SOGA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjM1Ri9CODdCNjRGQzZG
NDgxMUU4QjE1ODUxNjRDNEY5QUUwMi9rMm9QcnZlbV9ZUENiTzRlWFBzNlF2OUk0
WUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2syb1BydmVtX1lQQ2JPNGVYUHM2UXY5STRZQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjYzNUYvQjg3QjY0RkM2RjQ4MTFFOEIxNTg1MTY0QzRGOUFFMDIvQjMwRUQwRkND
NTZGMTFFOUIwMTVCMDNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgdoGCCsGAQUFBwEHAQH/
BIHKMIHHMBgEAgABMBIDBAIbAAADBAJn9pQDBALLU9wwgaoEAgACMIGjAwYAJAba
AGADBgAkBtoAoAMGACQG2gDgAwYEJAbaFAADBgQkBtoWAAMGBCQG2hgAAwYEJAba
GgADBgQkBtoeAAMHBCQG2qBAIAMHBCQG2qBAQAMHBCQG2qBAYAMHBCQG2qBAgAMH
BCQG2qBggAMHBCQG2qCAIAMHBCQG2qCAgAMHBCQG2qCAwAMHBCQG2qCgQAMHBCQG
2qCggAMHBCQG2qCgwDANBgkqhkiG9w0BAQsFAAOCAQEATS3xSesjVE0kBjphjQj8
eRztJUACKKH1DXcyHinnn7nDlgohWiNnAAIJRHYdf/FOzw8kzJRDALKKV/JXVHZe
ZeaV2NyrohqUmYQWczV9kXdMDNZsl/emlOiUUKmFUcSkD+rbkos78Zil0rV/W78f
N8eyd9WLcjHRkR4SX3JA9qdIXpF73aUcq/00g6M6EIZZqFfWmm7vETsx8wAVUsnf
RoIphAikMFevr9yyRBgYr7djLtSLxFe4bCo0qdAgiYNviiHBuInUt2yRH12GdaSx
jNZxCM+JN3wSeIKJO+0MTXBFF98Gtv4Oi6SgAG3N+sxVR8ydfOzu6PySlMTZ1iTz
dA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:14 2023 by rpki-client on console-fra.rpki-client.org