Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F635F/B87B64FC6F4811E8B1585164C4F9AE02/BC93E3EA7BEE11EDB0C43C11C4F9AE02.roa
File: BC93E3EA7BEE11EDB0C43C11C4F9AE02.roa (raw, json)
Hash identifier: XfxpTsp4ftD7otqn5i2GWNunoDp1BVPbxl3C5sTa19o=
Subject key identifier: 20:04:2B:B5:20:01:A3:EE:C7:09:4A:83:22:26:09:BE:D8:EC:5D:34
Certificate issuer: /CN=A91F635F/serialNumber=936A0FAEF7A6FD83C26CEE1E5CFB3A42FF48E180
Certificate serial: 132F
Authority key identifier: 93:6A:0F:AE:F7:A6:FD:83:C2:6C:EE:1E:5C:FB:3A:42:FF:48:E1:80
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k2oPrvem_YPCbO4eXPs6Qv9I4YA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F635F/B87B64FC6F4811E8B1585164C4F9AE02/BC93E3EA7BEE11EDB0C43C11C4F9AE02.roa
Signing time: Wed 14 Dec 2022 20:34:42 +0000
ROA not before: Wed 14 Dec 2022 20:34:42 +0000
ROA not after: Mon 01 May 2023 00:00:00 +0000
asID: 16509
IP address blocks: 27.0.0.0/22 maxlen: 24
43.249.44.0/22 maxlen: 24
2406:daa0:4044::/46 maxlen: 48
2406:daa0:4048::/46 maxlen: 48
2406:daa0:404c::/46 maxlen: 48
2406:daa0:4060::/46 maxlen: 48
2406:daa0:4064::/46 maxlen: 48
2406:daa0:4068::/46 maxlen: 48
2406:daa0:406c::/46 maxlen: 48
2406:daa0:4080::/46 maxlen: 48
2406:daa0:4084::/46 maxlen: 48
2406:daa0:4088::/46 maxlen: 48
2406:daa0:408c::/46 maxlen: 48
2406:daa0:6080::/46 maxlen: 48
2406:daa0:6084::/46 maxlen: 48
2406:daa0:6088::/46 maxlen: 48
2406:daa0:608c::/46 maxlen: 48
2406:daa0:8020::/46 maxlen: 48
2406:daa0:8024::/46 maxlen: 48
2406:daa0:8028::/46 maxlen: 48
2406:daa0:802c::/46 maxlen: 48
2406:daa0:8080::/46 maxlen: 48
2406:daa0:8084::/46 maxlen: 48
2406:daa0:8088::/46 maxlen: 48
2406:daa0:808c::/46 maxlen: 48
2406:daa0:80c0::/46 maxlen: 48
2406:daa0:80c4::/46 maxlen: 48
2406:daa0:80c8::/46 maxlen: 48
2406:daa0:80cc::/46 maxlen: 48
2406:daa0:a040::/46 maxlen: 48
2406:daa0:a044::/46 maxlen: 48
2406:daa0:a048::/46 maxlen: 48
2406:daa0:a04c::/46 maxlen: 48
2406:daa0:a080::/46 maxlen: 48
2406:daa0:a084::/46 maxlen: 48
2406:daa0:a088::/46 maxlen: 48
2406:daa0:a08c::/46 maxlen: 48
2406:daa0:a0c0::/46 maxlen: 48
2406:daa0:a0c4::/46 maxlen: 48
2406:daa0:a0c8::/46 maxlen: 48
2406:daa0:a0cc::/46 maxlen: 48
2406:daa0:c020::/46 maxlen: 48
2406:daa0:c024::/46 maxlen: 48
2406:daa0:c028::/46 maxlen: 48
2406:daa0:c02c::/46 maxlen: 48
2406:daa0:c040::/46 maxlen: 48
2406:daa0:c044::/46 maxlen: 48
2406:daa0:c048::/46 maxlen: 48
2406:daa0:c04c::/46 maxlen: 48
2406:daa0:c080::/46 maxlen: 48
2406:daa0:c084::/46 maxlen: 48
2406:daa0:c088::/46 maxlen: 48
2406:daa0:c08c::/46 maxlen: 48
2406:daa0:c0a0::/46 maxlen: 48
2406:daa0:c0a4::/46 maxlen: 48
2406:daa0:c0a8::/46 maxlen: 48
2406:daa0:c0ac::/46 maxlen: 48
2406:daa0:c0c0::/46 maxlen: 48
2406:daa0:c0c4::/46 maxlen: 48
2406:daa0:c0c8::/46 maxlen: 48
2406:daa0:c0cc::/46 maxlen: 48
2406:daa0:e040::/46 maxlen: 48
2406:daa0:e044::/46 maxlen: 48
2406:daa0:e048::/46 maxlen: 48
2406:daa0:e04c::/46 maxlen: 48
2406:daa0:e080::/46 maxlen: 48
2406:daa0:e084::/46 maxlen: 48
2406:daa0:e088::/46 maxlen: 48
2406:daa0:e08c::/46 maxlen: 48
2406:daa0:e0c0::/46 maxlen: 48
2406:daa0:e0c4::/46 maxlen: 48
2406:daa0:e0c8::/46 maxlen: 48
2406:daa0:e0cc::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4911 (0x132f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F/serialNumber=936A0FAEF7A6FD83C26CEE1E5CFB3A42FF48E180
Validity
Not Before: Dec 14 20:34:42 2022 GMT
Not After : May 1 00:00:00 2023 GMT
Subject: CN=639a3361-e20f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:68:bd:8d:37:d7:5a:ef:db:59:9a:b9:0c:ea:
78:28:77:fe:38:cf:e7:b1:43:df:c9:4c:11:2b:8b:
75:ef:28:a4:d0:d9:b7:f8:52:76:8c:90:ed:35:63:
ef:4b:c8:20:6a:81:e1:38:da:7b:9c:2d:8b:18:aa:
d7:5d:78:7d:46:3d:48:4b:d7:f7:55:20:72:b4:4a:
1e:28:3d:9b:46:3a:88:07:b6:36:95:97:77:24:26:
fb:c7:b0:6c:19:31:28:16:43:e6:8e:56:65:06:df:
cb:ae:69:23:79:cb:dc:c3:56:9a:da:fc:21:23:3b:
b5:86:63:a4:0e:1b:3e:0f:32:1b:bb:f6:da:ee:c9:
c0:d0:2c:c8:9c:f6:67:a7:7d:e4:7f:a1:70:69:96:
c9:b8:85:6d:8b:ee:c6:84:b9:25:d7:34:ca:78:a4:
bf:fa:30:29:99:e4:69:27:c2:89:cf:3a:bc:bc:c1:
f5:1a:e7:a2:9c:ee:30:7e:ad:ec:6a:e1:ee:24:c7:
c8:4e:31:f0:04:19:1b:c5:9b:01:d2:fc:cd:53:5d:
f6:8a:bf:87:35:9d:21:8a:61:8b:65:f4:be:09:f6:
e7:22:1d:03:9e:8e:b9:c4:4d:3f:92:b5:a5:22:b8:
1e:f4:21:1e:1d:68:4c:80:39:af:fa:c4:01:55:62:
a6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:04:2B:B5:20:01:A3:EE:C7:09:4A:83:22:26:09:BE:D8:EC:5D:34
X509v3 Authority Key Identifier:
keyid:93:6A:0F:AE:F7:A6:FD:83:C2:6C:EE:1E:5C:FB:3A:42:FF:48:E1:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F635F/B87B64FC6F4811E8B1585164C4F9AE02/k2oPrvem_YPCbO4eXPs6Qv9I4YA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k2oPrvem_YPCbO4eXPs6Qv9I4YA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F635F/B87B64FC6F4811E8B1585164C4F9AE02/BC93E3EA7BEE11EDB0C43C11C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.0.0.0/22
43.249.44.0/22
IPv6:
2406:daa0:4044::-2406:daa0:404f:ffff:ffff:ffff:ffff:ffff
2406:daa0:4060::/44
2406:daa0:4080::/44
2406:daa0:6080::/44
2406:daa0:8020::/44
2406:daa0:8080::/44
2406:daa0:80c0::/44
2406:daa0:a040::/44
2406:daa0:a080::/44
2406:daa0:a0c0::/44
2406:daa0:c020::/44
2406:daa0:c040::/44
2406:daa0:c080::/44
2406:daa0:c0a0::/44
2406:daa0:c0c0::/44
2406:daa0:e040::/44
2406:daa0:e080::/44
2406:daa0:e0c0::/44
Signature Algorithm: sha256WithRSAEncryption
58:be:aa:1e:b9:4a:5b:60:25:ec:94:c9:f3:cc:60:27:e5:d3:
21:f9:71:87:ec:71:1f:a1:ea:12:a4:76:f7:7f:bc:cd:fe:ac:
8b:56:09:41:86:a7:2e:d5:b7:53:f2:2b:00:97:2c:72:ee:46:
ed:fa:d6:bd:99:1d:21:bb:ae:b8:f1:75:a6:a6:f4:dd:f1:1b:
ee:42:17:16:57:8a:71:73:25:8a:b3:36:da:06:40:97:22:a2:
fd:c3:ea:48:1b:14:4d:a5:f4:9b:4a:da:db:f4:d7:1b:58:df:
58:4b:fb:c6:89:a9:44:8e:09:9d:27:3a:5c:38:31:55:44:be:
84:3c:7c:3d:df:75:09:ec:28:b8:43:91:a5:ba:55:43:4a:89:
e3:75:12:36:69:94:f2:06:58:c4:22:dc:18:59:61:fe:f5:0e:
10:1a:30:54:14:36:23:85:1e:de:d5:aa:c4:a2:82:a4:44:c6:
48:10:21:4f:b8:27:8c:62:d0:11:04:75:5c:74:57:c4:e9:c3:
dd:41:04:3c:23:e0:94:3c:be:d3:e3:4f:35:46:c3:2f:e7:24:
b4:bd:5b:08:da:34:da:83:b6:ac:cd:a0:05:18:77:f4:9e:67:
da:65:aa:e9:fc:64:64:9a:fd:11:a2:6a:d1:a5:6a:b0:4a:25:
b9:18:39:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:14 2023 by rpki-client on console-fra.rpki-client.org