Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/020CCB128E9011EEB7C5651BC4F9AE02.roa
File: 020CCB128E9011EEB7C5651BC4F9AE02.roa (raw, json)
Hash identifier: Ftqlgd8k9h+7jvDiAqF4wkjpcUSN8GhKRQccLRNHlws=
Subject key identifier: 93:C0:84:5D:57:50:F4:FA:ED:08:8A:9E:2D:89:F8:7A:99:6F:DA:CC
Certificate issuer: /CN=A911A7C2/serialNumber=FF2EDE94D307BC2389A4B739592A657F7161CCA2
Certificate serial: E3
Authority key identifier: FF:2E:DE:94:D3:07:BC:23:89:A4:B7:39:59:2A:65:7F:71:61:CC:A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_y7elNMHvCOJpLc5WSplf3FhzKI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/020CCB128E9011EEB7C5651BC4F9AE02.roa
Signing time: Mon 27 Jan 2025 03:56:10 +0000
ROA not before: Mon 27 Jan 2025 03:56:10 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 137967
IP address blocks: 36.50.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 227 (0xe3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911A7C2
Validity
Not Before: Jan 27 03:56:10 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=679703d9-ef53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ce:82:aa:d0:ac:e6:eb:26:1f:af:64:bc:64:
36:b2:c1:58:1c:33:e0:a4:d0:03:d0:b9:7a:ab:4e:
81:91:a1:de:02:56:d4:ab:3e:c4:da:f2:1b:fb:ef:
17:0f:55:b8:94:fe:92:ba:ed:86:f3:b6:cc:68:ca:
39:7c:72:e1:7b:98:c4:67:1a:68:b9:ae:f9:df:40:
b2:92:f6:21:07:47:e9:03:af:76:49:a6:76:fb:05:
b0:eb:69:0a:ba:39:b4:b0:6f:d8:a6:ce:7d:4d:c1:
b9:f5:60:54:b4:c6:52:67:02:f6:18:1d:32:38:5e:
d9:b8:a2:ff:5e:d2:4f:43:4f:97:31:8b:68:47:32:
56:ec:69:84:22:e7:e9:a5:c6:70:85:e9:94:ee:27:
ed:b2:80:eb:2f:78:aa:8c:e9:bd:40:9c:04:f1:15:
ae:32:19:54:3d:75:17:64:38:a0:59:ce:48:a1:56:
50:81:9d:98:83:65:c0:d9:5a:d1:0b:fd:a8:93:3d:
a2:1b:e2:0f:60:43:ee:13:fe:2a:3c:d7:5c:30:40:
fa:33:ce:99:27:d3:bf:39:35:72:04:c1:ae:31:0b:
9e:c8:bb:3d:db:69:72:ff:d2:e9:e8:a2:a0:21:08:
88:08:67:90:58:a7:10:24:99:90:03:3d:60:34:a8:
6b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:C0:84:5D:57:50:F4:FA:ED:08:8A:9E:2D:89:F8:7A:99:6F:DA:CC
X509v3 Authority Key Identifier:
keyid:FF:2E:DE:94:D3:07:BC:23:89:A4:B7:39:59:2A:65:7F:71:61:CC:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_y7elNMHvCOJpLc5WSplf3FhzKI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/020CCB128E9011EEB7C5651BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.50.11.0/24
Signature Algorithm: sha256WithRSAEncryption
78:e4:9e:2c:3c:7c:fa:b4:3d:c5:a9:89:1e:72:6e:9b:b2:50:
0c:cd:80:ff:4a:ac:43:6e:7d:b9:eb:3d:1f:22:73:46:df:0d:
0f:11:fe:99:08:b1:f7:a3:b4:69:48:93:fc:06:b0:7e:48:3e:
42:28:6e:f6:b2:0c:3e:3e:d6:1f:1d:d4:26:ba:cf:41:90:b7:
b8:f7:b9:86:eb:2c:5f:8c:1c:25:cc:4c:2e:03:58:80:6b:bd:
aa:8c:87:17:00:74:c6:86:fb:1e:3e:c3:d3:76:3e:e1:a0:2a:
e5:4a:8c:08:e3:d8:45:3c:c7:2d:f7:5a:57:06:7c:06:db:76:
a0:23:47:78:04:e1:10:96:97:3b:d8:e1:57:d0:50:53:4b:9c:
f1:c4:72:8b:09:a1:f6:00:74:ca:41:c1:e1:9f:08:1c:8b:2a:
ff:3b:1e:2b:be:e3:5a:62:3e:1f:b1:c0:3c:fd:38:fd:37:28:
41:0b:e4:f7:28:8c:a1:b1:97:ac:d3:d2:61:3e:c5:9a:e5:b1:
e3:4e:f3:99:00:99:20:ee:2d:31:d6:2e:25:7b:3e:09:5a:29:
d9:3f:d3:21:2f:18:85:03:4b:db:2b:5d:65:b7:39:3e:99:00:
41:b2:12:fd:dd:78:0c:a8:e7:df:be:d3:cc:3d:a9:91:c0:30:
e3:52:cb:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:16:18 2025 by rpki-client