Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/6A4C0AE89B1111EEADD68539C4F9AE02.roa
File: 6A4C0AE89B1111EEADD68539C4F9AE02.roa (raw, json)
Hash identifier: 2DQNtDG5SlXbYPNKHWvlCf1LoqXbXRDiCCKULGtJnHM=
Subject key identifier: B8:BC:61:70:06:7F:94:7A:92:14:29:46:F5:E5:F9:D8:DA:F7:9B:E1
Certificate issuer: /CN=A911BD54/serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
Certificate serial: 2504
Authority key identifier: 2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/6A4C0AE89B1111EEADD68539C4F9AE02.roa
Signing time: Tue 31 Dec 2024 15:53:45 +0000
ROA not before: Tue 31 Dec 2024 15:53:45 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 55932
IP address blocks: 147.50.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9476 (0x2504)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BD54
Validity
Not Before: Dec 31 15:53:45 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67741389-ae80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:09:eb:a6:b1:28:5c:d5:9d:04:81:05:56:9c:
81:88:25:b7:06:93:47:9b:6c:20:a0:2f:e1:82:22:
78:94:48:22:74:06:4d:65:cc:40:a3:2d:e0:c3:07:
25:4c:46:67:93:73:cf:01:28:3f:c1:cc:27:da:b4:
6b:cd:25:8f:ed:11:ba:d2:37:af:d9:1c:c9:2b:a0:
e5:94:a9:1e:de:77:69:48:94:79:33:7d:1d:bd:90:
dc:4b:47:01:db:a9:62:e3:d3:2a:22:ae:3f:69:ac:
8c:b0:e9:76:43:67:0f:6a:fe:09:a1:44:b6:1c:8d:
8c:68:65:53:78:db:36:68:56:f7:44:bd:00:fd:2a:
4f:57:39:b3:45:10:e7:31:a9:bc:4d:bc:08:32:a5:
22:95:b7:a2:d9:bd:8b:3f:1f:ec:90:35:49:b8:04:
b6:a1:32:ac:ab:b9:50:3a:48:6c:3f:c4:bf:32:96:
14:05:cd:9a:40:db:30:1d:0a:63:e4:60:5b:e9:a1:
b6:af:54:84:76:b3:a1:e7:a3:8f:97:32:ce:f6:05:
1e:68:81:de:b8:0d:25:ff:d3:b2:0d:5e:54:78:c4:
48:70:27:4f:71:a1:9b:b3:38:a9:9b:52:86:c6:d8:
d9:96:0c:9b:d2:97:41:a8:98:c7:b2:51:84:83:bf:
c1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:BC:61:70:06:7F:94:7A:92:14:29:46:F5:E5:F9:D8:DA:F7:9B:E1
X509v3 Authority Key Identifier:
keyid:2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/6A4C0AE89B1111EEADD68539C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
147.50.96.0/24
Signature Algorithm: sha256WithRSAEncryption
18:d4:75:20:f0:29:df:32:cc:89:49:65:82:5a:ce:ce:14:cd:
91:cd:f5:08:62:f2:bf:ca:d3:7e:f9:0e:34:e4:7a:85:90:89:
0b:47:97:a8:ce:6c:ac:f7:f0:ec:b7:4e:f7:36:76:b7:1b:c1:
cb:e7:71:6f:86:eb:37:7c:85:44:67:b2:cd:ce:f0:8b:a0:b8:
5e:4c:cb:b6:8a:c4:dd:dd:3d:07:fe:d9:1b:6f:78:4e:b7:07:
a9:31:59:04:eb:c7:0c:91:08:12:93:33:64:88:de:de:c4:9a:
de:d9:84:45:ba:e4:14:e0:af:73:8a:1a:ed:e7:c6:e0:d5:cc:
18:88:16:91:88:0d:7e:24:ac:cf:9a:bd:bb:c2:17:d2:2d:9a:
cb:35:d0:f5:01:6e:97:1e:f7:2f:ce:36:4d:46:3d:12:c9:c2:
99:97:8b:a2:bb:a4:4c:aa:38:94:2c:0b:34:b5:5e:59:57:49:
a9:03:c6:43:5d:0e:64:19:6b:57:49:a1:36:34:13:f2:75:da:
10:a2:81:c7:64:61:6f:72:31:5b:6f:1c:08:fb:cd:06:64:6b:
26:4b:0d:6e:9c:be:54:24:9e:90:7d:98:9c:9a:7b:27:b2:a8:
63:13:26:e3:0d:3b:6b:c9:d8:d3:ef:bc:29:37:00:6c:09:6d:
fa:b0:60:5a
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICJQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUJENTQxMTAvBgNVBAUTKDJGNTlDRURBNjE0ODE1RjQ2MzJGMzlENUEzMUMyQTUx
NDhDNkI0RkEwHhcNMjQxMjMxMTU1MzQ1WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02Nzc0MTM4OS1hZTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9AnrprEoXNWdBIEFVpyBiCW3BpNHm2wgoC/hgiJ4lEgidAZNZcxAoy3gwwcl
TEZnk3PPASg/wcwn2rRrzSWP7RG60jev2RzJK6DllKke3ndpSJR5M30dvZDcS0cB
26li49MqIq4/aayMsOl2Q2cPav4JoUS2HI2MaGVTeNs2aFb3RL0A/SpPVzmzRRDn
Mam8TbwIMqUilbei2b2LPx/skDVJuAS2oTKsq7lQOkhsP8S/MpYUBc2aQNswHQpj
5GBb6aG2r1SEdrOh56OPlzLO9gUeaIHeuA0l/9OyDV5UeMRIcCdPcaGbszipm1KG
xtjZlgyb0pdBqJjHslGEg7/BywIDAQABo4IClTCCApEwHQYDVR0OBBYEFLi8YXAG
f5R6khQpRvXl+dja95vhMB8GA1UdIwQYMBaAFC9ZztphSBX0Yy851aMcKlFIxrT6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkQ1NC9EOTAxMTI4NDNG
NEYxMUU1OTUxMkUwNENDNEY5QUUwMi9MMW5PMm1GSUZmUmpMem5Wb3h3cVVVakd0
UG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0wxbk8ybUZJRmZSakx6blZveHdxVVVqR3RQby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUJENTQvRDkwMTEyODQzRjRGMTFFNTk1MTJFMDRDQzRGOUFFMDIvNkE0QzBBRTg5
QjExMTFFRUFERDY4NTM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBACTMmAwDQYJKoZIhvcNAQELBQADggEBABjUdSDwKd8yzIlJ
ZYJazs4UzZHN9Qhi8r/K0375DjTkeoWQiQtHl6jObKz38Oy3Tvc2drcbwcvncW+G
6zd8hURnss3O8IuguF5My7aKxN3dPQf+2RtveE63B6kxWQTrxwyRCBKTM2SI3t7E
mt7ZhEW65BTgr3OKGu3nxuDVzBiIFpGIDX4krM+avbvCF9Itmss10PUBbpce9y/O
Nk1GPRLJwpmXi6K7pEyqOJQsCzS1XllXSakDxkNdDmQZa1dJoTY0E/J12hCigcdk
YW9yMVtvHAj7zQZkayZLDW6cvlQknpB9mJyaeyeyqGMTJuMNO2vJ2NPvvCk3AGwJ
bfqwYFo=
-----END CERTIFICATE-----
Generated at Sun Apr 6 14:22:09 2025 by rpki-client