Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/44CA7E22F0D811EEA8D08633C4F9AE02.roa
File: 44CA7E22F0D811EEA8D08633C4F9AE02.roa (raw, json)
Hash identifier: nZ8knmFU4g4M4hAXkEi+bsMV/nWOaZQY4l6coiYGg+M=
Subject key identifier: 7B:52:77:21:E5:DF:2F:AD:B2:FF:7B:6B:FD:B6:D9:7C:71:F9:41:D2
Certificate issuer: /CN=A912E53C/serialNumber=7EDCE719258BEDF90AA86C9AEB08CDD31EEF577A
Certificate serial: B2
Authority key identifier: 7E:DC:E7:19:25:8B:ED:F9:0A:A8:6C:9A:EB:08:CD:D3:1E:EF:57:7A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftznGSWL7fkKqGya6wjN0x7vV3o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/44CA7E22F0D811EEA8D08633C4F9AE02.roa
Signing time: Fri 31 Jan 2025 05:19:31 +0000
ROA not before: Fri 31 Jan 2025 05:19:31 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 152183
IP address blocks: 36.50.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178 (0xb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E53C
Validity
Not Before: Jan 31 05:19:31 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=679c5d63-2213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:67:5b:48:c3:a2:50:1d:f8:0e:f2:15:b9:be:
a9:01:3c:c1:40:b9:bd:d0:e8:97:9c:70:28:89:f8:
35:1e:fa:3b:73:24:9e:a4:bd:d0:65:df:98:f1:cf:
f8:fc:be:54:23:af:ae:cd:46:32:62:97:63:7e:76:
cf:a9:7e:2e:80:87:57:b4:27:c9:9b:fa:e1:af:8a:
fd:8d:8c:1f:11:f1:04:f7:91:72:6f:84:d0:97:7c:
f0:7b:3a:fd:17:60:c4:89:c7:1d:e9:98:8e:58:f0:
79:65:21:0a:6a:c6:3d:52:78:04:fa:f4:3a:6d:b8:
38:c4:de:27:6d:64:f8:ce:4a:07:9a:7f:58:af:a0:
d1:dd:87:b8:c1:78:a4:a8:74:6d:a4:38:38:7a:aa:
09:96:bd:52:68:05:21:f4:5f:d1:53:bd:2c:e3:41:
81:7a:62:c1:d6:89:cb:f9:20:0d:9f:de:a3:5c:af:
ef:b6:02:59:0e:bd:9f:1c:2d:69:c5:34:7e:d2:36:
a9:86:c0:a2:14:da:15:27:86:38:17:5d:e1:a6:83:
a7:b2:1c:c7:1a:60:6e:dd:82:cc:06:04:2e:06:30:
5f:6e:af:40:25:f7:28:eb:ea:64:dd:50:7b:27:2d:
57:ca:29:42:43:cb:16:f9:de:07:4f:75:41:5e:80:
e2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:52:77:21:E5:DF:2F:AD:B2:FF:7B:6B:FD:B6:D9:7C:71:F9:41:D2
X509v3 Authority Key Identifier:
keyid:7E:DC:E7:19:25:8B:ED:F9:0A:A8:6C:9A:EB:08:CD:D3:1E:EF:57:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftznGSWL7fkKqGya6wjN0x7vV3o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/44CA7E22F0D811EEA8D08633C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.50.147.0/24
Signature Algorithm: sha256WithRSAEncryption
46:fd:32:7b:a7:89:5f:96:58:e8:aa:e3:ae:9e:c8:bb:19:66:
4b:70:9d:08:19:23:41:33:22:58:a0:cb:99:e0:39:1c:c6:88:
75:de:c9:e4:86:e7:50:8b:b3:0a:0b:ce:4f:01:8f:a2:1f:bd:
66:89:54:d2:b1:99:4e:e9:74:4a:11:5e:0f:d1:6c:24:34:85:
82:89:fb:8e:58:74:32:f4:16:89:c3:ba:c2:41:b2:76:d2:17:
7c:26:a5:ec:ba:58:06:04:b6:aa:d4:4f:20:09:24:59:de:b0:
48:6d:77:69:a7:25:31:c9:37:ef:91:db:79:75:01:91:e0:54:
a0:94:b2:6f:aa:67:de:0e:b7:cd:1a:e0:73:b9:5c:e7:96:3e:
67:26:12:cd:3b:30:e9:eb:1e:36:16:a9:ad:e1:b1:3b:31:7c:
89:4e:fb:5b:ee:80:e7:72:9b:0f:55:32:41:b4:c8:c1:0f:57:
2e:93:53:8f:44:33:60:38:36:ae:bc:9e:e8:b4:c2:9f:f8:63:
68:bd:78:4c:11:9a:33:77:d2:40:6f:37:9c:83:64:03:8c:2c:
07:28:6a:e0:0d:1c:52:53:96:9d:9a:e2:e1:86:b5:20:fd:37:
af:d1:fe:fe:91:9a:09:ea:1b:11:55:e9:bb:86:de:db:68:0c:
12:e7:49:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:00:58 2025 by rpki-client