Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913731F/81711ED89D6F11EEBBBC9180C4F9AE02/D0C91A8A9D6F11EEB2E31781C4F9AE02.roa
File: D0C91A8A9D6F11EEB2E31781C4F9AE02.roa (raw, json)
Hash identifier: mjEgv1nJJhzvJWuvXrnG7qogdqJh9rvMvDkYNa16u+Q=
Subject key identifier: D9:60:6A:4F:C0:C4:89:2C:EC:C8:36:CA:CA:9B:98:93:DD:9D:BC:9C
Certificate issuer: /CN=A913731F/serialNumber=5B75090E9EA04298B47BAF82FAA2280E5E36A4BF
Certificate serial: E9
Authority key identifier: 5B:75:09:0E:9E:A0:42:98:B4:7B:AF:82:FA:A2:28:0E:5E:36:A4:BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W3UJDp6gQpi0e6-C-qIoDl42pL8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913731F/81711ED89D6F11EEBBBC9180C4F9AE02/D0C91A8A9D6F11EEB2E31781C4F9AE02.roa
Signing time: Tue 25 Feb 2025 06:40:19 +0000
ROA not before: Tue 25 Feb 2025 06:40:19 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 152182
IP address blocks: 36.50.146.0/24 maxlen: 24
36.50.179.0/24 maxlen: 24
2401:5ba0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 233 (0xe9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913731F
Validity
Not Before: Feb 25 06:40:19 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67bd65d3-a3ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:75:0e:31:e8:8a:68:d0:a0:3a:9f:4c:b0:b8:
73:28:f3:b9:69:d3:6e:69:e7:e3:31:6a:c5:25:50:
48:77:3c:42:ee:b2:85:25:fc:1f:cc:0a:c7:ad:1c:
29:c2:3d:e8:cb:2f:39:ac:a9:9e:27:5e:51:d8:66:
04:d1:7c:8a:b1:15:ca:d5:33:6a:89:fc:a2:c9:3e:
f2:5b:69:b2:95:8a:c8:09:1b:0b:9c:48:da:f9:30:
58:6b:83:7a:34:d4:fb:e5:eb:c7:be:9a:9d:b2:06:
58:41:42:e8:5a:e3:54:dd:ce:83:a6:71:4d:eb:7b:
a0:cd:92:29:be:1c:d9:c9:5c:ef:64:03:85:4e:2f:
97:a6:24:80:54:b8:a3:15:fb:df:35:a9:cc:7c:e9:
b8:88:d0:3a:5a:63:56:71:82:78:a8:79:bb:3e:2c:
68:0f:be:7e:8e:c1:3c:72:27:d1:fe:9f:3b:03:82:
90:e0:32:90:74:89:a9:5f:e7:c4:05:2c:91:8e:b2:
3e:99:af:a6:84:93:d8:de:fc:2b:3e:65:88:ec:88:
b5:c0:6c:98:16:86:9e:95:a5:f4:cf:a5:dc:0f:d3:
98:b4:05:99:f6:50:e7:23:6f:4c:5a:ba:d2:84:70:
02:8c:99:64:8e:a4:25:a7:3e:c7:ed:1a:54:49:75:
53:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:60:6A:4F:C0:C4:89:2C:EC:C8:36:CA:CA:9B:98:93:DD:9D:BC:9C
X509v3 Authority Key Identifier:
keyid:5B:75:09:0E:9E:A0:42:98:B4:7B:AF:82:FA:A2:28:0E:5E:36:A4:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913731F/81711ED89D6F11EEBBBC9180C4F9AE02/W3UJDp6gQpi0e6-C-qIoDl42pL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W3UJDp6gQpi0e6-C-qIoDl42pL8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913731F/81711ED89D6F11EEBBBC9180C4F9AE02/D0C91A8A9D6F11EEB2E31781C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.50.146.0/24
36.50.179.0/24
IPv6:
2401:5ba0::/32
Signature Algorithm: sha256WithRSAEncryption
bc:82:7f:10:ae:38:ef:e7:f7:79:79:c3:f1:d0:bc:f1:0e:2d:
57:0f:1d:be:1b:3d:c3:2e:2e:58:55:30:62:a2:61:fa:8e:68:
33:75:05:18:56:69:bb:b7:41:e3:18:1e:20:c1:90:84:f1:f0:
79:eb:03:ed:c3:55:23:42:26:b2:a7:df:3b:35:32:d5:21:d2:
07:10:11:6b:a3:29:40:b0:0d:90:51:3b:f2:51:13:3b:38:ad:
d0:be:95:6b:48:65:df:52:f2:34:a6:67:ce:a0:93:38:45:af:
61:e9:4f:e4:55:14:db:49:47:bb:b4:f9:ec:8b:2b:b4:b9:61:
d5:a0:3b:fc:0c:c6:72:6d:a6:64:92:d1:7c:2d:4c:b5:2a:7f:
3f:b0:63:f9:ba:ff:af:86:d4:9f:11:df:ac:88:2f:34:44:63:
ec:19:70:38:7d:0e:4b:47:24:2b:6b:ef:26:a3:00:1a:25:b9:
29:61:af:15:9a:64:9b:48:c3:f3:89:19:f8:5d:b1:22:27:e7:
fc:10:63:0d:c5:97:c0:79:7f:07:dd:e3:ec:5a:63:ce:f7:5e:
77:cc:e1:73:4d:e3:f5:c6:da:83:03:9a:ef:1b:1b:ce:3e:1f:
63:49:3c:dc:45:70:d8:3f:96:b3:41:27:5e:f4:30:13:74:f3:
6f:9b:25:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:00:08 2025 by rpki-client