Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/50CC42001E0111E9A590C837C4F9AE02.roa
File: 50CC42001E0111E9A590C837C4F9AE02.roa (raw, json)
Hash identifier: pUr01Q6+0bieVZDBED5IDVaV2vlfiF2WTTp/R1a5Xh8=
Subject key identifier: 37:7A:13:37:D9:CD:7A:55:FC:C5:FB:05:09:D6:B9:3C:B2:C3:BA:B0
Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial: 38BE
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/50CC42001E0111E9A590C837C4F9AE02.roa
Signing time: Tue 16 Jul 2024 14:31:23 +0000
ROA not before: Tue 16 Jul 2024 14:31:23 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 45958
IP address blocks: 210.86.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14526 (0x38be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137ABC
Validity
Not Before: Jul 16 14:31:23 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=6696843b-d492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4c:5f:8e:4d:c4:34:f7:ec:c9:76:ed:2b:f4:
b8:0f:82:a1:b0:14:39:a1:60:e6:4b:49:9c:5c:06:
29:9d:bf:f4:45:6d:87:9a:43:5e:f9:2f:20:cf:b4:
b6:32:25:9c:f0:f6:09:97:17:39:35:73:2e:09:cc:
db:1d:c2:db:25:78:a0:79:b3:58:57:31:27:60:2b:
54:6e:88:3c:5b:de:e6:9c:c5:ab:5a:b3:71:e6:2f:
8f:bc:de:50:fa:c4:27:4e:3b:21:0a:c4:32:c9:84:
b6:84:8d:3e:f4:85:32:60:da:c7:c5:21:0e:f4:20:
18:bb:91:d2:02:ed:26:3c:d8:7c:a5:6e:10:9c:37:
07:b6:d1:a6:93:e3:2c:d6:7f:da:aa:a2:b5:55:c1:
19:5b:87:32:a3:a9:03:26:44:01:49:be:d2:04:66:
15:e9:d3:d1:3a:39:d5:12:a6:fa:c4:dc:8e:a1:ea:
96:7f:68:06:ac:a5:a7:a8:a6:d0:6d:00:52:da:3e:
76:29:9b:a5:7c:88:d6:40:0d:06:72:4d:c3:8f:a7:
dc:5a:51:d8:67:46:ed:87:2e:ad:c1:28:a6:bb:bf:
90:bb:89:1c:03:14:a2:b3:57:5a:16:b8:a3:6d:45:
04:ee:28:5a:fe:93:84:63:28:02:c5:db:3f:73:35:
96:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:7A:13:37:D9:CD:7A:55:FC:C5:FB:05:09:D6:B9:3C:B2:C3:BA:B0
X509v3 Authority Key Identifier:
keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/50CC42001E0111E9A590C837C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.86.204.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:d4:6b:43:dc:47:11:26:75:c3:d4:6d:36:71:c0:be:11:6e:
f9:53:e1:ec:bd:83:bd:e0:b8:85:ad:34:1b:bb:b2:78:70:8b:
36:7f:94:d8:91:f9:f7:71:5b:b4:76:16:84:8a:64:5e:94:a9:
3a:85:a7:88:2d:9c:52:a9:58:6c:bc:e9:65:a5:15:53:42:e0:
73:35:04:e9:da:a9:6b:ac:9d:ac:36:69:3b:31:47:14:63:8c:
99:ac:a3:b7:b5:77:78:d2:ba:16:05:29:dc:54:68:48:f2:45:
96:2c:dc:c6:8b:39:29:f1:02:24:fb:9e:b0:ac:a1:c3:33:47:
d2:fc:c6:77:3a:82:94:6a:26:49:3c:e2:d4:e2:a7:9e:1d:fe:
0a:18:27:e0:99:c0:24:54:1e:c9:d4:e8:20:b0:c6:d8:bd:9b:
11:1a:48:95:8f:ea:48:58:95:a7:bd:78:5f:36:bb:b9:ef:8b:
8e:22:f3:a9:2f:43:27:28:f3:e7:66:52:e5:3a:b7:5f:0e:71:
ae:23:52:7a:c2:58:11:9f:e8:98:67:98:84:ce:1d:78:05:f6:
fb:24:44:83:12:99:fa:f6:23:48:cf:28:3e:f5:1d:60:b8:09:
0b:f3:22:f4:ef:fe:8c:e3:c7:43:58:7f:a1:72:b6:00:81:ff:
1c:c2:b4:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:24:46 2025 by rpki-client