Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916601E/FF4875BEF56011EF9C82B71AC4F9AE02/46497846F56111EFA41A451BC4F9AE02.roa
File: 46497846F56111EFA41A451BC4F9AE02.roa (raw, json)
Hash identifier: pt8m72qrunjWvL5P2n1H2INSnSMhY3pqoGlkmhbwXKc=
Subject key identifier: 48:15:44:F3:3D:0B:B1:C7:79:02:57:6A:C9:39:2F:5D:6A:DB:56:F9
Certificate issuer: /CN=A916601E/serialNumber=7DBF83AE5282C84EB0EFF55D5C1C67801CB645C4
Certificate serial: 04
Authority key identifier: 7D:BF:83:AE:52:82:C8:4E:B0:EF:F5:5D:5C:1C:67:80:1C:B6:45:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fb-DrlKCyE6w7_VdXBxngBy2RcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916601E/FF4875BEF56011EF9C82B71AC4F9AE02/46497846F56111EFA41A451BC4F9AE02.roa
Signing time: Thu 27 Feb 2025 23:20:12 +0000
ROA not before: Thu 27 Feb 2025 23:20:12 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 152162
IP address blocks: 36.50.83.0/24 maxlen: 24
163.61.246.0/24 maxlen: 24
2001:df3:46c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916601E
Validity
Not Before: Feb 27 23:20:12 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67c0f32c-a972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:dc:b3:51:a9:0e:a4:fc:82:a3:fd:f5:32:be:
38:e8:7a:ae:4c:51:7d:4c:ad:d1:d3:7b:c3:2f:b0:
f4:b8:3c:63:3b:73:92:97:16:c9:bb:17:8b:b0:b1:
91:a6:15:df:52:e4:e6:a8:55:12:a5:1b:dd:8e:39:
b3:e9:54:76:43:c1:1e:e5:89:c0:66:dc:d1:2c:38:
da:0c:28:89:1b:cc:29:7f:26:e5:a7:47:de:d7:b0:
f1:c5:bc:94:b5:0d:2c:5b:fc:cb:a5:ed:31:22:f6:
63:20:32:62:12:d5:15:47:30:02:c3:e0:5d:09:37:
e0:e7:4e:fa:f1:09:15:43:eb:79:54:3c:5b:83:97:
8e:f4:57:58:85:21:fa:33:8e:c1:2f:b2:8c:1d:b9:
07:16:bd:03:e4:40:cb:51:e6:fe:5c:75:7e:59:ab:
08:a8:a6:75:2b:a4:95:c7:ea:50:73:c2:9c:20:2e:
32:6d:8b:9c:d8:7f:65:c1:d5:7b:f0:4e:13:b0:f6:
ba:78:37:45:3b:d0:41:41:f9:4a:f6:48:d6:02:60:
b9:77:fa:f8:44:0d:6b:77:58:ee:60:ef:3e:58:42:
af:33:3d:f2:3a:1c:6e:47:b8:f4:9e:73:c7:6b:b9:
be:1b:d3:d1:55:6a:48:a1:77:76:2e:e1:f8:91:c0:
70:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:15:44:F3:3D:0B:B1:C7:79:02:57:6A:C9:39:2F:5D:6A:DB:56:F9
X509v3 Authority Key Identifier:
keyid:7D:BF:83:AE:52:82:C8:4E:B0:EF:F5:5D:5C:1C:67:80:1C:B6:45:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916601E/FF4875BEF56011EF9C82B71AC4F9AE02/fb-DrlKCyE6w7_VdXBxngBy2RcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fb-DrlKCyE6w7_VdXBxngBy2RcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916601E/FF4875BEF56011EF9C82B71AC4F9AE02/46497846F56111EFA41A451BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.50.83.0/24
163.61.246.0/24
IPv6:
2001:df3:46c0::/48
Signature Algorithm: sha256WithRSAEncryption
89:37:7e:e3:a4:bf:3a:c9:79:7a:78:d1:8a:37:22:82:f5:73:
21:fc:e2:a2:d3:02:59:91:db:cf:4c:b9:d4:73:f6:ce:7d:3f:
0f:ab:94:3c:fb:fc:0c:87:0b:08:9b:51:5c:0c:d4:72:31:75:
42:51:8e:de:f4:73:da:f5:31:a8:b1:59:97:90:f8:bf:ec:5c:
f3:dc:c7:f1:9d:06:18:43:ef:ba:0c:09:64:3b:a2:d7:7c:f0:
24:e9:64:91:97:2d:7f:f9:e1:78:c4:59:99:02:2f:ad:34:0d:
a1:9d:cf:0f:3c:b2:5f:5f:63:e0:4f:e2:a4:58:30:e2:8b:41:
8f:7f:a0:9f:f3:b2:06:be:30:e8:30:8e:b1:8f:d4:88:5d:12:
1d:02:1a:dd:47:4b:3a:6d:9e:bd:c6:7d:7a:00:dd:eb:9e:61:
66:de:4f:e5:08:b3:12:c9:4d:3e:7d:c4:12:d9:89:ae:cc:e6:
45:5b:93:a0:bd:86:90:61:00:ea:88:b2:75:78:f2:07:20:d2:
39:7a:74:82:b1:7a:af:44:58:79:29:f5:63:c5:6a:96:7d:6d:
de:65:85:02:da:36:6b:92:c2:f7:07:01:f0:5c:85:f4:95:5f:
fa:2d:4b:63:bc:62:6b:ec:3d:cb:1c:2f:fa:6e:12:ad:74:1d:
a8:cd:13:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:17:14 2025 by rpki-client