Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/55D387BCFE5C11EFAC82C181C4F9AE02.roa
File: 55D387BCFE5C11EFAC82C181C4F9AE02.roa (raw, json)
Hash identifier: BXDB9E72EwnR8CUZxXbSk5J1hAgTnGg/I9qirr0mHEA=
Subject key identifier: 47:D9:07:43:76:97:79:CE:8C:A3:6D:2E:49:7F:52:4E:85:4E:F9:30
Certificate issuer: /CN=A9175F54/serialNumber=5DB57ED386039EA664D1EFF7570736D6F9F04C44
Certificate serial: EE
Authority key identifier: 5D:B5:7E:D3:86:03:9E:A6:64:D1:EF:F7:57:07:36:D6:F9:F0:4C:44
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XbV-04YDnqZk0e_3Vwc21vnwTEQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/55D387BCFE5C11EFAC82C181C4F9AE02.roa
Signing time: Tue 11 Mar 2025 09:36:41 +0000
ROA not before: Tue 11 Mar 2025 09:36:41 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 150774
IP address blocks: 36.50.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 238 (0xee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175F54
Validity
Not Before: Mar 11 09:36:41 2025 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=67d00428-2d9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f6:38:7b:b8:1d:be:49:84:c6:81:94:6a:e0:
a9:43:b1:eb:ff:f9:f5:a4:59:cd:8e:db:7e:7a:22:
df:6c:7a:c1:b7:a2:33:34:36:6d:68:10:0f:4a:7c:
c0:0d:9c:82:45:d4:39:8a:06:2c:55:6c:7f:ec:1a:
7e:6d:d3:de:66:9e:fe:1b:ba:c4:c6:cf:9f:2e:fb:
f7:e1:b1:58:69:76:ef:76:7f:af:eb:7b:fb:db:20:
e4:ac:a7:bb:6b:18:75:f2:e5:75:fa:61:24:03:38:
e1:57:63:3f:74:fe:56:38:bb:9f:c9:ac:51:85:07:
4f:de:4d:a3:74:c8:8e:6b:08:be:a0:38:53:6e:3d:
f6:f9:16:e6:4d:4d:ff:14:e3:05:21:7f:08:7a:2c:
44:40:c9:4b:23:26:43:64:e0:42:48:ca:a3:45:e9:
fd:34:bf:c6:18:b0:58:b2:12:88:40:fb:36:ac:b5:
01:b0:c6:f1:1b:47:0c:80:90:a1:46:cc:22:9e:a3:
e4:bf:cc:29:8e:4b:58:52:32:9a:40:ce:49:d7:dc:
be:65:4d:ee:05:c2:d2:19:b3:f3:3c:6b:49:11:d6:
28:a4:98:e6:20:64:2a:81:a3:28:3a:af:f4:f1:8f:
c7:b1:54:d0:9f:b4:c7:a0:ff:9d:c3:05:02:d5:e1:
32:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:D9:07:43:76:97:79:CE:8C:A3:6D:2E:49:7F:52:4E:85:4E:F9:30
X509v3 Authority Key Identifier:
keyid:5D:B5:7E:D3:86:03:9E:A6:64:D1:EF:F7:57:07:36:D6:F9:F0:4C:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XbV-04YDnqZk0e_3Vwc21vnwTEQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/55D387BCFE5C11EFAC82C181C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.50.8.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:47:74:ad:15:23:61:03:3d:9c:d2:13:2a:ea:a1:ac:27:a2:
09:2b:77:16:e8:47:81:d2:e8:79:37:60:84:c5:bb:e1:6a:70:
2e:d5:6b:a0:45:d7:47:cd:72:dd:0c:16:e0:4b:1a:6a:af:6c:
2a:49:af:b8:0c:f5:95:0a:90:2b:90:29:9f:8d:3a:99:86:48:
55:68:57:f6:2c:be:b1:d3:a9:28:12:6c:c3:8c:73:8e:ad:ef:
3c:83:82:95:3d:8c:d7:6d:e8:5a:3f:ef:84:93:38:5b:d6:86:
e5:a6:1b:f5:8b:61:c4:48:64:9e:df:3c:21:d0:4d:93:de:63:
d1:00:80:cc:85:eb:ad:df:e5:fc:59:a5:32:84:e7:33:33:05:
58:a2:c8:64:8e:84:66:e1:7a:46:06:21:cf:d1:5c:a8:c8:93:
c5:17:1a:7b:a7:8f:e3:16:e9:c1:4c:d8:94:4f:ff:36:95:57:
8f:ed:b7:0b:1e:fc:ac:4c:74:43:e1:37:99:de:dc:67:34:2c:
19:d1:2e:52:53:fc:54:c5:11:ba:21:97:e6:f3:f8:fe:b4:a3:
94:3c:3c:26:dc:eb:d2:57:92:78:72:a7:dc:2d:68:9e:46:9d:
34:4e:71:ff:ca:94:96:56:e8:04:48:ef:4a:4f:ae:6c:db:f6:
8a:bb:ed:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:16:37 2025 by rpki-client