Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/29084344D3CD11EF8A4E905AC4F9AE02.roa
File: 29084344D3CD11EF8A4E905AC4F9AE02.roa (raw, json)
Hash identifier: D4PagMQaqRoiI61uWZmtkYG+TkU8dPm/OsL26ameiEA=
Subject key identifier: 18:AC:07:BF:08:0B:74:D3:CB:43:85:BC:D7:C0:99:16:1C:88:98:45
Certificate issuer: /CN=A91B89AA/serialNumber=277F12244A50BC654EE563FE739FE4EB719966B6
Certificate serial: 30
Authority key identifier: 27:7F:12:24:4A:50:BC:65:4E:E5:63:FE:73:9F:E4:EB:71:99:66:B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J38SJEpQvGVO5WP-c5_k63GZZrY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/29084344D3CD11EF8A4E905AC4F9AE02.roa
Signing time: Fri 21 Feb 2025 09:10:16 +0000
ROA not before: Fri 21 Feb 2025 09:10:16 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 152181
IP address blocks: 36.50.144.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48 (0x30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B89AA
Validity
Not Before: Feb 21 09:10:16 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67b842f7-bcd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a8:64:05:3f:a8:68:4e:d0:b6:21:4a:50:a3:
43:c9:50:91:82:79:42:1e:df:ac:02:c6:05:33:77:
d1:34:01:13:45:7f:4c:3e:14:2d:19:66:d2:38:2c:
0a:c8:ac:53:1a:e6:69:49:fa:9f:19:b1:d0:a7:d0:
d5:90:02:c2:5d:ef:e5:33:3c:3c:c9:31:b2:3b:75:
db:66:dc:43:e1:c9:84:ee:f5:fb:ee:ac:ce:2e:33:
af:d2:7f:3b:24:32:24:44:12:60:7b:87:be:6a:87:
91:43:df:c2:ba:a9:d6:74:26:7f:7f:39:f2:c8:fc:
74:4d:b2:a0:38:a6:75:e2:02:5d:87:95:a1:e4:43:
59:3e:e1:d7:95:24:15:75:ad:91:5b:da:b0:d0:3d:
6e:57:0f:b3:8f:e0:68:66:6e:f7:0c:6b:77:d5:75:
53:d1:8a:b1:e6:9c:fa:f1:82:83:ac:72:85:b6:76:
91:92:22:96:34:bd:59:fc:3f:3e:f0:92:86:73:91:
44:de:30:13:2f:46:c6:74:44:07:c4:1a:79:dd:c2:
4f:d6:ed:77:71:6c:de:8f:c2:ea:ff:b7:50:eb:5a:
be:13:82:3d:f0:59:9a:78:00:11:ec:b5:66:1c:a3:
92:32:21:ee:97:0d:a7:f2:1a:20:ae:21:1f:e6:fc:
f8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:AC:07:BF:08:0B:74:D3:CB:43:85:BC:D7:C0:99:16:1C:88:98:45
X509v3 Authority Key Identifier:
keyid:27:7F:12:24:4A:50:BC:65:4E:E5:63:FE:73:9F:E4:EB:71:99:66:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J38SJEpQvGVO5WP-c5_k63GZZrY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/29084344D3CD11EF8A4E905AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.50.144.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:31:4d:a1:9f:51:96:66:de:82:ba:87:bc:c9:2e:bc:16:01:
be:fe:80:4b:b3:61:a3:8e:08:8c:ba:95:50:88:73:08:51:ac:
73:06:6b:a4:50:2f:40:6a:8d:2d:a8:5a:df:fd:ce:62:b5:75:
88:0f:03:2b:f4:51:c9:ce:11:7a:e1:d6:a2:9f:02:f1:12:16:
65:99:39:a8:77:09:b0:e3:43:2e:82:4a:e4:54:a0:4d:06:5f:
1f:87:85:63:0b:53:d6:88:13:e4:81:3d:b8:f9:f6:f1:ce:2d:
82:ae:f5:ce:2f:09:94:49:88:4d:3e:0b:78:cb:6f:39:ec:50:
00:ac:d3:18:b4:5b:b1:2c:ee:b9:34:8b:32:5e:0a:a3:e6:5b:
65:8a:60:bb:fe:87:9f:19:1a:0d:22:13:24:b2:1d:f9:87:fa:
21:3f:21:b0:4e:72:f5:5e:18:82:36:df:80:7b:30:f5:ed:11:
da:0c:db:27:cc:34:68:73:b3:af:0d:5a:e0:c5:70:96:6d:8b:
9d:01:18:ad:ba:71:02:77:6c:32:38:98:3b:2a:f0:74:fd:d1:
89:3e:d6:e3:b4:a6:1d:6d:25:ba:d6:8f:d3:d2:94:da:49:86:
ed:01:10:d6:e6:ac:d8:67:2d:fc:8b:5f:46:83:f3:94:10:e3:
78:13:b9:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:12:18 2025 by rpki-client