Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/50F0AF8EB2BE11EFA108946DC4F9AE02.roa
File: 50F0AF8EB2BE11EFA108946DC4F9AE02.roa (raw, json)
Hash identifier: MWqHxm4EUBLTsZ0EUDg6aYtdnfWY5OwTTnXPxS3oZHM=
Subject key identifier: 2F:56:9C:5F:79:F9:E7:C2:5E:35:B7:E1:71:EC:07:F3:E2:4D:CE:7B
Certificate issuer: /CN=A91E3C76/serialNumber=5F02248C9C5C94F153C59F56772C5FDA7F8D71E7
Certificate serial: 87
Authority key identifier: 5F:02:24:8C:9C:5C:94:F1:53:C5:9F:56:77:2C:5F:DA:7F:8D:71:E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/50F0AF8EB2BE11EFA108946DC4F9AE02.roa
Signing time: Tue 25 Feb 2025 07:58:36 +0000
ROA not before: Tue 25 Feb 2025 07:58:36 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 153035
IP address blocks: 203.12.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135 (0x87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3C76
Validity
Not Before: Feb 25 07:58:36 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67bd782c-9624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:7a:c2:18:b9:a9:fc:97:97:82:f4:b6:e2:65:
aa:e0:13:6b:f7:cb:a0:a7:dd:dd:90:00:c8:47:2d:
05:a6:b0:16:76:a5:f9:70:14:d3:a3:4a:b6:82:e6:
72:4a:4f:f5:90:80:87:32:73:d3:9e:f0:b4:a8:71:
0d:ec:24:7b:2e:a4:f1:8f:9d:5f:7c:a6:54:9d:ba:
df:34:5d:9d:3f:b0:10:97:a6:04:89:10:c6:13:73:
19:17:e6:1a:2e:b1:2a:c6:72:b4:44:3e:f3:54:df:
d4:d6:98:4f:91:34:2c:6e:59:de:92:ae:f4:b7:32:
ea:b4:da:a6:4b:7e:2c:e0:a7:66:36:8f:0e:5b:d0:
84:bc:45:f9:49:91:69:09:f3:43:fb:dd:a5:f3:31:
e0:22:36:e1:44:bc:12:b9:a6:7b:44:06:d3:60:cb:
a4:b2:f5:ae:68:2c:fa:fb:40:0a:3e:54:07:98:b9:
36:1b:bc:8b:f8:42:15:ab:05:6f:0c:a5:75:78:fd:
19:96:5e:3b:95:db:d7:fb:d5:3d:ff:bd:b2:0b:c8:
40:aa:2e:76:38:0f:ba:17:62:2a:3c:b4:bc:5b:80:
1e:89:9a:8b:af:43:3d:c3:4a:28:e6:04:79:17:1c:
12:c1:f8:5f:f7:bf:1f:99:c0:10:0c:8b:1f:1f:f7:
67:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:56:9C:5F:79:F9:E7:C2:5E:35:B7:E1:71:EC:07:F3:E2:4D:CE:7B
X509v3 Authority Key Identifier:
keyid:5F:02:24:8C:9C:5C:94:F1:53:C5:9F:56:77:2C:5F:DA:7F:8D:71:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/50F0AF8EB2BE11EFA108946DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.12.249.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:e7:5f:4b:30:d6:26:3e:66:9c:c7:6f:3c:65:9a:71:2c:7d:
7b:8a:a9:29:0d:d5:f5:94:8a:70:41:54:d8:6e:d5:0d:51:ef:
30:e4:eb:0e:29:42:2f:71:a0:ea:50:34:29:83:4f:bc:8d:40:
d7:db:e5:75:69:9b:fb:a0:fc:3b:74:aa:df:16:81:7e:6b:56:
c9:d0:34:3c:c2:de:a1:38:54:02:68:33:0f:6c:d9:25:33:41:
b5:97:b0:0f:3a:1f:92:4e:58:b2:ae:27:54:91:b9:44:10:b7:
57:f3:f1:a8:b4:f1:8c:d6:47:3e:ff:63:70:80:77:13:6a:02:
9a:20:60:37:99:84:99:cd:ae:fa:04:2c:4d:69:65:3c:04:8b:
40:cb:48:06:e7:89:94:36:93:ae:63:1e:41:cb:bc:0e:f9:19:
60:03:39:45:dc:b5:ac:a1:11:39:2d:fd:09:62:3b:2b:39:07:
39:0b:40:57:a7:03:8e:cf:81:ce:4c:0c:d3:f6:c7:93:65:28:
4a:f5:9e:24:b0:a9:9c:44:b6:1c:ff:34:91:18:ac:8e:7a:f3:
94:11:ec:08:e5:7f:e3:36:3d:48:35:16:d4:ec:14:66:c1:1d:
5a:c6:d0:f0:8d:b8:f2:ec:f6:bd:16:35:5c:ea:52:52:e1:fe:
7e:e6:55:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 18:37:25 2025 by rpki-client