Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/5ED1D43CFCD011EFAA555463C4F9AE02.roa
File: 5ED1D43CFCD011EFAA555463C4F9AE02.roa (raw, json)
Hash identifier: r4XCFJrgYUC98B6CDbbdWPhjop95QGhpqGyHhhJg7a0=
Subject key identifier: 77:FD:FA:EC:97:63:6D:49:B8:8B:7B:7D:2D:EA:39:92:E6:82:A4:56
Certificate issuer: /CN=A91F34BF/serialNumber=73BDB2A02BCBEC3C9000F65F705C96E8080E9730
Certificate serial: F0
Authority key identifier: 73:BD:B2:A0:2B:CB:EC:3C:90:00:F6:5F:70:5C:96:E8:08:0E:97:30
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c72yoCvL7DyQAPZfcFyW6AgOlzA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/5ED1D43CFCD011EFAA555463C4F9AE02.roa
Signing time: Sun 09 Mar 2025 10:22:15 +0000
ROA not before: Sun 09 Mar 2025 10:22:14 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 139053
IP address blocks: 36.50.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 240 (0xf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F34BF
Validity
Not Before: Mar 9 10:22:14 2025 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=67cd6bd6-9321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1b:1a:b0:b3:d5:14:e7:88:f2:0b:78:e0:d6:
5b:c1:dc:1f:6c:d2:98:cf:f4:ed:ea:3a:d8:9c:06:
8c:c6:b4:a4:79:45:a4:a9:95:fd:7e:12:bc:cf:91:
27:e3:dd:a2:a3:90:df:9b:95:1c:82:74:a6:70:e0:
46:d1:cb:3d:1f:94:df:c1:85:69:95:96:81:0c:49:
28:36:86:41:45:6d:e1:70:76:06:f4:68:c9:07:d7:
e2:5f:9f:9b:c1:92:4e:8f:47:1a:a6:8c:8a:9e:d9:
80:80:bb:98:e9:f3:0c:81:10:75:e4:90:68:f3:11:
3b:13:33:54:a4:ca:6a:76:2c:9b:7c:96:f5:76:dc:
a3:22:a1:ca:65:46:26:1b:e4:18:18:a3:f4:08:26:
62:65:84:e8:31:8c:62:3e:bc:c7:b8:a5:da:29:d8:
67:6e:6f:bc:c2:58:2b:1c:47:4c:94:45:40:09:e5:
5d:e6:af:a5:98:3a:ad:4c:61:cf:6f:da:38:77:41:
a3:65:47:dd:74:dc:52:d4:86:c7:cc:68:76:19:0f:
4d:29:52:54:26:f5:48:1e:eb:63:08:9a:59:d1:53:
5c:a4:7e:fa:23:f7:6b:c1:94:c6:e7:8d:63:82:ac:
ee:76:1d:f8:31:59:28:97:97:a8:3f:22:13:d3:f5:
d5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:FD:FA:EC:97:63:6D:49:B8:8B:7B:7D:2D:EA:39:92:E6:82:A4:56
X509v3 Authority Key Identifier:
keyid:73:BD:B2:A0:2B:CB:EC:3C:90:00:F6:5F:70:5C:96:E8:08:0E:97:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c72yoCvL7DyQAPZfcFyW6AgOlzA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/5ED1D43CFCD011EFAA555463C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.50.117.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:0d:b7:be:1b:b7:29:a8:e2:5e:d1:dd:65:45:70:cf:26:c6:
cb:50:5f:6f:4c:de:70:8e:35:50:63:bd:b1:c4:a7:2a:81:42:
50:93:2b:ba:9c:74:66:6f:3a:d8:c6:7a:16:f4:79:95:14:d9:
55:c4:a4:16:cb:59:3a:97:76:52:5a:49:23:32:9f:10:1b:47:
0b:d9:04:26:a3:76:81:5a:23:9a:a8:8c:93:d6:58:bf:41:eb:
12:41:a0:94:c0:ef:ff:e6:e2:e6:9e:34:6b:60:6b:59:2e:ab:
41:ec:21:0f:db:3c:7e:b5:43:51:88:c5:a8:b1:1c:dd:3f:f3:
53:28:0f:29:22:ae:12:62:5a:70:90:06:72:b8:44:77:90:ff:
62:c8:53:38:3e:90:9b:be:7b:f2:8c:92:ce:5b:c8:8e:bf:4c:
46:c8:69:0a:5f:59:81:df:5b:8e:84:2e:55:6c:c5:83:85:e0:
d6:f6:e1:b7:eb:87:f6:7e:db:1d:17:db:ea:b0:12:27:dd:98:
8a:08:a2:8a:2f:57:8b:29:17:eb:4f:44:cd:b6:02:89:46:7d:
2d:32:b1:26:44:ab:a4:66:61:71:23:5c:0c:7f:89:04:67:d4:
b6:7a:f5:50:7c:f4:f8:e7:8b:4e:55:ff:7b:c3:0a:7f:61:b0:
6f:15:75:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:34:44 2025 by rpki-client