Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/37241BF4757911EFB0F87073C4F9AE02.roa
File: 37241BF4757911EFB0F87073C4F9AE02.roa (raw, json)
Hash identifier: MQ2LjF9njI2UrTrv78xw08blIqm2Tevfn5BFGasmulM=
Subject key identifier: BB:05:94:CE:11:6D:83:52:97:44:EA:4D:6A:0C:D1:47:F7:EE:2B:CE
Certificate issuer: /CN=A911A0AB/serialNumber=265703D85933F45D9B04DAB77237584FC92D9D44
Certificate serial: 45
Authority key identifier: 26:57:03:D8:59:33:F4:5D:9B:04:DA:B7:72:37:58:4F:C9:2D:9D:44
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/37241BF4757911EFB0F87073C4F9AE02.roa
Signing time: Wed 18 Sep 2024 04:48:15 +0000
ROA not before: Wed 18 Sep 2024 04:48:15 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 132200
IP address blocks: 49.50.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69 (0x45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911A0AB/serialNumber=265703D85933F45D9B04DAB77237584FC92D9D44
Validity
Not Before: Sep 18 04:48:15 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=66ea5b8f-818c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fc:f9:51:cc:58:39:cc:a3:21:d2:1f:ee:a6:
5c:2c:89:7a:d4:95:4c:cb:b2:cb:aa:18:b1:8c:c7:
7f:25:c8:66:2a:ba:b0:ef:09:a3:6e:e8:43:ec:03:
a2:6c:48:7b:66:96:37:2e:87:9c:30:70:27:5c:41:
5c:83:dc:b9:ef:b0:16:be:53:56:43:ab:fd:63:57:
dd:54:6d:d6:e2:ef:d0:98:e4:c4:35:50:53:84:bd:
35:31:6f:9f:78:37:66:88:bc:a6:d0:b1:6a:fd:c2:
96:b1:ea:2a:e1:21:ab:79:31:50:a9:48:4a:d1:78:
63:12:41:ee:42:17:43:18:62:c6:ac:89:63:12:04:
4e:ed:1c:d3:cc:5d:1f:d7:c8:3e:6e:1b:92:88:a7:
b3:78:19:37:2e:2e:50:1c:0a:87:86:75:ae:38:84:
f6:29:70:63:3e:23:0d:ed:73:3a:43:1f:79:6b:33:
f7:26:1a:51:ac:7d:ef:ae:ac:61:81:2e:3d:77:5f:
0c:6f:a6:73:ac:58:f3:fc:bd:3a:ef:11:04:4a:5f:
52:67:f7:2f:7f:ef:20:5d:1f:9d:0b:10:98:b6:2c:
77:3c:46:71:26:44:b4:2f:82:b5:3b:5c:9a:d7:e8:
ee:49:6d:56:56:ff:3d:69:b1:27:0a:e3:6d:11:72:
f6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:05:94:CE:11:6D:83:52:97:44:EA:4D:6A:0C:D1:47:F7:EE:2B:CE
X509v3 Authority Key Identifier:
keyid:26:57:03:D8:59:33:F4:5D:9B:04:DA:B7:72:37:58:4F:C9:2D:9D:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/37241BF4757911EFB0F87073C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.50.11.0/24
Signature Algorithm: sha256WithRSAEncryption
84:b0:6b:ec:96:73:2e:f6:96:52:ea:e9:8f:85:52:26:b5:a9:
c1:54:55:28:0f:7d:0e:97:f3:ea:a1:65:55:5d:df:57:64:a4:
d1:89:f6:47:61:41:d7:14:45:b2:b1:f5:6e:49:f7:09:47:61:
65:8b:b3:65:20:a0:b0:e3:9b:1d:63:7b:7a:ca:96:04:82:5e:
bd:33:88:cf:ae:c9:71:6a:71:60:39:69:f1:45:04:9b:d8:ab:
e6:5b:66:fe:64:a8:c5:43:11:cd:29:4d:e3:9e:de:62:17:d5:
07:b1:68:d2:a0:e1:51:88:08:40:3d:f5:0f:c6:e4:f7:95:b6:
8d:69:13:1d:89:a7:16:ba:7e:4c:31:76:c7:03:2e:42:24:bb:
63:88:18:56:01:86:4a:75:94:52:ca:37:7b:f2:d1:ba:7e:85:
02:4a:a9:a8:2a:1d:88:af:55:0c:9f:7c:35:8b:d9:04:6d:d7:
49:d6:79:bb:e0:16:c4:27:e8:23:34:5c:0b:42:99:dd:b6:c3:
ae:45:0e:8e:86:57:dc:e8:c6:d1:c3:df:b7:8f:91:ce:18:dd:
f0:8e:e8:68:59:31:75:9f:38:93:8e:1f:02:57:23:d2:cd:14:
5a:36:57:0d:bb:d5:ee:72:0f:97:df:e6:a6:14:f5:4d:ea:e2:
9f:40:62:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:47:26 2025 by rpki-client