Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/8659FCFEB12811EE98786F82C4F9AE02.roa
File: 8659FCFEB12811EE98786F82C4F9AE02.roa (raw, json)
Hash identifier: uTcSN/s3jafNB4/D11q5q+/m0pypV3YLg7hL+NBlIuc=
Subject key identifier: 04:6C:20:81:6C:DF:A4:5D:6C:72:D7:75:1C:D9:6A:D4:82:05:D7:C8
Certificate issuer: /CN=A911BD54/serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
Certificate serial: 24F9
Authority key identifier: 2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/8659FCFEB12811EE98786F82C4F9AE02.roa
Signing time: Tue 31 Dec 2024 15:53:36 +0000
ROA not before: Tue 31 Dec 2024 15:53:36 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 133848
IP address blocks: 147.50.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9465 (0x24f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BD54/serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
Validity
Not Before: Dec 31 15:53:36 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67741380-6f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b9:39:9c:5d:9d:b9:8e:c1:c4:bc:f9:2e:99:
81:83:46:9d:7c:0d:4d:bd:1c:c9:fc:57:39:f0:0d:
a6:9f:f5:88:0f:1f:cc:5b:eb:97:1e:18:b3:b1:06:
14:2f:e7:4c:4d:1a:05:3a:c9:48:c1:5f:30:66:d3:
4d:5d:11:b2:ee:f0:f1:de:45:82:51:bc:19:8d:da:
f7:60:05:23:4e:47:a4:23:66:b3:67:30:af:e5:72:
dd:77:05:df:ab:2d:58:24:0d:35:6b:f7:28:57:08:
c4:9a:14:90:4f:5a:88:af:ac:12:c5:0c:7f:06:78:
f5:13:95:fe:c2:92:3b:98:ca:0c:0a:02:bd:7f:1a:
20:80:4c:24:48:af:b0:9d:54:b1:27:c5:44:80:e3:
29:6b:59:43:a3:aa:a6:fa:c2:46:cd:2c:d9:c0:b4:
44:47:b2:dd:d7:11:2d:9d:71:58:30:0d:32:b1:3a:
d5:fc:45:59:bd:e6:85:ef:7c:28:23:1b:97:a1:12:
ed:62:ce:40:b5:57:4b:ec:9a:f8:fc:e0:c9:88:75:
f1:31:1e:fd:f5:d8:c6:e8:1d:f3:56:76:6f:6e:10:
3c:bf:ba:6d:e8:12:b4:9b:26:9d:50:76:fe:00:12:
de:12:98:e0:96:da:d1:ff:63:9c:21:87:7f:07:84:
84:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:6C:20:81:6C:DF:A4:5D:6C:72:D7:75:1C:D9:6A:D4:82:05:D7:C8
X509v3 Authority Key Identifier:
keyid:2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/8659FCFEB12811EE98786F82C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
147.50.98.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:7c:1a:07:46:51:a5:5a:57:18:4e:1c:4c:35:cb:4d:3f:ef:
9b:5d:49:62:bd:df:15:1e:3d:47:f7:ed:62:4a:f8:50:6d:89:
f9:ef:04:55:82:e4:8e:0f:5f:e3:fb:76:3d:cc:36:2f:88:a4:
c8:f3:ca:b0:4f:fc:d4:a5:75:cc:8a:7c:56:a0:fe:a9:bc:a2:
db:d0:e2:ec:cd:4f:9c:17:6f:02:36:0a:3b:ea:3f:50:19:9a:
de:56:7c:1d:6a:c8:37:cb:1e:11:fb:45:38:17:2e:85:4a:27:
13:8a:41:60:77:26:5f:b8:20:7b:93:6f:3d:3a:a2:73:f8:88:
cd:3a:fc:79:5a:91:64:d1:3c:3a:dc:96:26:d4:86:58:8a:25:
03:db:b6:e5:f3:07:53:56:6a:9c:7f:97:99:90:9a:8b:0d:1a:
7f:73:dd:b0:00:8a:3b:60:f0:96:48:61:26:e3:d5:84:52:42:
c7:84:d0:3b:d4:3d:51:bf:da:cc:75:da:43:45:55:64:7b:2d:
e5:02:2d:1d:ef:92:05:49:57:c5:e8:ee:5d:1c:b4:d5:a7:88:
ea:96:1f:6e:15:a3:78:5e:fb:31:14:63:69:10:2c:2c:a8:55:
ae:4a:3a:a6:27:dc:d8:ae:c8:2b:11:4f:fc:83:a1:a2:43:e5:
40:57:28:a5
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICJPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUJENTQxMTAvBgNVBAUTKDJGNTlDRURBNjE0ODE1RjQ2MzJGMzlENUEzMUMyQTUx
NDhDNkI0RkEwHhcNMjQxMjMxMTU1MzM2WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02Nzc0MTM4MC02ZjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw7k5nF2duY7BxLz5LpmBg0adfA1NvRzJ/Fc58A2mn/WIDx/MW+uXHhizsQYU
L+dMTRoFOslIwV8wZtNNXRGy7vDx3kWCUbwZjdr3YAUjTkekI2azZzCv5XLddwXf
qy1YJA01a/coVwjEmhSQT1qIr6wSxQx/Bnj1E5X+wpI7mMoMCgK9fxoggEwkSK+w
nVSxJ8VEgOMpa1lDo6qm+sJGzSzZwLRER7Ld1xEtnXFYMA0ysTrV/EVZveaF73wo
IxuXoRLtYs5AtVdL7Jr4/ODJiHXxMR799djG6B3zVnZvbhA8v7pt6BK0myadUHb+
ABLeEpjgltrR/2OcIYd/B4SEzwIDAQABo4IClTCCApEwHQYDVR0OBBYEFARsIIFs
36RdbHLXdRzZatSCBdfIMB8GA1UdIwQYMBaAFC9ZztphSBX0Yy851aMcKlFIxrT6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkQ1NC9EOTAxMTI4NDNG
NEYxMUU1OTUxMkUwNENDNEY5QUUwMi9MMW5PMm1GSUZmUmpMem5Wb3h3cVVVakd0
UG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0wxbk8ybUZJRmZSakx6blZveHdxVVVqR3RQby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUJENTQvRDkwMTEyODQzRjRGMTFFNTk1MTJFMDRDQzRGOUFFMDIvODY1OUZDRkVC
MTI4MTFFRTk4Nzg2RjgyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBACTMmIwDQYJKoZIhvcNAQELBQADggEBABt8GgdGUaVaVxhO
HEw1y00/75tdSWK93xUePUf37WJK+FBtifnvBFWC5I4PX+P7dj3MNi+IpMjzyrBP
/NSldcyKfFag/qm8otvQ4uzNT5wXbwI2CjvqP1AZmt5WfB1qyDfLHhH7RTgXLoVK
JxOKQWB3Jl+4IHuTbz06onP4iM06/HlakWTRPDrclibUhliKJQPbtuXzB1NWapx/
l5mQmosNGn9z3bAAijtg8JZIYSbj1YRSQseE0DvUPVG/2sx12kNFVWR7LeUCLR3v
kgVJV8Xo7l0ctNWniOqWH24Vo3he+zEUY2kQLCyoVa5KOqYn3NiuyCsRT/yDoaJD
5UBXKKU=
-----END CERTIFICATE-----
Generated at Mon Apr 28 08:29:22 2025 by rpki-client