Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/B77A93FE852411EFA67F8144C4F9AE02.roa
File: B77A93FE852411EFA67F8144C4F9AE02.roa (raw, json)
Hash identifier: v7G23scBtxNy2X8xFu2gdq027pCiIoobflulXtFL9sA=
Subject key identifier: F4:CF:87:4E:38:3C:9D:AA:A1:52:CA:3F:26:0D:5E:09:0F:68:86:BD
Certificate issuer: /CN=A911BD54/serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
Certificate serial: 2501
Authority key identifier: 2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/B77A93FE852411EFA67F8144C4F9AE02.roa
Signing time: Tue 31 Dec 2024 15:53:43 +0000
ROA not before: Tue 31 Dec 2024 15:53:43 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 45458
IP address blocks: 147.50.33.0/24 maxlen: 24
147.50.63.0/24 maxlen: 24
147.50.79.0/24 maxlen: 24
147.50.80.0/20 maxlen: 24
147.50.96.0/20 maxlen: 24
147.50.112.0/21 maxlen: 21
147.50.117.0/24 maxlen: 24
147.50.119.0/24 maxlen: 24
147.50.120.0/22 maxlen: 24
147.50.125.0/24 maxlen: 24
147.50.126.0/23 maxlen: 24
147.50.192.0/19 maxlen: 19
147.50.192.0/24 maxlen: 24
147.50.195.0/24 maxlen: 24
147.50.201.0/24 maxlen: 24
147.50.202.0/24 maxlen: 24
147.50.203.0/24 maxlen: 24
147.50.208.0/20 maxlen: 24
184.82.128.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9473 (0x2501)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BD54/serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
Validity
Not Before: Dec 31 15:53:43 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67741387-dc3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5c:b9:b0:69:25:f6:99:09:79:a8:ab:ff:25:
76:4a:27:fc:77:cd:9b:8d:b2:22:58:92:ae:b6:4e:
6e:e6:8b:ee:c8:4b:49:2f:ba:d6:51:59:c7:b2:f3:
06:61:37:76:c6:aa:b5:b9:5b:91:73:39:a6:5a:73:
bc:a9:a6:03:13:5a:d1:6a:23:2d:30:54:42:4b:4a:
33:d3:0b:3d:38:f8:fa:c6:93:bc:8e:8d:62:34:99:
83:8f:fd:ab:d9:e2:dd:5f:27:4a:94:20:b9:33:fd:
5d:2a:98:c6:03:55:ad:05:8d:6c:b2:57:2a:a7:3d:
d4:0d:99:38:ce:76:76:83:7b:11:87:9e:db:2c:c0:
04:d0:a2:ee:80:34:0f:bf:c8:10:02:9f:a0:39:4c:
00:98:31:e3:36:ba:31:00:3a:4e:9d:a5:c1:89:8d:
92:de:2f:63:fb:85:c2:03:d8:25:3b:fb:79:8d:23:
13:ff:c0:9c:dc:97:ed:42:3a:e8:c5:54:f5:24:c4:
1f:27:2a:d3:9c:80:c7:24:e9:6c:dc:d7:5a:fd:7d:
3e:fd:ab:d9:16:91:2e:d6:53:17:a7:04:6c:2e:44:
1a:81:59:87:80:f4:28:cd:b1:89:0b:9d:5a:02:c2:
26:54:a5:c3:bc:a9:74:1c:5f:8e:85:4f:ee:4b:96:
4e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:CF:87:4E:38:3C:9D:AA:A1:52:CA:3F:26:0D:5E:09:0F:68:86:BD
X509v3 Authority Key Identifier:
keyid:2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/B77A93FE852411EFA67F8144C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
147.50.33.0/24
147.50.63.0/24
147.50.79.0-147.50.123.255
147.50.125.0-147.50.127.255
147.50.192.0/19
184.82.128.0/21
Signature Algorithm: sha256WithRSAEncryption
10:69:fd:da:0d:29:74:5e:0b:00:14:f0:65:32:80:f3:bb:17:
70:2f:75:9d:a7:09:f6:1c:01:d6:10:bb:a5:4e:8d:e1:ca:0a:
d6:38:a9:9b:7c:7e:8c:e2:96:0a:66:fa:0c:3b:44:1a:65:b6:
a6:7e:2c:9f:36:f2:21:66:04:72:16:0d:69:47:15:62:f6:4f:
3c:73:a5:6e:86:a7:5f:f6:9e:8e:b0:41:48:35:45:64:d0:42:
ef:82:f5:19:e5:29:eb:11:7f:dd:16:50:73:9c:30:a3:a5:fc:
41:3a:b3:49:2f:6b:39:a3:fc:32:27:f3:08:99:31:f8:a4:5b:
03:16:16:a4:0d:9b:78:0a:c6:7b:b5:85:95:f0:d1:86:c4:25:
f0:2c:08:bc:cd:17:56:4d:8f:72:47:7d:65:fa:15:b5:75:d4:
ac:71:a1:53:23:0b:9e:62:08:99:fa:2f:64:0a:90:f3:11:0d:
79:ea:b6:54:54:f7:70:40:2c:5c:54:ea:e4:b0:3d:42:72:be:
18:d0:7c:5d:3b:6f:9c:db:09:da:ef:7b:10:cd:4f:8d:81:6d:
a6:23:ec:15:ab:72:11:2b:d7:a8:aa:c2:e6:47:c9:eb:b8:2c:
8d:65:26:ac:dc:39:18:b0:c3:2b:cc:d6:65:1e:aa:f5:a5:65:
3d:c1:83:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:35:12 2025 by rpki-client