Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/9F598EEEDF3E11EC83CCFE1EC4F9AE02.roa
File: 9F598EEEDF3E11EC83CCFE1EC4F9AE02.roa (raw, json)
Hash identifier: ML8bUrH07kWDsJzW00Kjv/Bk94cyav3h3f9sQ1/S5a0=
Subject key identifier: AA:93:9C:0C:97:33:62:58:E1:8F:B5:E0:77:0F:23:56:38:5E:2C:33
Certificate issuer: /CN=A91262CA/serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
Certificate serial: 03A0
Authority key identifier: D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/9F598EEEDF3E11EC83CCFE1EC4F9AE02.roa
Signing time: Wed 31 Jul 2024 02:33:06 +0000
ROA not before: Wed 31 Jul 2024 02:33:06 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 137919
IP address blocks: 147.50.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 928 (0x3a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91262CA/serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
Validity
Not Before: Jul 31 02:33:06 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66a9a262-fd71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f4:35:83:dc:6e:00:d5:39:ad:72:79:14:b2:
e7:16:2a:60:a4:f3:42:25:49:ff:95:ef:d3:5f:cc:
cb:3b:bd:5b:a7:dc:1a:f4:e6:b9:9e:2a:ca:f0:e1:
f0:72:ee:3f:61:c2:f0:26:b9:c4:2c:56:2a:77:5d:
39:fa:cf:df:db:43:e6:38:9f:87:5e:b6:b6:f0:dd:
37:ca:e1:f9:2d:7c:06:14:c2:1b:ec:05:bc:ce:dd:
52:0c:0a:36:d4:62:d1:12:22:c4:1d:a3:ff:6f:10:
b1:3e:b3:e6:f0:d4:78:74:af:e2:df:af:c2:22:85:
74:e1:46:a5:2d:89:61:d1:e7:de:4a:9c:ff:13:16:
0b:0e:9c:73:65:87:a6:9a:8e:e3:24:ae:b8:7a:04:
5a:55:83:a0:72:dd:6e:e3:cd:14:30:7e:d4:64:d4:
ad:c5:44:3c:07:ac:c8:3c:20:86:be:0c:bc:5f:9a:
8e:ee:28:f9:49:87:d2:29:2b:58:d2:a2:f6:b8:1c:
26:cf:15:09:29:68:7f:2d:5d:24:89:14:d5:ce:13:
d5:ad:94:a8:9a:1d:26:f5:74:5a:1e:28:aa:12:63:
a2:ed:da:c9:9b:1c:36:26:2b:3f:86:bb:0e:a0:6c:
c0:54:91:c8:0a:40:37:32:bb:fd:87:fe:bc:3c:2f:
99:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:93:9C:0C:97:33:62:58:E1:8F:B5:E0:77:0F:23:56:38:5E:2C:33
X509v3 Authority Key Identifier:
keyid:D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/9F598EEEDF3E11EC83CCFE1EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
147.50.0.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:67:02:7d:54:8c:f1:e3:15:ef:d5:b9:31:85:eb:7b:b0:fb:
bd:bb:11:9c:af:4b:08:5d:f5:a8:ae:43:18:d4:c5:6d:91:f7:
dc:d7:d3:97:40:48:08:8e:9f:62:bb:45:82:0c:14:03:ea:81:
bd:cf:de:32:6b:00:7b:50:39:b7:6e:1f:0b:0d:ac:13:1a:50:
ac:83:a2:3b:07:20:0c:21:a8:cb:2b:51:a6:81:e8:c6:47:98:
6a:dd:b5:58:d4:6d:14:6e:a5:13:09:1c:96:02:61:79:15:db:
67:c4:e4:b2:c6:ae:57:9b:f5:cd:c7:20:bb:85:35:f7:ed:e7:
44:f1:7e:5e:71:e2:fb:c4:d2:bf:87:72:34:0c:77:13:8c:11:
fb:d9:86:64:05:a0:10:9f:1d:ce:6b:a8:da:17:18:60:18:7a:
64:91:4f:36:b6:7a:b8:28:eb:d5:8f:3c:07:5b:c6:16:e4:8f:
f9:db:29:10:b2:19:66:c8:71:46:0e:19:69:d7:2a:22:19:b0:
19:3f:2c:42:57:d0:13:a7:c3:95:c3:a0:a2:1b:a1:fe:b5:8c:
03:9b:97:51:8d:04:35:c5:a0:a9:f4:0d:2e:6f:64:86:72:25:
75:2d:06:fd:97:8d:13:f2:04:c3:31:4f:1a:1a:50:c7:86:2e:
6a:9f:a0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:52:46 2025 by rpki-client