Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/F2AB0C4A68C011EFB9196160C4F9AE02.roa
File: F2AB0C4A68C011EFB9196160C4F9AE02.roa (raw, json)
Hash identifier: DaPiCEmlAJvbaPsIVw3SLkMWbmEd02jwt+sb94Y5y+Y=
Subject key identifier: C1:1A:46:3F:79:20:98:4E:30:58:DD:56:76:5C:1E:23:01:46:36:E7
Certificate issuer: /CN=A912CEBD/serialNumber=BE91F21C7A0BC06437F3DB5B214208C8774EEBCD
Certificate serial: DA
Authority key identifier: BE:91:F2:1C:7A:0B:C0:64:37:F3:DB:5B:21:42:08:C8:77:4E:EB:CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpHyHHoLwGQ389tbIUIIyHdO680.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/F2AB0C4A68C011EFB9196160C4F9AE02.roa
Signing time: Sat 25 Jan 2025 04:07:48 +0000
ROA not before: Sat 25 Jan 2025 04:07:48 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 56264
IP address blocks: 36.50.102.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 218 (0xda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912CEBD/serialNumber=BE91F21C7A0BC06437F3DB5B214208C8774EEBCD
Validity
Not Before: Jan 25 04:07:48 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67946393-10a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0d:4d:4e:3c:de:fb:8f:0e:43:ce:dc:4a:b6:
84:d1:22:3f:e4:66:0d:74:31:49:55:03:89:4b:cf:
09:e1:46:55:55:71:cf:5a:e7:a7:2c:90:43:18:f5:
11:0c:19:00:22:32:0a:d7:07:b3:09:db:55:04:5c:
fc:f6:91:c1:c1:fd:19:cc:3d:4c:a2:30:d8:85:32:
32:3b:91:58:f5:75:a7:94:40:e1:4d:ab:70:01:95:
6f:a8:20:4e:c8:90:c6:89:6d:a0:e9:4e:a8:07:bc:
f2:ee:d2:71:f5:0a:e6:d2:56:05:09:71:12:95:9b:
5c:64:1a:64:01:f4:18:45:3b:f3:5a:d0:dd:8b:9a:
54:a1:ac:85:3d:2c:da:5f:4b:4a:a0:0f:1b:03:e5:
35:99:09:5d:4b:94:0a:ed:9c:3e:7d:52:3b:5a:10:
fb:62:e3:26:06:93:a3:f3:62:33:86:e0:5d:de:ac:
e4:07:59:04:7d:fb:af:dc:b7:7e:17:dd:66:2e:c7:
14:a9:71:ce:9d:64:e3:8a:1c:85:ab:27:43:e5:13:
d3:09:e3:ea:89:17:9f:23:cd:6e:b2:41:89:25:7a:
b6:dc:36:39:34:63:ab:16:41:54:a2:82:27:75:f3:
f0:04:c2:80:6f:9d:ae:11:ce:3b:4d:ce:7e:db:1b:
7b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:1A:46:3F:79:20:98:4E:30:58:DD:56:76:5C:1E:23:01:46:36:E7
X509v3 Authority Key Identifier:
keyid:BE:91:F2:1C:7A:0B:C0:64:37:F3:DB:5B:21:42:08:C8:77:4E:EB:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpHyHHoLwGQ389tbIUIIyHdO680.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/F2AB0C4A68C011EFB9196160C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.50.102.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:88:f6:93:78:44:f9:04:79:7e:02:c5:13:80:d4:b9:37:f1:
96:fd:69:e0:b0:84:79:5e:18:7c:c5:c3:9b:74:a6:d9:f6:9b:
86:26:b3:4a:d5:02:4e:59:c3:ca:94:7c:6d:21:87:99:eb:f9:
98:12:cd:64:48:32:11:60:05:5a:11:b4:f6:17:b3:c3:db:cf:
aa:0b:73:b1:13:fa:89:ee:a7:a5:36:f3:7c:86:02:de:3a:04:
b0:c1:e3:d2:37:4a:3f:70:86:5f:b7:34:ff:dd:5b:e8:50:98:
30:68:f0:36:f8:97:45:b4:de:5e:14:69:a3:de:d9:23:8e:7d:
76:28:93:38:f3:32:14:e4:d1:ea:83:bf:84:a4:0d:c2:bb:92:
b2:2b:c6:07:46:2c:dc:cb:5e:b4:ec:44:9a:1f:f8:63:6a:cc:
22:dc:b6:bd:ed:28:cc:55:44:6c:c4:10:c3:82:55:33:b6:d6:
9d:3e:12:74:db:6e:df:2b:6c:41:08:11:e4:3c:27:21:72:4e:
9a:10:ac:25:ed:e7:29:a4:6e:6f:b4:8f:57:85:11:0e:73:5e:
d9:d1:1a:cb:46:80:9a:86:0a:ff:3d:63:f8:5a:94:16:cd:65:
33:47:e9:1c:4e:55:3d:af:ae:fd:37:74:87:d0:72:b0:9d:55:
67:77:86:d4
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICANowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkNFQkQxMTAvBgNVBAUTKEJFOTFGMjFDN0EwQkMwNjQzN0YzREI1QjIxNDIwOEM4
Nzc0RUVCQ0QwHhcNMjUwMTI1MDQwNzQ4WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02Nzk0NjM5My0xMGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzA1NTjze+48OQ87cSraE0SI/5GYNdDFJVQOJS88J4UZVVXHPWuenLJBDGPUR
DBkAIjIK1wezCdtVBFz89pHBwf0ZzD1MojDYhTIyO5FY9XWnlEDhTatwAZVvqCBO
yJDGiW2g6U6oB7zy7tJx9Qrm0lYFCXESlZtcZBpkAfQYRTvzWtDdi5pUoayFPSza
X0tKoA8bA+U1mQldS5QK7Zw+fVI7WhD7YuMmBpOj82IzhuBd3qzkB1kEffuv3Ld+
F91mLscUqXHOnWTjihyFqydD5RPTCePqiRefI81uskGJJXq23DY5NGOrFkFUooIn
dfPwBMKAb52uEc47Tc5+2xt7NQIDAQABo4IClTCCApEwHQYDVR0OBBYEFMEaRj95
IJhOMFjdVnZcHiMBRjbnMB8GA1UdIwQYMBaAFL6R8hx6C8BkN/PbWyFCCMh3TuvN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0VCRC9DQ0Q4MTQyODk5
QzExMUVFOUExRkRFMUZDNEY5QUUwMi92cEh5SEhvTHdHUTM4OXRiSVVJSXlIZE82
ODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZwSHlISG9Md0dRMzg5dGJJVUlJeUhkTzY4MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkNFQkQvQ0NEODE0Mjg5OUMxMTFFRTlBMUZERTFGQzRGOUFFMDIvRjJBQjBDNEE2
OEMwMTFFRkI5MTk2MTYwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAEkMmYwDQYJKoZIhvcNAQELBQADggEBAC2I9pN4RPkEeX4C
xROA1Lk38Zb9aeCwhHleGHzFw5t0ptn2m4Yms0rVAk5Zw8qUfG0hh5nr+ZgSzWRI
MhFgBVoRtPYXs8Pbz6oLc7ET+onup6U283yGAt46BLDB49I3Sj9whl+3NP/dW+hQ
mDBo8Db4l0W03l4UaaPe2SOOfXYokzjzMhTk0eqDv4SkDcK7krIrxgdGLNzLXrTs
RJof+GNqzCLctr3tKMxVRGzEEMOCVTO21p0+EnTbbt8rbEEIEeQ8JyFyTpoQrCXt
5ymkbm+0j1eFEQ5zXtnRGstGgJqGCv89Y/halBbNZTNH6RxOVT2vrv03dIfQcrCd
VWd3htQ=
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:36:46 2025 by rpki-client