Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/1C977098A54911EEA5726C58C4F9AE02.roa
File: 1C977098A54911EEA5726C58C4F9AE02.roa (raw, json)
Hash identifier: IW3Bfd+rgSMou5rI1BSeIMiI4ri0dwNjsPZefW1j9aA=
Subject key identifier: 9B:7A:BD:A7:E2:85:8C:8C:4C:B8:41:3E:96:5D:06:98:E4:BB:B0:BC
Certificate issuer: /CN=A919FE01/serialNumber=CB7E8E54C87E01CE8679CFE550F1FE9B2361083E
Certificate serial: 92
Authority key identifier: CB:7E:8E:54:C8:7E:01:CE:86:79:CF:E5:50:F1:FE:9B:23:61:08:3E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y36OVMh-Ac6Gec_lUPH-myNhCD4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/1C977098A54911EEA5726C58C4F9AE02.roa
Signing time: Wed 11 Sep 2024 11:37:32 +0000
ROA not before: Wed 11 Sep 2024 11:37:32 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 152178
IP address blocks: 36.50.148.0/23 maxlen: 23
36.50.148.0/24 maxlen: 24
36.50.149.0/24 maxlen: 24
2401:c220::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146 (0x92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919FE01/serialNumber=CB7E8E54C87E01CE8679CFE550F1FE9B2361083E
Validity
Not Before: Sep 11 11:37:32 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=66e180fc-3c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c5:31:1d:7f:85:20:fb:03:70:d9:2f:74:e8:
93:43:bc:08:e7:88:62:75:36:27:06:00:6f:21:be:
c1:a1:4d:53:f2:57:c6:31:97:82:01:be:8e:cc:e0:
7f:a5:e6:bb:98:22:db:28:af:49:60:c3:70:2e:f0:
dc:11:96:2c:bb:fd:92:25:89:31:16:59:7f:cf:f8:
77:7c:75:21:70:44:4c:74:ae:7d:65:38:20:2d:27:
5e:5b:e0:8f:b0:c7:32:ed:f1:c9:0e:68:8a:9a:a8:
08:0a:32:9e:3b:a2:8d:a0:c3:33:81:ae:92:c5:9c:
a1:c2:03:f7:2e:09:7c:92:36:c5:66:b0:f7:13:5d:
71:21:ca:e9:5e:03:a1:4c:0f:3b:35:af:21:8e:1e:
28:a6:da:5c:89:7a:03:37:c9:d9:24:fa:24:39:90:
c7:0b:9f:22:ed:a8:d7:16:ba:8f:c2:13:e8:83:2f:
5b:2b:59:b9:2e:40:94:8a:9d:a5:89:64:cf:43:79:
a0:aa:68:87:ce:0c:88:68:f9:55:ae:c3:67:26:0f:
09:4d:89:7f:68:13:1a:b1:bf:6d:51:08:11:70:b4:
d8:10:8b:34:68:bf:d2:ee:55:5c:1c:8b:d2:9c:31:
b8:85:4e:10:ea:76:a1:46:d9:d6:7b:59:1b:fa:e3:
05:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:7A:BD:A7:E2:85:8C:8C:4C:B8:41:3E:96:5D:06:98:E4:BB:B0:BC
X509v3 Authority Key Identifier:
keyid:CB:7E:8E:54:C8:7E:01:CE:86:79:CF:E5:50:F1:FE:9B:23:61:08:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/y36OVMh-Ac6Gec_lUPH-myNhCD4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y36OVMh-Ac6Gec_lUPH-myNhCD4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/1C977098A54911EEA5726C58C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.50.148.0/23
IPv6:
2401:c220::/32
Signature Algorithm: sha256WithRSAEncryption
6d:c3:3c:ec:db:6f:f5:ed:36:d7:a3:12:0e:08:9a:f2:9e:d4:
57:df:d3:f0:41:ac:77:ea:89:a5:f6:a1:85:df:1f:5f:e9:33:
c1:a0:14:04:5d:87:e6:32:0c:22:77:c8:85:10:15:0f:fd:80:
bd:60:72:70:4d:75:70:ca:94:53:f1:35:1e:1c:7f:e3:90:94:
6b:6b:76:07:00:c5:a7:91:78:71:ff:21:35:fb:94:f6:43:5c:
d3:a3:ad:43:6d:f3:4d:b1:cc:c4:d1:de:c2:02:58:31:7e:81:
5b:9d:6b:d6:15:92:49:e8:5f:df:00:ba:5a:51:6d:a7:d9:db:
48:36:f3:0f:d5:86:fb:98:e8:ad:aa:14:38:91:4d:d6:9b:4f:
53:8c:e8:84:6c:9b:c9:23:eb:19:2d:70:d9:65:b2:d7:80:0d:
87:28:f9:37:04:d1:e4:be:92:75:6d:8f:95:20:ee:b4:d4:95:
9c:96:c6:7e:7a:96:d9:da:d4:3e:b8:0c:3b:4d:d1:7e:e3:b6:
0d:08:f8:ee:58:f5:a6:f6:0f:20:22:63:59:b7:83:0e:d6:de:
d0:c3:8e:2f:6d:f3:2f:b4:80:a7:be:6f:66:4c:60:ab:fd:6c:
fa:76:52:8a:99:5c:22:c5:48:48:d4:b1:f5:a1:38:d0:dd:83:
97:3c:71:d9
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICAJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUZFMDExMTAvBgNVBAUTKENCN0U4RTU0Qzg3RTAxQ0U4Njc5Q0ZFNTUwRjFGRTlC
MjM2MTA4M0UwHhcNMjQwOTExMTEzNzMyWhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmUxODBmYy0zYzAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1MUxHX+FIPsDcNkvdOiTQ7wI54hidTYnBgBvIb7BoU1T8lfGMZeCAb6OzOB/
pea7mCLbKK9JYMNwLvDcEZYsu/2SJYkxFll/z/h3fHUhcERMdK59ZTggLSdeW+CP
sMcy7fHJDmiKmqgICjKeO6KNoMMzga6SxZyhwgP3Lgl8kjbFZrD3E11xIcrpXgOh
TA87Na8hjh4optpciXoDN8nZJPokOZDHC58i7ajXFrqPwhPogy9bK1m5LkCUip2l
iWTPQ3mgqmiHzgyIaPlVrsNnJg8JTYl/aBMasb9tUQgRcLTYEIs0aL/S7lVcHIvS
nDG4hU4Q6nahRtnWe1kb+uMFnwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFJt6vafi
hYyMTLhBPpZdBpjku7C8MB8GA1UdIwQYMBaAFMt+jlTIfgHOhnnP5VDx/psjYQg+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RkUwMS9BNEY5Q0Q2NjlG
NUMxMUVFOEEyMzA0N0VDNEY5QUUwMi95MzZPVk1oLUFjNkdlY19sVVBILW15TmhD
RDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3kzNk9WTWgtQWM2R2VjX2xVUEgtbXlOaENENC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUZFMDEvQTRGOUNENjY5RjVDMTFFRThBMjMwNDdFQzRGOUFFMDIvMUM5NzcwOThB
NTQ5MTFFRUE1NzI2QzU4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAEkMpQwDQQCAAIwBwMFACQBwiAwDQYJKoZIhvcNAQELBQAD
ggEBAG3DPOzbb/XtNtejEg4ImvKe1Fff0/BBrHfqiaX2oYXfH1/pM8GgFARdh+Yy
DCJ3yIUQFQ/9gL1gcnBNdXDKlFPxNR4cf+OQlGtrdgcAxaeReHH/ITX7lPZDXNOj
rUNt802xzMTR3sICWDF+gVuda9YVkknoX98AulpRbafZ20g28w/VhvuY6K2qFDiR
TdabT1OM6IRsm8kj6xktcNllsteADYco+TcE0eS+knVtj5Ug7rTUlZyWxn56ltna
1D64DDtN0X7jtg0I+O5Y9ab2DyAiY1m3gw7W3tDDji9t8y+0gKe+b2ZMYKv9bPp2
UoqZXCLFSEjUsfWhONDdg5c8cdk=
-----END CERTIFICATE-----
Generated at Sat Apr 26 08:18:07 2025 by rpki-client