Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/4B3A3F3CC6DD11EFA7A63533C4F9AE02.roa
File: 4B3A3F3CC6DD11EFA7A63533C4F9AE02.roa (raw, json)
Hash identifier: O26c6wLagQ9qfbQyVWMs1PVLVrq/7icg5WARdsMc39o=
Subject key identifier: 6C:83:AD:A0:3E:E3:60:02:C8:1C:55:9E:4A:82:FD:D6:9F:C4:45:7B
Certificate issuer: /CN=A91A192D/serialNumber=A81D0D61F7B730DDB742CC48ADD88A04D46FD024
Certificate serial: FC
Authority key identifier: A8:1D:0D:61:F7:B7:30:DD:B7:42:CC:48:AD:D8:8A:04:D4:6F:D0:24
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/4B3A3F3CC6DD11EFA7A63533C4F9AE02.roa
Signing time: Mon 30 Dec 2024 18:38:42 +0000
ROA not before: Mon 30 Dec 2024 18:38:42 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 140934
IP address blocks: 36.50.240.0/23 maxlen: 31
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 252 (0xfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A192D/serialNumber=A81D0D61F7B730DDB742CC48ADD88A04D46FD024
Validity
Not Before: Dec 30 18:38:42 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=6772e8b2-dd40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:79:1a:f0:01:bc:ed:80:5b:51:2a:35:f5:65:
b5:3f:23:90:17:b7:07:32:78:f2:06:20:98:c8:62:
74:62:26:58:22:b2:58:92:54:69:73:11:b5:57:93:
ad:be:88:51:90:b4:f1:1c:ec:7d:b5:d2:a0:e0:56:
4d:9a:f0:12:56:90:0e:b6:d1:1a:c8:7e:7e:6b:51:
4c:f9:f4:49:2c:03:bd:ef:73:67:b0:06:4d:8f:09:
4f:b0:b9:00:ff:0d:95:fb:b5:a8:ff:0b:74:b7:d8:
6a:35:30:a2:0a:74:24:53:bb:6c:54:77:eb:6d:8b:
6c:ac:21:82:98:16:d6:7f:b9:10:f8:99:98:60:d9:
77:e0:79:fb:de:0b:e0:58:94:9d:e5:33:c4:19:ee:
08:0b:c0:33:16:5d:3c:5b:e4:93:fb:dc:3c:b1:d2:
2f:00:b5:7f:5b:a2:33:34:c0:54:56:b4:16:78:08:
87:f7:0e:2e:83:31:94:71:92:6b:78:04:2a:55:40:
44:64:33:8a:90:32:38:58:57:c4:fc:c0:c2:1a:ac:
fb:2b:fd:b0:f6:11:af:3a:ba:26:9a:66:26:65:1e:
09:72:10:ff:f4:fc:37:cd:73:9c:f8:5f:0f:78:28:
c5:5f:77:c6:a3:c7:d1:19:8f:5c:bd:67:4d:78:1d:
4a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:83:AD:A0:3E:E3:60:02:C8:1C:55:9E:4A:82:FD:D6:9F:C4:45:7B
X509v3 Authority Key Identifier:
keyid:A8:1D:0D:61:F7:B7:30:DD:B7:42:CC:48:AD:D8:8A:04:D4:6F:D0:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/4B3A3F3CC6DD11EFA7A63533C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.50.240.0/23
Signature Algorithm: sha256WithRSAEncryption
13:9e:d1:1f:dd:bb:9a:a8:c8:1e:19:cd:b2:99:72:6c:f9:fc:
8c:29:c5:66:5d:9f:fd:20:e9:a5:70:b2:af:70:97:12:89:b3:
a2:80:ab:06:69:5e:41:c2:0c:88:43:b5:23:2d:b9:3a:ea:3b:
74:c0:e0:7a:cd:bd:47:11:18:2e:b5:a0:62:e9:fb:28:45:58:
08:b0:86:73:7f:62:e0:fb:e2:c2:70:05:d1:bd:d0:04:7c:c7:
95:8f:27:2f:60:69:32:29:97:e3:62:d9:ca:3f:91:8c:b2:7a:
4f:53:bb:df:e8:45:ae:1d:39:b5:bb:86:86:e2:b8:7a:d5:6c:
f4:58:5f:a7:35:92:f0:df:29:7a:0b:2b:f3:56:a8:fe:c3:5e:
1f:20:d3:8f:0f:4e:4c:dc:52:73:ca:03:a2:57:9e:1f:b5:f0:
7d:19:91:37:3c:07:7d:ee:19:f2:36:a3:1f:3e:50:87:b9:f6:
11:68:03:ac:e0:ea:ce:08:59:d6:9f:28:4e:0f:55:f4:19:a8:
be:7e:1d:db:4a:fa:a3:26:a3:6d:d3:de:69:5d:82:16:d5:89:
23:ad:ba:db:66:ff:3d:f3:12:e9:fe:0d:08:2e:ca:45:2a:ab:
ed:5d:17:90:e2:08:0d:f7:87:50:72:28:b0:84:ce:a0:de:75:
08:47:f1:43
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTE5MkQxMTAvBgNVBAUTKEE4MUQwRDYxRjdCNzMwRERCNzQyQ0M0OEFERDg4QTA0
RDQ2RkQwMjQwHhcNMjQxMjMwMTgzODQyWhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzcyZThiMi1kZDQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAznka8AG87YBbUSo19WW1PyOQF7cHMnjyBiCYyGJ0YiZYIrJYklRpcxG1V5Ot
vohRkLTxHOx9tdKg4FZNmvASVpAOttEayH5+a1FM+fRJLAO973NnsAZNjwlPsLkA
/w2V+7Wo/wt0t9hqNTCiCnQkU7tsVHfrbYtsrCGCmBbWf7kQ+JmYYNl34Hn73gvg
WJSd5TPEGe4IC8AzFl08W+ST+9w8sdIvALV/W6IzNMBUVrQWeAiH9w4ugzGUcZJr
eAQqVUBEZDOKkDI4WFfE/MDCGqz7K/2w9hGvOrommmYmZR4JchD/9Pw3zXOc+F8P
eCjFX3fGo8fRGY9cvWdNeB1KwQIDAQABo4IClTCCApEwHQYDVR0OBBYEFGyDraA+
42ACyBxVnkqC/dafxEV7MB8GA1UdIwQYMBaAFKgdDWH3tzDdt0LMSK3YigTUb9Ak
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTkyRC9DQzY3RDI1MkE0
QkMxMUVFOUU1QTVENzJDNEY5QUUwMi9xQjBOWWZlM01OMjNRc3hJcmRpS0JOUnYw
Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FCME5ZZmUzTU4yM1FzeElyZGlLQk5SdjBDUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTE5MkQvQ0M2N0QyNTJBNEJDMTFFRTlFNUE1RDcyQzRGOUFFMDIvNEIzQTNGM0ND
NkREMTFFRkE3QTYzNTMzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAEkMvAwDQYJKoZIhvcNAQELBQADggEBABOe0R/du5qoyB4Z
zbKZcmz5/IwpxWZdn/0g6aVwsq9wlxKJs6KAqwZpXkHCDIhDtSMtuTrqO3TA4HrN
vUcRGC61oGLp+yhFWAiwhnN/YuD74sJwBdG90AR8x5WPJy9gaTIpl+Ni2co/kYyy
ek9Tu9/oRa4dObW7hobiuHrVbPRYX6c1kvDfKXoLK/NWqP7DXh8g048PTkzcUnPK
A6JXnh+18H0ZkTc8B33uGfI2ox8+UIe59hFoA6zg6s4IWdafKE4PVfQZqL5+HdtK
+qMmo23T3mldghbViSOtuttm/z3zEun+DQguykUqq+1dF5DiCA33h1ByKLCEzqDe
dQhH8UM=
-----END CERTIFICATE-----
Generated at Sun Apr 27 06:53:02 2025 by rpki-client