Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/37D72D7CC17C11EE8391A218C4F9AE02.roa
File: 37D72D7CC17C11EE8391A218C4F9AE02.roa (raw, json)
Hash identifier: MIezaCLRmB7MpFx/jUjpAPwBUBrtrJzYZ3rrcNVQqC8=
Subject key identifier: 47:7A:E4:BA:A8:39:34:6B:C7:76:5C:6C:E1:B1:D4:B4:6A:47:45:36
Certificate issuer: /CN=A91E9F31/serialNumber=DCDA069E3EFF8956C01572816A70235195F06725
Certificate serial: B5
Authority key identifier: DC:DA:06:9E:3E:FF:89:56:C0:15:72:81:6A:70:23:51:95:F0:67:25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3NoGnj7_iVbAFXKBanAjUZXwZyU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/37D72D7CC17C11EE8391A218C4F9AE02.roa
Signing time: Thu 09 Jan 2025 04:19:56 +0000
ROA not before: Thu 09 Jan 2025 04:19:56 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 141746
IP address blocks: 36.50.196.0/24 maxlen: 24
2001:df3:4e40::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181 (0xb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9F31/serialNumber=DCDA069E3EFF8956C01572816A70235195F06725
Validity
Not Before: Jan 9 04:19:56 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=677f4e6c-7cec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ec:00:0a:6f:2a:54:07:26:5e:77:98:51:df:
0a:3f:38:50:28:b2:af:52:95:12:bd:ae:98:2d:02:
cd:67:ee:5f:96:fd:21:03:32:48:6a:f6:22:7a:96:
ba:30:61:33:67:5b:2b:80:02:cb:aa:9c:cd:69:ec:
06:ba:91:35:b0:e5:30:0c:06:3e:98:09:50:65:28:
10:0c:d2:99:49:bb:86:5d:92:13:dd:ab:48:77:1d:
f7:13:e7:b6:3a:93:0c:49:2b:e6:17:80:8c:c7:8d:
fb:1d:54:29:85:40:22:e4:49:0c:e1:90:7a:56:cf:
8c:2a:fb:62:01:bf:47:58:36:76:b2:e8:53:08:fa:
6d:c1:b8:72:17:29:28:46:99:23:9e:89:22:2b:ac:
b9:4f:f7:2b:b3:8d:3d:70:aa:fd:bc:06:37:31:0b:
ea:bd:42:cb:24:1c:a9:64:2a:10:5d:fe:cc:5a:ce:
2f:06:9c:2d:1e:c9:28:c6:7a:65:05:58:47:83:13:
c2:74:47:95:7f:20:54:98:38:64:15:68:12:7c:f5:
73:69:59:63:bb:66:f0:48:9c:78:62:4e:c7:e0:b5:
61:04:41:98:4e:3a:70:62:00:f7:5d:48:1f:58:f7:
17:cc:1e:f6:85:a4:90:b2:3e:cc:73:89:93:a6:78:
f4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:7A:E4:BA:A8:39:34:6B:C7:76:5C:6C:E1:B1:D4:B4:6A:47:45:36
X509v3 Authority Key Identifier:
keyid:DC:DA:06:9E:3E:FF:89:56:C0:15:72:81:6A:70:23:51:95:F0:67:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3NoGnj7_iVbAFXKBanAjUZXwZyU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/37D72D7CC17C11EE8391A218C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.50.196.0/24
IPv6:
2001:df3:4e40::/48
Signature Algorithm: sha256WithRSAEncryption
38:7b:36:7f:d0:90:b2:8b:32:26:9e:f2:ca:4c:60:7d:d2:4a:
c7:12:d0:2a:ab:89:e5:d5:ca:24:1d:a3:00:db:18:e7:89:59:
6d:5c:a1:ef:4c:5e:c0:4f:0c:c9:d4:a1:6b:8a:f4:1e:be:d7:
55:d2:3e:e7:68:11:e6:81:fd:82:4e:bf:52:74:9c:c0:fb:94:
b8:b7:c2:11:18:a6:cd:01:59:48:b1:e2:41:b6:f6:ba:62:7a:
ca:34:fd:c6:d4:43:c9:8b:5b:00:94:59:35:10:bf:31:19:84:
4d:46:8b:a5:18:33:54:a6:39:99:b8:c8:f9:9b:a1:c5:7c:54:
36:97:d5:c1:43:24:85:58:a8:8f:6b:4d:c3:a5:0b:5e:a8:45:
4b:30:cd:af:c5:75:22:2e:1e:84:bf:8a:9d:e5:24:95:e4:62:
27:63:13:7d:b4:3d:de:92:20:da:13:55:1f:5e:28:02:c9:61:
b4:05:8c:3a:20:21:26:fe:06:e6:74:93:5b:3b:69:5e:62:bf:
e9:a1:15:f4:55:b2:c0:65:0b:5f:72:ac:54:1a:89:29:af:23:
99:9d:59:4a:74:3f:e1:3a:f4:40:79:f8:df:d6:f1:fa:2d:b5:
73:60:ce:66:b9:0f:2c:0b:e9:9f:04:75:a5:d4:49:5b:6c:29:
c7:6e:c9:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:22:20 2025 by rpki-client