Route Origin Authorization
$ rpki-client -vvf rpki.rand.apnic.net/repo/A91872ED0001/0/3230332e3134372e3130382e302f32332d3233203d3e203234303231.roa
File: 3230332e3134372e3130382e302f32332d3233203d3e203234303231.roa (raw, json)
Hash identifier: M9amZRFlZIVyv74hPyoxLtzTDhCa5zzzhcGQgg547zc=
Subject key identifier: 49:38:A0:E2:7D:A2:DF:74:B5:01:9C:B1:4B:4B:3F:75:28:A8:BC:E2
Certificate issuer: /CN=A91872ED0001/serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1
Certificate serial: 3C8F27E104C46FB63AE41719E062508B48B0F357
Authority key identifier: C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer
Subject info access: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/3230332e3134372e3130382e302f32332d3233203d3e203234303231.roa
Signing time: Fri 31 Jan 2025 00:00:01 +0000
ROA not before: Thu 30 Jan 2025 23:55:01 +0000
ROA not after: Fri 30 Jan 2026 00:00:01 +0000
asID: 24021
IP address blocks: 203.147.108.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:8f:27:e1:04:c4:6f:b6:3a:e4:17:19:e0:62:50:8b:48:b0:f3:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91872ED0001/serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1
Validity
Not Before: Jan 30 23:55:01 2025 GMT
Not After : Jan 30 00:00:01 2026 GMT
Subject: CN=4938A0E27DA2DF74B5019CB14B4B3F7528A8BCE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6a:22:28:27:70:1d:be:0e:32:8c:72:a4:87:
c7:70:f8:57:3c:7a:9c:8a:db:28:61:ba:db:f6:86:
c8:19:60:aa:02:bf:a9:ef:63:af:61:d4:3d:57:4a:
dc:0c:4d:6e:3a:53:eb:39:21:e4:92:01:83:78:e5:
c8:5d:6d:b0:93:19:14:fa:0e:5f:7c:0c:55:c0:22:
e4:4d:a8:72:29:e8:82:ae:a0:15:66:04:74:ba:56:
29:b7:b9:2c:9b:0b:b3:1d:1a:e3:90:35:6e:0b:99:
8b:83:77:ff:2a:a9:ec:65:2a:3b:f0:7d:cf:84:de:
f3:af:60:13:0c:2f:01:73:6b:19:3d:b5:1d:65:e1:
b6:e3:2c:f7:64:0f:ff:2a:f2:ee:65:aa:3f:ed:fe:
86:5a:9d:bb:8b:32:07:23:75:01:cb:56:a5:53:33:
9e:f1:d9:08:55:58:5b:a8:d4:1a:17:85:cd:78:d9:
72:c1:6c:c4:80:81:fe:bb:d5:18:12:a6:96:bf:1c:
38:07:8f:fa:c0:c4:18:45:f9:f9:f1:57:40:0a:f9:
b0:f1:2d:97:34:36:0a:b4:fe:93:e7:d5:04:85:37:
2e:72:f2:24:dc:a8:b7:86:80:9f:a8:1b:b8:85:57:
15:aa:74:90:45:54:dc:dd:c6:05:12:a0:7e:42:c0:
9c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:38:A0:E2:7D:A2:DF:74:B5:01:9C:B1:4B:4B:3F:75:28:A8:BC:E2
X509v3 Authority Key Identifier:
keyid:C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/3230332e3134372e3130382e302f32332d3233203d3e203234303231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.147.108.0/23
Signature Algorithm: sha256WithRSAEncryption
94:78:b1:8d:60:dc:e8:d1:a6:eb:1b:9d:72:72:9c:8b:18:7a:
41:2e:c1:d6:76:54:1b:82:d8:72:db:88:f6:f3:f1:eb:91:55:
09:56:f2:25:3a:32:0e:e6:fe:e9:6e:c7:91:b4:31:ee:ec:69:
eb:c5:8d:05:37:ce:07:f1:7f:e6:d8:92:8f:65:d6:36:ae:20:
32:2e:1f:5e:d5:82:dd:5c:69:86:43:ae:64:6c:93:fc:2b:4f:
c9:19:51:84:20:23:7c:f9:07:0b:99:0a:75:6e:ad:f4:df:49:
f8:4b:98:79:22:7e:e2:4f:eb:fa:02:c9:02:55:26:75:88:b7:
56:8b:f9:1b:5d:92:80:49:e7:52:3c:00:5d:a4:97:8c:13:7f:
44:0c:9e:89:77:d7:f3:68:09:92:ea:1a:10:ce:3e:e7:a0:66:
33:8b:c7:0b:9e:fd:11:c0:4e:bd:5a:bf:00:e7:1b:af:14:45:
23:26:a2:b6:4e:a8:f2:af:41:63:17:ed:77:46:86:ae:fc:ab:
c0:19:79:72:0c:e2:24:b2:94:ce:de:23:3c:c6:a9:33:e4:bf:
ce:b6:87:a0:00:ad:13:5a:f8:33:91:1d:dc:fb:0f:97:fe:2d:
ef:9b:b0:52:34:7b:88:13:bd:5c:c7:87:b4:fd:00:79:dc:4c:
b6:7e:f7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:19:20 2025 by rpki-client