Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9150E4D0000/0/3130332e3234382e35302e302f32332d3234203d3e20313437303230.roa
File: 3130332e3234382e35302e302f32332d3234203d3e20313437303230.roa (raw, json)
Hash identifier: 3FQ1YpCkD4XjTn0HTw/Efu4/uQB9JYAjE48TnMIWhV8=
Subject key identifier: 36:CE:96:D6:E5:46:B0:6A:D6:A4:03:6A:EA:38:40:28:58:AE:60:68
Certificate issuer: /CN=A9150E4D0000/serialNumber=6228A3C6D637801692F7D7D48251DAD36A3CDB7F
Certificate serial: 54047920A52720E85F53979C8F091683A0827DFB
Authority key identifier: 62:28:A3:C6:D6:37:80:16:92:F7:D7:D4:82:51:DA:D3:6A:3C:DB:7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiijxtY3gBaS99fUglHa02o8238.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/3130332e3234382e35302e302f32332d3234203d3e20313437303230.roa
Signing time: Mon 27 Nov 2023 09:33:56 +0000
ROA not before: Mon 27 Nov 2023 09:28:56 +0000
ROA not after: Mon 25 Nov 2024 09:33:56 +0000
asID: 147020
IP address blocks: 103.248.50.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:04:79:20:a5:27:20:e8:5f:53:97:9c:8f:09:16:83:a0:82:7d:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150E4D0000/serialNumber=6228A3C6D637801692F7D7D48251DAD36A3CDB7F
Validity
Not Before: Nov 27 09:28:56 2023 GMT
Not After : Nov 25 09:33:56 2024 GMT
Subject: CN=36CE96D6E546B06AD6A4036AEA38402858AE6068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:70:68:dc:ab:4b:99:1d:30:5b:96:4c:63:b4:
97:76:9e:4f:9b:d2:fc:2d:d7:9b:98:a0:a9:7e:6e:
75:3f:4f:56:ab:3d:5b:65:f0:42:fb:7e:a8:dc:ba:
f1:ea:2a:6d:f4:be:80:2d:4a:3f:a4:71:ef:25:2a:
ff:05:b4:d2:8e:9b:77:b7:36:f5:e3:5b:b4:52:d8:
32:06:e6:3a:a8:bb:ba:5f:3b:21:2b:de:6c:46:72:
51:22:af:7b:4c:2b:08:b1:18:bf:80:b1:6c:b5:3c:
64:15:fa:ee:4e:c6:34:f9:81:86:49:81:d4:da:55:
b8:c6:49:cc:56:26:1f:9b:4a:be:0b:e4:44:3a:af:
11:ad:90:60:af:9b:28:7a:e3:cc:df:dd:18:2e:0d:
b0:69:c4:5e:f4:76:28:c4:ef:6a:71:e5:7a:ce:a4:
ec:6e:94:bc:3c:dc:a3:50:03:06:e6:b9:2f:17:9b:
16:8b:e2:dd:a8:7a:66:3b:7e:59:3d:60:7c:58:34:
f4:8d:0c:c8:c7:d7:c6:21:72:c1:9c:22:88:85:4d:
be:5b:fa:f9:bc:d1:08:a4:14:a4:8a:9c:dc:35:d3:
6f:7b:b4:5d:83:8d:a8:50:7e:62:93:38:9e:c6:07:
08:0d:87:5b:2e:05:e2:ce:a2:66:a0:a2:92:10:4b:
d4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:CE:96:D6:E5:46:B0:6A:D6:A4:03:6A:EA:38:40:28:58:AE:60:68
X509v3 Authority Key Identifier:
keyid:62:28:A3:C6:D6:37:80:16:92:F7:D7:D4:82:51:DA:D3:6A:3C:DB:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/6228A3C6D637801692F7D7D48251DAD36A3CDB7F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiijxtY3gBaS99fUglHa02o8238.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/3130332e3234382e35302e302f32332d3234203d3e20313437303230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.248.50.0/23
Signature Algorithm: sha256WithRSAEncryption
63:f4:de:b2:93:81:b8:e9:c1:e5:a9:4a:6a:c3:ee:be:2d:97:
a4:de:f2:56:66:03:2f:d0:83:41:c7:67:c8:61:e1:b2:fa:fc:
da:53:1c:d6:b9:82:ac:57:a0:0b:63:19:76:39:93:4a:ff:0f:
ae:f4:8a:2d:da:5f:57:5e:f4:c8:65:f2:7f:2e:9c:2c:26:13:
9e:d1:6f:1f:08:8e:b9:15:97:d7:17:9a:87:1c:67:19:12:8f:
b3:04:27:50:bb:70:7e:07:5d:25:f3:f2:0d:89:15:d6:d6:bc:
02:88:42:ea:76:04:dd:5d:01:b1:db:fe:88:18:9e:89:94:65:
f3:7c:98:26:9c:fb:67:e5:0d:02:27:c1:31:6e:1a:27:64:9c:
2b:88:c5:b5:97:4a:b8:19:e0:90:b9:31:a8:ee:cd:86:3e:8f:
b1:6e:da:0c:76:09:9f:8e:85:07:39:15:0f:a3:be:ca:26:69:
80:9d:0e:4f:fb:22:c1:ce:e7:44:94:e9:9f:3c:8c:71:1b:0b:
31:31:fb:22:23:24:7e:81:00:d4:d9:52:f2:68:88:5d:97:dd:
f7:99:c5:f9:99:4b:35:a8:95:f2:0d:ef:0d:aa:ed:52:a3:0c:
fb:4f:dd:a8:fd:4b:9a:dd:cb:f3:38:0f:0a:75:a8:ee:35:bd:
fa:54:79:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:44:55 2025 by rpki-client