Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/0/323430363a653934303a3a2f33322d3536203d3e2039343439.roa
File: 323430363a653934303a3a2f33322d3536203d3e2039343439.roa (raw, json)
Hash identifier: Pq/ZNV+oWKzjrdP/LoxNEFQdQ1OqwZsuZtzh4zv6PM4=
Subject key identifier: CB:E0:50:42:7F:DD:5A:C1:09:CE:9C:20:BA:20:BB:14:D4:79:E3:66
Certificate issuer: /CN=A91905300000/serialNumber=30356EF46D594DA57C7697011183ACFFE04613E0
Certificate serial: 380102C1D5D0BCA6C885025C3470CAE6F54EB3AD
Authority key identifier: 30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/0/323430363a653934303a3a2f33322d3536203d3e2039343439.roa
Signing time: Sun 03 Dec 2023 04:12:01 +0000
ROA not before: Sun 03 Dec 2023 04:07:01 +0000
ROA not after: Sun 01 Dec 2024 04:12:01 +0000
asID: 9449
IP address blocks: 2406:e940::/32 maxlen: 56
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:01:02:c1:d5:d0:bc:a6:c8:85:02:5c:34:70:ca:e6:f5:4e:b3:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91905300000/serialNumber=30356EF46D594DA57C7697011183ACFFE04613E0
Validity
Not Before: Dec 3 04:07:01 2023 GMT
Not After : Dec 1 04:12:01 2024 GMT
Subject: CN=CBE050427FDD5AC109CE9C20BA20BB14D479E366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1b:59:f9:3b:28:42:4e:ee:05:c1:5b:06:e0:
f0:eb:a2:e2:c8:74:73:90:bb:d1:9a:be:1d:ac:0d:
32:9d:08:a3:b2:df:36:69:79:f8:42:88:25:b1:3c:
e3:86:e5:55:53:c6:ec:91:92:b3:6d:26:f1:3d:97:
bd:fd:7b:9a:25:6f:fc:60:a9:62:ce:00:b5:04:de:
e4:34:3f:a9:21:d7:1d:31:e3:97:4f:9a:ac:71:f9:
90:b0:41:56:d1:56:7b:a0:53:12:b7:15:c3:d2:08:
aa:48:2d:f2:8f:bf:0d:e8:46:35:16:bc:6e:9a:eb:
2e:36:8e:f0:c8:01:41:86:4d:42:8e:cc:fe:9e:6f:
ef:9c:28:4e:c2:28:60:67:d0:7e:93:71:c7:d2:d0:
91:77:8e:25:6d:15:ef:17:68:82:aa:8b:ce:2a:15:
79:1b:14:8b:47:14:ac:a1:cc:31:67:59:ff:d2:19:
68:72:fc:0a:c7:1e:19:c2:97:35:57:85:e3:ae:e5:
ec:10:22:11:c1:36:d3:23:80:02:1b:8c:36:ea:00:
23:b3:29:86:8a:74:12:d7:ee:7e:1c:66:90:78:5b:
8e:63:f3:44:e9:60:91:3c:83:1c:cf:0e:74:fe:b7:
d6:97:92:c5:cf:fa:e4:f6:44:fe:de:ef:d8:64:84:
e4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E0:50:42:7F:DD:5A:C1:09:CE:9C:20:BA:20:BB:14:D4:79:E3:66
X509v3 Authority Key Identifier:
keyid:30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/323430363a653934303a3a2f33322d3536203d3e2039343439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:e940::/32
Signature Algorithm: sha256WithRSAEncryption
59:75:62:56:74:16:1e:c1:81:3e:6c:47:76:49:27:21:83:29:
aa:3a:59:ad:90:ad:ae:e6:b0:37:cd:6a:c7:8c:05:72:a6:3f:
29:19:a1:f4:6d:0f:34:c6:de:c8:a5:67:16:c7:fe:f6:bc:96:
56:16:aa:1e:67:d3:8d:83:d4:10:44:15:17:b9:a5:1f:f4:62:
6e:5b:a1:25:8f:a1:c2:0a:28:bb:87:88:86:52:c4:30:4d:e5:
32:86:ec:91:d5:a5:9f:0f:3b:75:cf:dd:dc:e2:2d:9d:b4:46:
85:69:79:fa:e3:b8:13:b4:0c:1c:94:f6:e7:6b:03:d7:12:46:
a7:f2:36:ef:5b:b8:f0:fa:ce:19:8c:7a:73:da:a4:b3:ea:0e:
c2:7e:c9:d9:93:30:07:3a:95:ea:e4:ca:aa:0e:93:af:40:fc:
d3:08:3d:e3:cc:9f:57:c1:8f:42:ac:0c:7a:27:06:a7:de:f8:
09:3c:cf:b0:19:27:af:f5:2f:db:50:6e:75:07:96:92:72:fe:
43:1b:c2:0c:3f:5c:43:83:9f:f4:54:e6:d3:37:43:2f:ac:05:
0f:cd:07:b4:14:5e:8f:be:7e:07:b6:d7:c4:92:bd:a3:3c:17:
f2:f4:53:19:e4:c7:ed:5a:c5:e6:23:88:1d:46:3f:5e:49:e1:
f3:a4:52:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:24:52 2025 by rpki-client