Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/3/323030313a6466303a3230363a3a2f34382d3438203d3e203337393930.roa
File: 323030313a6466303a3230363a3a2f34382d3438203d3e203337393930.roa (raw, json)
Hash identifier: ZwC3/xpvwhFW9owX791hDufwh79YCQgvkbzA8LlrLz0=
Subject key identifier: AD:FA:D8:36:8E:D1:25:0E:9E:FB:50:87:C3:76:DE:9D:7E:45:0A:F2
Certificate issuer: /CN=A911AC370000/serialNumber=B18F989967D30F2509E3D29707C5F85B5F6BDB6F
Certificate serial: 55015A2B9C3E73E840804D52433AB4B3D63AF63D
Authority key identifier: B1:8F:98:99:67:D3:0F:25:09:E3:D2:97:07:C5:F8:5B:5F:6B:DB:6F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/3/323030313a6466303a3230363a3a2f34382d3438203d3e203337393930.roa
Signing time: Sun 03 Dec 2023 04:12:06 +0000
ROA not before: Sun 03 Dec 2023 04:07:06 +0000
ROA not after: Sun 01 Dec 2024 04:12:06 +0000
asID: 37990
IP address blocks: 2001:df0:206::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:01:5a:2b:9c:3e:73:e8:40:80:4d:52:43:3a:b4:b3:d6:3a:f6:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911AC370000/serialNumber=B18F989967D30F2509E3D29707C5F85B5F6BDB6F
Validity
Not Before: Dec 3 04:07:06 2023 GMT
Not After : Dec 1 04:12:06 2024 GMT
Subject: CN=ADFAD8368ED1250E9EFB5087C376DE9D7E450AF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f2:3a:ab:20:e4:be:2b:3e:d0:33:8f:39:97:
75:5f:9c:e2:01:b8:d3:3d:97:dc:db:0a:32:e7:76:
4a:c0:7e:83:0b:81:67:4b:19:d1:82:91:96:39:d5:
d2:7f:a8:41:bc:99:8d:74:a8:16:4e:87:42:db:7d:
8a:65:25:86:1e:1e:e5:28:f7:45:ab:43:82:71:98:
41:cb:2c:ec:5f:25:da:80:e3:d9:11:56:a7:2f:c0:
29:d5:36:41:69:a2:23:a4:49:a8:81:35:9d:37:54:
1e:48:09:8d:7b:1f:4f:6c:77:cd:46:6b:94:0c:3a:
72:7d:28:5f:c1:a0:68:ba:97:44:d7:28:2d:65:fa:
87:68:1e:68:f1:91:4c:cd:53:c8:a8:ae:a0:ff:cf:
c4:2d:b7:7a:99:c7:06:31:51:f1:64:0e:e3:e2:43:
55:2b:9d:cb:4f:e1:58:6f:a7:b7:27:de:b9:1f:1a:
c5:49:5f:ee:64:c5:2e:cc:bf:89:d3:f1:9b:e5:a3:
d7:f8:ea:da:cc:88:d4:2e:71:ee:c6:bd:e8:f7:56:
0b:e9:ad:e4:3b:aa:f6:99:29:3a:a7:08:12:17:62:
67:3d:8f:3b:75:7d:c1:ac:13:a1:df:a2:94:3b:da:
59:34:cb:92:18:ae:dd:10:63:fa:ed:d0:2d:96:7e:
17:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:FA:D8:36:8E:D1:25:0E:9E:FB:50:87:C3:76:DE:9D:7E:45:0A:F2
X509v3 Authority Key Identifier:
keyid:B1:8F:98:99:67:D3:0F:25:09:E3:D2:97:07:C5:F8:5B:5F:6B:DB:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/3/323030313a6466303a3230363a3a2f34382d3438203d3e203337393930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df0:206::/48
Signature Algorithm: sha256WithRSAEncryption
52:9d:13:ea:9f:07:bb:9b:c8:87:5c:19:18:ed:b4:b2:c1:15:
e1:f9:e3:00:8d:7d:8a:9c:7d:13:13:06:61:1e:c2:22:6b:67:
d9:0b:b8:b7:29:d3:dc:e8:74:d3:25:f0:d6:15:28:87:ac:c0:
8e:22:b4:20:fd:7b:54:42:66:d3:bb:8e:49:41:94:81:57:39:
03:6c:f6:8a:4a:a2:2f:5d:9b:37:e2:79:4f:54:87:be:e0:0e:
fb:fc:eb:3e:ab:3e:68:42:28:ab:19:1d:5a:77:41:18:5e:46:
c2:41:62:38:9a:6e:bd:23:87:7a:86:b1:df:69:a5:06:cd:47:
92:25:dc:73:b3:6f:d8:64:3d:06:4b:eb:b3:ca:2c:80:ad:b1:
c7:40:ea:82:cf:87:ed:c9:4b:a2:14:1f:59:6f:ce:d6:1f:70:
e1:57:48:90:2b:0a:f3:33:2f:e9:db:59:b8:04:70:b3:23:87:
e8:3e:c6:01:1f:89:31:83:c2:2f:00:81:4e:4b:57:da:ad:39:
7f:4c:19:1c:be:70:2f:be:9a:df:b6:3e:93:c5:b5:eb:b9:04:
9b:e1:5f:d6:95:df:93:69:73:f2:ed:b4:f4:04:f8:64:6c:aa:
e2:3c:16:f1:41:42:2a:87:11:c6:fc:ce:fd:51:43:a7:5c:d0:
82:d0:16:b5
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgIUVQFaK5w+c+hAgE1SQzq0s9Y69j0wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMUFDMzcwMDAwMTEwLwYDVQQFEyhCMThGOTg5OTY3
RDMwRjI1MDlFM0QyOTcwN0M1Rjg1QjVGNkJEQjZGMB4XDTIzMTIwMzA0MDcwNloX
DTI0MTIwMTA0MTIwNlowMzExMC8GA1UEAxMoQURGQUQ4MzY4RUQxMjUwRTlFRkI1
MDg3QzM3NkRFOUQ3RTQ1MEFGMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKXyOqsg5L4rPtAzjzmXdV+c4gG40z2X3NsKMud2SsB+gwuBZ0sZ0YKRljnV
0n+oQbyZjXSoFk6HQtt9imUlhh4e5Sj3RatDgnGYQcss7F8l2oDj2RFWpy/AKdU2
QWmiI6RJqIE1nTdUHkgJjXsfT2x3zUZrlAw6cn0oX8GgaLqXRNcoLWX6h2geaPGR
TM1TyKiuoP/PxC23epnHBjFR8WQO4+JDVSudy0/hWG+ntyfeuR8axUlf7mTFLsy/
idPxm+Wj1/jq2syI1C5x7sa96PdWC+mt5Duq9pkpOqcIEhdiZz2PO3V9wawTod+i
lDvaWTTLkhiu3RBj+u3QLZZ+F48CAwEAAaOCAhowggIWMB0GA1UdDgQWBBSt+tg2
jtElDp77UIfDdt6dfkUK8jAfBgNVHSMEGDAWgBSxj5iZZ9MPJQnj0pcHxfhbX2vb
bzAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvMy9CMThGOTg5
OTY3RDMwRjI1MDlFM0QyOTcwN0M1Rjg1QjVGNkJEQjZGLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9zWS1ZbVdmVER5
VUo0OUtYQjhYNFcxOXIyMjguY2VyMIGRBggrBgEFBQcBCwSBhDCBgTB/BggrBgEF
BQcwC4ZzcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5
MDUzMDAwMDAvMy8zMjMwMzAzMTNhNjQ2NjMwM2EzMjMwMzYzYTNhMmYzNDM4MmQz
NDM4MjAzZDNlMjAzMzM3MzkzOTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN8AIGMA0GCSqGSIb3
DQEBCwUAA4IBAQBSnRPqnwe7m8iHXBkY7bSywRXh+eMAjX2KnH0TEwZhHsIia2fZ
C7i3KdPc6HTTJfDWFSiHrMCOIrQg/XtUQmbTu45JQZSBVzkDbPaKSqIvXZs34nlP
VIe+4A77/Os+qz5oQiirGR1ad0EYXkbCQWI4mm69I4d6hrHfaaUGzUeSJdxzs2/Y
ZD0GS+uzyiyArbHHQOqCz4ftyUuiFB9Zb87WH3DhV0iQKwrzMy/p21m4BHCzI4fo
PsYBH4kxg8IvAIFOS1farTl/TBkcvnAvvprftj6TxbXruQSb4V/Wld+TaXPy7bT0
BPhkbKriPBbxQUIqhxHG/M79UUOnXNCC0Ba1
-----END CERTIFICATE-----
Generated at Sat Apr 26 08:00:37 2025 by rpki-client