Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/3/323030313a6466303a3230363a3a2f34382d3438203d3e2039343439.roa
File: 323030313a6466303a3230363a3a2f34382d3438203d3e2039343439.roa (raw, json)
Hash identifier: jQJGI2AgAF9e4h+fcQ6+4CmZOaRMb3hwefQVsymqQEs=
Subject key identifier: 13:9A:14:97:1B:CF:4E:C3:DD:3E:1F:61:59:EC:B4:FE:F1:34:FF:86
Certificate issuer: /CN=A911AC370000/serialNumber=B18F989967D30F2509E3D29707C5F85B5F6BDB6F
Certificate serial: 7321C56AECFDC4004DA8E6298D5820AC3AAC0545
Authority key identifier: B1:8F:98:99:67:D3:0F:25:09:E3:D2:97:07:C5:F8:5B:5F:6B:DB:6F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/3/323030313a6466303a3230363a3a2f34382d3438203d3e2039343439.roa
Signing time: Sun 03 Dec 2023 04:12:04 +0000
ROA not before: Sun 03 Dec 2023 04:07:04 +0000
ROA not after: Sun 01 Dec 2024 04:12:04 +0000
asID: 9449
IP address blocks: 2001:df0:206::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:21:c5:6a:ec:fd:c4:00:4d:a8:e6:29:8d:58:20:ac:3a:ac:05:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911AC370000/serialNumber=B18F989967D30F2509E3D29707C5F85B5F6BDB6F
Validity
Not Before: Dec 3 04:07:04 2023 GMT
Not After : Dec 1 04:12:04 2024 GMT
Subject: CN=139A14971BCF4EC3DD3E1F6159ECB4FEF134FF86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:37:a3:5c:7d:dd:08:8f:63:c9:da:9c:1c:ec:
17:c0:07:34:be:25:71:be:95:0a:38:3e:d8:22:9d:
2f:43:b7:e7:4b:aa:1a:39:b4:a7:ce:30:e2:b9:b0:
5b:cd:7e:65:5f:34:34:ef:56:d7:a3:d6:43:ae:5c:
8a:c5:7c:1d:8e:c3:0e:0c:76:58:8c:0d:c6:ef:88:
be:07:16:91:1e:02:6c:23:9f:42:2d:ad:b1:4f:e0:
12:17:46:51:66:1c:5a:28:4a:b3:30:ea:63:cc:7e:
93:62:e3:f6:42:4b:f9:d8:e9:bb:51:11:9d:1a:27:
0a:70:85:80:4c:af:56:be:1d:d1:91:31:27:59:33:
d0:ea:10:e0:cd:3d:0b:d7:17:a3:99:e6:98:1a:7f:
08:d7:ba:1a:bc:68:7c:85:e4:07:0c:d7:97:8d:6b:
1b:f0:01:31:3e:1f:11:8c:6e:f9:fb:41:2f:a7:05:
d2:d6:07:6b:d5:6f:9d:5f:90:60:5f:67:d3:5b:60:
36:55:1d:b7:1e:58:94:62:ba:51:08:e8:0b:ca:c9:
99:23:51:a5:f5:29:2c:f0:66:a2:b1:10:29:2c:aa:
d8:f2:2f:27:5d:65:1c:84:5c:a0:ba:a4:32:c2:3f:
b9:97:70:03:9b:d0:c5:53:f0:3d:c7:dc:60:1e:11:
3a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:9A:14:97:1B:CF:4E:C3:DD:3E:1F:61:59:EC:B4:FE:F1:34:FF:86
X509v3 Authority Key Identifier:
keyid:B1:8F:98:99:67:D3:0F:25:09:E3:D2:97:07:C5:F8:5B:5F:6B:DB:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/3/323030313a6466303a3230363a3a2f34382d3438203d3e2039343439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df0:206::/48
Signature Algorithm: sha256WithRSAEncryption
24:d8:c9:47:ad:88:f4:ae:c5:a6:6d:84:01:de:29:72:b5:b7:
9f:7c:3c:eb:23:4e:16:e6:9e:02:d5:d0:41:01:ba:4b:26:46:
5d:45:8c:9e:94:c5:dd:11:25:ba:c0:55:ce:e2:e7:fa:a6:b7:
5e:22:bd:00:9a:dc:35:3c:1f:48:9f:cd:d7:7d:ab:20:e8:a3:
5f:96:a5:21:b3:52:5d:44:88:2b:91:02:d0:75:e8:c3:f5:41:
06:10:76:27:78:40:a6:49:80:36:64:c6:f5:63:f2:fd:37:7b:
6d:ac:11:88:27:ec:c1:1d:33:7c:0e:fe:d5:71:3e:9a:18:14:
91:17:75:fd:34:dd:c0:73:a8:f2:61:9f:f0:08:ce:9f:5b:3f:
ab:e3:f6:92:c7:78:f7:d3:bd:e7:15:e8:8f:02:2d:43:06:20:
f8:4c:28:e7:39:e9:0e:5b:ba:85:00:a0:e0:f7:a3:e8:c6:d5:
09:d6:d7:56:f9:bd:4e:b3:1e:21:1d:93:0c:25:b4:78:2c:62:
37:29:88:28:49:5d:ab:c6:16:f0:ad:70:17:b2:16:19:0c:1f:
13:9b:27:61:83:1a:38:2c:48:34:95:1a:6c:81:f2:71:cb:69:
bd:2e:9b:9c:16:9d:19:8c:ce:54:4a:16:67:65:e4:de:e9:fc:
bb:0f:4b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:10:00 2025 by rpki-client