Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/3/3230332e342e3137312e302f32342d3234203d3e2039343439.roa
File: 3230332e342e3137312e302f32342d3234203d3e2039343439.roa (raw, json)
Hash identifier: XqWoV10SEU1HG5Sail5YUA7N1VSrlGxggqT/Bnmgvv8=
Subject key identifier: D2:58:9C:4D:52:80:B6:FD:1E:D5:D9:DB:FB:C8:A5:A7:42:1F:1E:73
Certificate issuer: /CN=A911AC370000/serialNumber=B18F989967D30F2509E3D29707C5F85B5F6BDB6F
Certificate serial: 680D2E2F611F1B4492612891DB206868C6B50E8A
Authority key identifier: B1:8F:98:99:67:D3:0F:25:09:E3:D2:97:07:C5:F8:5B:5F:6B:DB:6F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/3/3230332e342e3137312e302f32342d3234203d3e2039343439.roa
Signing time: Sun 03 Dec 2023 04:12:05 +0000
ROA not before: Sun 03 Dec 2023 04:07:05 +0000
ROA not after: Sun 01 Dec 2024 04:12:05 +0000
asID: 9449
IP address blocks: 203.4.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:0d:2e:2f:61:1f:1b:44:92:61:28:91:db:20:68:68:c6:b5:0e:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911AC370000/serialNumber=B18F989967D30F2509E3D29707C5F85B5F6BDB6F
Validity
Not Before: Dec 3 04:07:05 2023 GMT
Not After : Dec 1 04:12:05 2024 GMT
Subject: CN=D2589C4D5280B6FD1ED5D9DBFBC8A5A7421F1E73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ce:79:79:74:a5:9b:8b:53:f3:c7:67:d7:0c:
60:ce:b7:80:e7:ef:a1:0f:e0:bd:ea:66:3d:e3:52:
fa:5f:c4:82:24:3e:8e:1f:12:b7:21:c3:44:7d:f8:
44:8e:8a:4a:56:86:28:84:41:31:0c:b4:2e:b4:4c:
7a:11:f2:05:cc:42:e0:4d:01:54:25:a0:c1:76:b7:
0a:be:50:eb:2e:a2:d7:85:58:39:8e:eb:13:cf:31:
9c:0e:b7:93:77:6e:15:50:5d:d8:26:82:0e:36:91:
e3:44:fb:ff:be:d9:cf:f2:b9:70:6a:44:76:45:9b:
e8:32:e1:0b:ef:69:99:15:9e:d6:9f:b3:fe:6d:07:
fe:fc:e7:38:ba:22:96:66:ff:c3:da:b3:8b:4e:c1:
40:ae:2c:21:04:e0:8c:bf:cb:84:fe:0f:f6:9c:ff:
5c:9d:c9:1d:0d:e3:b7:de:76:6d:e4:17:1b:d0:d5:
a0:89:1e:e4:ca:69:40:9c:ab:e8:02:36:ed:68:06:
6f:e0:1d:2d:bc:cd:2f:58:5a:64:02:27:23:24:36:
05:67:61:99:af:23:9c:f1:05:88:8f:54:ca:86:70:
cb:d4:4c:bf:8d:2d:c7:1d:fe:09:6a:67:c7:0a:67:
f0:da:7d:d1:98:eb:94:1d:76:88:6f:c6:a7:2e:77:
ce:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:58:9C:4D:52:80:B6:FD:1E:D5:D9:DB:FB:C8:A5:A7:42:1F:1E:73
X509v3 Authority Key Identifier:
keyid:B1:8F:98:99:67:D3:0F:25:09:E3:D2:97:07:C5:F8:5B:5F:6B:DB:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/3/3230332e342e3137312e302f32342d3234203d3e2039343439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.4.171.0/24
Signature Algorithm: sha256WithRSAEncryption
04:48:2a:f3:cf:35:b2:5d:68:63:b4:fb:97:9a:ce:d2:d7:f6:
a6:d2:02:60:a5:61:f7:c2:c4:7e:80:d0:1a:8e:62:32:d0:da:
a1:c6:67:8b:77:d7:f6:70:70:d9:fc:ba:0f:ab:21:41:3b:84:
63:3f:27:b1:5b:7b:40:a4:30:59:72:c6:6d:68:2e:e2:a6:b0:
95:cb:d8:4d:3e:54:34:6d:f3:f9:a8:fc:78:f2:8c:44:33:ca:
14:a2:95:ea:9f:ae:31:1c:5d:18:37:b2:25:aa:04:1b:0d:06:
b9:b0:81:3b:d2:7c:4f:24:d5:d4:fa:c7:e9:ee:d8:1e:28:d3:
78:e4:65:81:da:e2:68:d8:fc:07:08:af:57:5e:ea:5a:09:b0:
c9:30:c9:fe:80:65:0d:08:47:b0:88:e8:ff:2e:5b:a0:9f:30:
66:4d:01:11:d9:57:da:02:75:0e:6f:74:ee:6e:e0:44:1b:dc:
80:85:8b:7d:3d:10:2a:44:38:31:da:a1:40:cd:80:34:2a:3b:
da:49:d9:57:42:c4:59:c9:63:6c:fa:a1:71:72:0c:e7:03:de:
4d:18:ff:d5:b6:78:e2:22:7c:ea:8b:62:94:e2:47:54:b7:c5:
52:91:ef:f6:9d:6c:d0:57:90:46:52:7d:5a:38:63:1c:bc:94:
be:d1:03:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:42:55 2025 by rpki-client