Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/7/3130332e3138342e3137342e302f32332d3234203d3e2039343439.roa
File: 3130332e3138342e3137342e302f32332d3234203d3e2039343439.roa (raw, json)
Hash identifier: iIQUD9+YEQ81/NcOUX+hV+8k5sAgghpJApGeyoM7dlc=
Subject key identifier: 73:D4:B1:F9:53:6A:BA:A5:63:9A:79:C3:F3:00:9B:E0:29:91:4F:6C
Certificate issuer: /CN=A919619E0000/serialNumber=4B1987D5160068092602529871C93EA320045A75
Certificate serial: 43E4DB4DF72CA1D95FB4B1DD7720F06CE33F0DD0
Authority key identifier: 4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/7/3130332e3138342e3137342e302f32332d3234203d3e2039343439.roa
Signing time: Sun 03 Dec 2023 04:12:01 +0000
ROA not before: Sun 03 Dec 2023 04:07:01 +0000
ROA not after: Sun 01 Dec 2024 04:12:01 +0000
asID: 9449
IP address blocks: 103.184.174.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:e4:db:4d:f7:2c:a1:d9:5f:b4:b1:dd:77:20:f0:6c:e3:3f:0d:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919619E0000/serialNumber=4B1987D5160068092602529871C93EA320045A75
Validity
Not Before: Dec 3 04:07:01 2023 GMT
Not After : Dec 1 04:12:01 2024 GMT
Subject: CN=73D4B1F9536ABAA5639A79C3F3009BE029914F6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5a:b9:46:de:de:b6:a5:a5:5a:c0:75:8f:e4:
77:16:69:0f:eb:7f:ef:da:9c:40:ab:e4:13:fa:d2:
b0:49:4d:d9:1f:74:76:9e:5f:09:d0:65:36:77:e4:
e2:27:38:6e:ed:af:b7:9d:37:4d:99:51:c9:57:9a:
18:73:07:1c:3a:ae:a9:cd:a3:c5:74:1f:a6:bd:a0:
4a:c0:85:f1:a9:e0:2a:d8:52:88:1b:b7:cb:6f:e2:
16:9e:46:35:15:14:dc:3c:af:e1:2d:e9:54:2f:5d:
85:40:b5:fc:a2:7d:6d:32:03:cf:6a:22:95:e8:d9:
2a:17:d8:32:8e:e6:34:0f:f8:28:06:b5:3b:af:1a:
a8:14:3f:0f:6d:00:bf:6b:1b:90:18:7b:75:f5:57:
fe:5a:d3:4f:28:9e:4f:66:53:cf:d2:1b:22:38:2b:
4c:03:df:d4:fc:94:82:33:eb:2f:6d:68:db:e7:37:
62:ef:50:98:9b:70:fb:4b:1f:05:ce:8d:54:3a:6a:
17:40:06:1b:f3:c2:8d:c5:13:74:29:e5:1b:5a:90:
26:34:49:4a:37:5c:72:48:59:95:b5:dc:02:c5:bd:
0e:5d:37:a5:d2:d6:e7:c6:10:d7:87:53:79:d1:93:
59:b9:39:86:02:30:29:f2:77:87:58:20:bd:54:aa:
5a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D4:B1:F9:53:6A:BA:A5:63:9A:79:C3:F3:00:9B:E0:29:91:4F:6C
X509v3 Authority Key Identifier:
keyid:4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/3130332e3138342e3137342e302f32332d3234203d3e2039343439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.184.174.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:2a:9b:1d:b9:6d:6d:4c:7e:f2:7d:70:05:86:f6:42:bf:44:
57:7b:10:de:ed:50:78:31:e9:db:66:c1:9e:de:23:d1:6b:b3:
7b:0a:81:c8:43:4c:21:3d:fc:95:50:3f:49:0d:f2:b2:98:92:
89:b0:0f:40:35:d3:12:d4:c3:c3:25:93:45:e5:3b:2e:ef:cb:
ae:00:e8:3e:24:7d:26:e4:20:33:62:05:cf:a9:26:cb:0c:1f:
25:a7:ab:4a:b6:40:e9:80:bc:c6:b4:4b:e9:82:f7:bf:d6:3c:
69:1a:a9:bb:c0:56:67:91:5f:fd:ef:99:67:80:c1:10:53:52:
4f:c9:cb:f4:2e:3d:d4:a7:14:c6:d7:1d:ee:f7:27:4d:2c:1c:
2f:a5:42:40:f0:5a:33:bd:a7:91:35:79:05:85:f3:0a:d5:43:
1f:7f:47:d7:ed:68:92:46:90:7a:3d:e7:a9:7f:a0:35:10:e7:
14:7d:ec:d8:45:7f:89:37:c6:9f:73:22:7b:af:8b:dc:8d:95:
de:c2:4c:d0:e7:3e:65:02:e8:ca:ff:0a:29:5e:14:fd:62:2e:
db:cf:18:a5:47:93:56:e4:86:d4:4e:68:29:84:51:96:4a:d4:
fb:4d:05:1a:5b:d6:0c:82:3a:41:57:81:ba:cb:e4:28:1d:c8:
34:c7:43:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:51:16 2025 by rpki-client