Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/7/3130332e3138342e3137342e302f32332d3234203d3e2039383838.roa
File: 3130332e3138342e3137342e302f32332d3234203d3e2039383838.roa (raw, json)
Hash identifier: EKQwUVuzkFdB6hvG47b9y9VamdjPY3lACI/4wU0MC3A=
Subject key identifier: DC:EE:21:8D:78:48:40:45:41:4F:11:91:81:88:DF:F0:72:FC:61:5E
Certificate issuer: /CN=A919619E0000/serialNumber=4B1987D5160068092602529871C93EA320045A75
Certificate serial: 1604A07C03C73179CF1D2612A7CDC4D18DB2C99B
Authority key identifier: 4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/7/3130332e3138342e3137342e302f32332d3234203d3e2039383838.roa
Signing time: Mon 20 Mar 2023 23:00:58 +0000
ROA not before: Mon 20 Mar 2023 22:55:58 +0000
ROA not after: Mon 18 Mar 2024 23:00:58 +0000
asID: 9888
IP address blocks: 103.184.174.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:04:a0:7c:03:c7:31:79:cf:1d:26:12:a7:cd:c4:d1:8d:b2:c9:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919619E0000/serialNumber=4B1987D5160068092602529871C93EA320045A75
Validity
Not Before: Mar 20 22:55:58 2023 GMT
Not After : Mar 18 23:00:58 2024 GMT
Subject: CN=DCEE218D78484045414F11918188DFF072FC615E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:aa:5e:73:8e:b1:44:d2:9f:2c:f4:e9:b5:53:
80:fa:94:41:80:27:21:56:ca:ab:f3:14:bc:81:2f:
b8:25:26:16:a0:1a:60:59:dc:b4:20:69:d3:8c:5e:
47:8c:30:b8:f1:04:53:84:22:15:d1:ba:02:92:ab:
f4:b8:0a:8b:05:65:60:bd:95:13:0f:13:95:ad:bc:
12:0f:95:30:76:b6:d0:9f:7c:82:1c:4d:ea:85:58:
99:cb:59:dd:fd:39:a2:3c:50:8a:b3:79:a3:c8:e6:
ee:fc:56:89:33:4e:15:52:b3:1d:f4:92:19:ec:19:
5a:cb:e5:c2:bf:3f:a2:3c:b6:af:a1:05:42:56:89:
5c:ce:c1:60:87:b4:8c:25:65:28:96:8d:69:e8:8b:
a3:9d:f5:44:2e:5c:af:97:fb:33:5f:5e:73:f0:ff:
9c:b3:4b:9e:8f:1e:4d:ec:8d:9d:2c:3a:bc:78:65:
a0:87:d5:14:06:d1:be:7e:41:39:9a:1c:d2:f2:f0:
82:9b:c2:39:0b:7f:d3:c5:66:24:1e:0f:d3:32:51:
cb:e5:c8:0d:7c:df:b7:f0:0c:5a:29:73:c8:65:f4:
7f:56:ee:e7:6b:53:7b:e0:40:0e:06:2c:fb:54:d1:
66:91:1c:4e:de:52:4e:d5:d7:61:22:aa:d1:29:60:
a3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:EE:21:8D:78:48:40:45:41:4F:11:91:81:88:DF:F0:72:FC:61:5E
X509v3 Authority Key Identifier:
keyid:4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/3130332e3138342e3137342e302f32332d3234203d3e2039383838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.184.174.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:15:4f:88:75:5d:0f:42:b4:3c:27:fc:f3:f2:e4:0e:ba:e8:
87:1f:60:1d:35:62:d7:28:0e:ad:91:25:a0:0d:7c:cf:e0:8e:
e0:38:18:a0:0d:32:7c:c3:5e:67:3b:aa:c8:13:86:01:a9:01:
04:85:ae:c0:fe:8a:8a:08:f3:37:f0:19:22:0a:1d:c3:6e:a8:
da:e1:ad:7d:f6:27:fe:14:15:c3:1d:9c:a6:99:13:d8:9f:8f:
e3:c9:35:10:97:5b:ab:bc:bb:12:a7:ca:db:6f:06:71:32:cd:
bf:ac:2e:1e:db:3d:1e:0a:d2:2c:45:61:51:dc:fc:ee:07:9b:
2c:5f:23:0d:e6:3a:c7:dd:f4:0a:16:86:d6:bf:51:43:8b:c8:
e2:71:92:b3:8f:66:0e:90:e1:54:ac:76:a3:3d:bd:f7:fb:f3:
53:3b:08:56:52:b3:86:dd:33:b8:90:7e:d7:72:e5:6d:00:e5:
08:4e:5c:9e:26:9e:d8:88:4f:7c:50:51:d0:89:48:c6:b3:2f:
17:95:7b:0f:4a:4a:01:b4:f5:9a:3a:cb:78:51:b6:18:7f:29:
e7:f1:83:f7:5d:0a:ae:18:56:13:37:62:c6:50:b9:9a:0d:ca:
f3:12:4c:c7:72:6d:bc:cf:42:0e:21:f9:de:69:e5:f8:cf:c8:
82:cf:f5:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:48:07 2025 by rpki-client