Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9150E4D0000/0/323430313a323036303a323030303a3a2f33362d3438203d3e20313437303230.roa
File: 323430313a323036303a323030303a3a2f33362d3438203d3e20313437303230.roa (raw, json)
Hash identifier: gPG8l3OXv2nZ75Sb3JVWXTUkACkZtrgOXoNSpOUaoI0=
Subject key identifier: E2:AD:CE:B8:15:A6:5B:C0:6A:8A:88:33:0A:05:EE:94:6B:3C:1B:E3
Certificate issuer: /CN=A9150E4D0000/serialNumber=6228A3C6D637801692F7D7D48251DAD36A3CDB7F
Certificate serial: 5E1025A723CA0CACBADB888F9AD2C3398045D911
Authority key identifier: 62:28:A3:C6:D6:37:80:16:92:F7:D7:D4:82:51:DA:D3:6A:3C:DB:7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiijxtY3gBaS99fUglHa02o8238.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/323430313a323036303a323030303a3a2f33362d3438203d3e20313437303230.roa
Signing time: Sat 01 Jun 2024 22:06:14 +0000
ROA not before: Sat 01 Jun 2024 22:01:14 +0000
ROA not after: Sat 31 May 2025 22:06:14 +0000
asID: 147020
IP address blocks: 2401:2060:2000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:10:25:a7:23:ca:0c:ac:ba:db:88:8f:9a:d2:c3:39:80:45:d9:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150E4D0000
Validity
Not Before: Jun 1 22:01:14 2024 GMT
Not After : May 31 22:06:14 2025 GMT
Subject: CN=E2ADCEB815A65BC06A8A88330A05EE946B3C1BE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:74:0f:e7:3e:a4:c2:06:17:1f:fb:78:36:cd:
ef:b3:3c:95:7a:35:2e:a1:01:dc:e6:a8:74:15:9a:
24:a5:79:ce:cd:b2:b0:3c:a3:5d:31:ae:0c:39:97:
6c:00:eb:12:1e:3f:33:aa:84:45:88:07:ee:58:b2:
ff:1a:4e:4f:5f:d4:91:72:19:8c:ce:d6:cd:b3:d1:
6b:c7:25:6a:2c:a3:68:28:cb:5d:17:0b:c0:d2:64:
92:1d:3b:bf:c8:81:fc:37:ee:e6:10:87:27:35:f2:
8f:38:aa:52:56:1f:28:ba:ef:8a:32:4d:29:86:07:
7a:c4:c2:81:5c:57:a2:84:36:97:22:03:2d:62:55:
a9:23:1e:86:9b:18:e3:29:a0:70:60:a3:d5:ad:66:
46:75:b3:9f:2a:0f:dc:9f:cb:2d:e5:7f:f1:79:16:
02:9e:6f:21:08:37:a0:06:dd:db:a3:14:02:c4:66:
b7:98:56:85:56:a7:70:fa:40:60:09:c6:ef:00:d1:
03:c3:86:ba:4e:77:a8:d5:56:b4:41:c5:4c:bf:c3:
17:74:d2:0d:84:22:dc:4d:33:3b:9a:7f:e1:26:43:
5c:fe:8a:ef:f8:fa:dd:51:ed:a4:90:42:2f:49:fd:
9d:ff:fc:55:f2:ca:ee:57:a7:94:62:cd:de:4f:42:
33:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:AD:CE:B8:15:A6:5B:C0:6A:8A:88:33:0A:05:EE:94:6B:3C:1B:E3
X509v3 Authority Key Identifier:
keyid:62:28:A3:C6:D6:37:80:16:92:F7:D7:D4:82:51:DA:D3:6A:3C:DB:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/6228A3C6D637801692F7D7D48251DAD36A3CDB7F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiijxtY3gBaS99fUglHa02o8238.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/323430313a323036303a323030303a3a2f33362d3438203d3e20313437303230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:2060:2000::/36
Signature Algorithm: sha256WithRSAEncryption
02:8a:91:72:1e:75:d8:b1:4b:9f:19:b0:8a:5a:ff:c3:03:85:
01:46:02:3e:8c:be:05:b7:dd:11:44:18:ef:88:e0:5e:7e:b2:
a0:44:aa:19:1e:7d:1c:c7:a9:51:a6:d3:7e:c3:9e:ca:5e:51:
10:7b:2a:c3:e1:c2:17:70:38:ef:20:eb:15:56:fe:83:d3:95:
e3:9b:f9:f8:f0:9d:63:58:ee:23:d6:db:33:01:35:ca:52:a6:
94:16:a7:60:d9:fc:92:6f:c0:67:fe:6d:8b:59:f5:e7:02:75:
0e:62:42:65:6f:83:9e:0c:16:b0:d9:8d:8d:6f:56:fb:74:7a:
f1:54:f1:7c:2f:0d:00:d6:d7:a5:da:08:4e:2d:c9:4e:0c:8f:
47:5f:05:71:58:50:68:30:2a:e9:b3:0b:85:c5:87:fa:9e:f9:
0f:6e:61:9f:9c:6e:a7:07:c7:d5:5c:ac:47:56:55:a1:b6:50:
11:00:51:2c:7b:c1:bc:76:92:bb:b3:ab:ea:78:83:06:49:94:
4a:f6:94:f7:4a:77:6b:98:f9:91:59:d2:41:94:d5:74:cf:ac:
34:5b:c0:ef:a2:81:67:53:c5:44:d2:d2:76:b3:ad:64:72:e6:
d7:72:b7:94:ca:cf:4d:4a:15:ce:54:43:9b:3e:31:40:e0:81:
65:33:86:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:10:30 2025 by rpki-client