Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/0/3230332e32382e3138312e302f32342d3234203d3e2039343439.roa
File: 3230332e32382e3138312e302f32342d3234203d3e2039343439.roa (raw, json)
Hash identifier: OFQUaZfxmar8QdwOWotCs19NcWRunbT96cEQtkG/1Oc=
Subject key identifier: E2:AC:6E:1B:4F:F8:C2:40:3D:4B:7A:E0:24:60:1E:EB:69:DC:2D:A6
Certificate issuer: /CN=A91905300000/serialNumber=30356EF46D594DA57C7697011183ACFFE04613E0
Certificate serial: 16940C0BA989200A1993ACE6E69D3331F450DD5E
Authority key identifier: 30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/0/3230332e32382e3138312e302f32342d3234203d3e2039343439.roa
Signing time: Tue 04 Mar 2025 02:16:05 +0000
ROA not before: Tue 04 Mar 2025 02:11:05 +0000
ROA not after: Tue 03 Mar 2026 02:16:05 +0000
asID: 9449
IP address blocks: 203.28.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:94:0c:0b:a9:89:20:0a:19:93:ac:e6:e6:9d:33:31:f4:50:dd:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91905300000
Validity
Not Before: Mar 4 02:11:05 2025 GMT
Not After : Mar 3 02:16:05 2026 GMT
Subject: CN=E2AC6E1B4FF8C2403D4B7AE024601EEB69DC2DA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7a:fb:21:1c:3c:4a:43:cd:c7:62:2e:47:78:
cb:4f:0a:9b:54:e0:29:54:95:25:64:e9:cf:65:b4:
21:c3:2e:22:0b:ac:0f:e9:8a:b3:b6:2a:c4:70:21:
d7:94:78:f5:39:2f:c2:02:cb:71:3b:c7:7d:94:e6:
04:d6:62:9a:09:a3:b5:2d:10:c0:f9:93:f5:3f:db:
bb:20:a7:1b:ac:4a:29:64:1d:22:27:40:f4:54:cf:
fd:44:de:a8:d4:2f:2a:8d:18:af:75:7c:07:07:d3:
a2:20:20:bd:d9:f6:74:5b:7b:a4:25:4d:50:fb:fd:
4d:c7:95:a8:bc:fc:93:d8:cf:7a:e0:9d:5d:a4:9d:
2c:3a:af:d1:32:37:54:55:10:cd:9a:d2:13:c8:25:
9e:d6:5d:a8:de:d6:f9:f8:34:9f:07:21:19:65:a3:
b5:66:68:7f:f8:3f:5a:a1:19:cb:50:ba:87:ba:c0:
dc:91:56:41:90:76:c0:9c:d3:08:aa:8f:25:6b:ee:
ea:93:25:af:e6:1e:98:8c:6a:53:35:45:a7:9c:87:
a2:0e:58:83:39:3f:b6:f0:d1:7d:66:19:8b:b2:50:
8a:90:33:5e:40:b6:16:83:7d:be:34:0e:46:8a:8b:
bc:91:e1:26:f9:a8:13:56:6c:fc:a4:19:15:5c:ca:
2c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:AC:6E:1B:4F:F8:C2:40:3D:4B:7A:E0:24:60:1E:EB:69:DC:2D:A6
X509v3 Authority Key Identifier:
keyid:30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/3230332e32382e3138312e302f32342d3234203d3e2039343439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.28.181.0/24
Signature Algorithm: sha256WithRSAEncryption
77:ff:01:d9:5e:bc:69:9f:23:c5:86:5b:d7:b5:e0:ff:c7:a4:
82:2b:60:6e:89:33:1e:b6:b2:33:73:28:3f:be:9f:88:54:1c:
b5:dc:0b:4d:e0:01:04:fc:a2:45:08:38:1b:70:78:af:9e:ab:
1f:79:88:c1:34:33:cb:e2:26:d2:dd:06:f1:2e:94:1a:72:51:
ff:86:87:9c:be:99:ad:9e:4a:f5:1b:a5:4a:2a:5e:a5:47:2c:
5e:3f:73:15:f7:1d:2b:05:fd:69:6c:7e:95:10:bc:e3:db:a1:
23:a8:86:ba:e9:6f:bd:44:74:66:54:ec:97:fd:78:44:f4:ca:
21:37:7c:b3:54:4e:69:ee:2e:8e:6c:c6:1d:04:2c:57:c4:40:
85:79:0b:cb:eb:6a:74:68:53:3b:1a:f0:b8:7a:a6:d9:8d:f1:
74:93:d1:37:1c:44:b0:89:c0:c3:a8:4a:0c:69:48:96:43:e0:
78:dc:00:79:f2:0e:fb:25:b6:6e:0f:11:01:86:1d:d5:bb:41:
80:a3:7b:4b:16:39:94:98:20:10:17:6c:b5:6a:27:20:f9:fb:
0f:fd:a9:3e:da:a5:2f:16:a2:8a:0d:12:4a:71:bc:ad:ba:80:
53:10:97:fe:66:34:03:b7:fc:ce:96:90:ed:f8:ed:0a:16:c6:
69:26:f8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 20:15:30 2025 by rpki-client