Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/4/323430333a376530303a663030313a3a2f34382d3438203d3e2039343439.roa
File: 323430333a376530303a663030313a3a2f34382d3438203d3e2039343439.roa (raw, json)
Hash identifier: YpLMDzsVkDKuZ4wh8mc+03AJNZBdhyLBl8+xr2WL+Uw=
Subject key identifier: F2:0F:19:89:5C:FD:2A:1B:70:19:EC:E9:F6:4B:15:E5:6A:BC:54:78
Certificate issuer: /CN=A91E539C0000/serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4
Certificate serial: 768D7FBEFB67D05C77C6B36E479601D1B41B2BCC
Authority key identifier: B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/4/323430333a376530303a663030313a3a2f34382d3438203d3e2039343439.roa
Signing time: Sun 03 Dec 2023 04:12:03 +0000
ROA not before: Sun 03 Dec 2023 04:07:03 +0000
ROA not after: Sun 01 Dec 2024 04:12:03 +0000
asID: 9449
IP address blocks: 2403:7e00:f001::/48 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:8d:7f:be:fb:67:d0:5c:77:c6:b3:6e:47:96:01:d1:b4:1b:2b:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E539C0000/serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4
Validity
Not Before: Dec 3 04:07:03 2023 GMT
Not After : Dec 1 04:12:03 2024 GMT
Subject: CN=F20F19895CFD2A1B7019ECE9F64B15E56ABC5478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fb:0e:7d:be:12:19:34:0b:e9:be:2c:df:56:
ba:4e:19:92:51:63:d9:09:b1:33:4b:21:ac:c2:94:
5b:dd:c8:72:32:99:31:a9:8f:21:20:ea:6c:2e:42:
72:04:fc:73:72:1c:60:42:d6:2f:a6:8c:5c:e0:1c:
00:1b:f8:6a:f6:ba:17:f7:40:a1:6d:cf:54:dc:77:
c0:a0:43:01:b6:53:ff:2a:76:cb:2c:4b:8d:ed:6d:
b9:fc:44:0e:b2:83:0d:d4:fb:9a:b6:50:ca:81:a8:
6d:ee:fb:4c:e5:c2:4d:01:8c:d5:01:29:51:4e:93:
86:ae:e3:86:7b:90:4f:d1:b9:0c:ef:4d:92:6e:24:
92:78:57:8a:c9:94:1d:89:ad:0c:aa:3d:6b:25:7c:
2c:b8:aa:74:50:52:bb:08:67:f7:29:e1:02:02:dd:
f7:1a:05:14:a1:34:64:42:7b:6e:c1:61:53:b4:80:
d7:7a:d0:96:ea:a6:5b:9d:f9:ef:34:40:e1:b5:8d:
3f:76:e2:6c:7e:4f:86:c7:3c:31:4d:42:fb:02:1a:
59:5d:ee:e0:b7:41:33:eb:46:8e:23:0a:3d:0f:87:
af:70:86:2d:b2:16:fc:6f:98:b4:bc:43:81:63:4f:
e5:ce:a4:0c:33:02:63:85:05:31:9e:05:3d:ce:85:
72:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:0F:19:89:5C:FD:2A:1B:70:19:EC:E9:F6:4B:15:E5:6A:BC:54:78
X509v3 Authority Key Identifier:
keyid:B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/323430333a376530303a663030313a3a2f34382d3438203d3e2039343439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2403:7e00:f001::/48
Signature Algorithm: sha256WithRSAEncryption
b9:00:40:04:f7:7a:6d:95:e2:6c:c9:62:c3:47:8e:66:fc:9b:
60:0b:c7:5a:15:de:a0:c7:e4:db:76:93:8c:95:c8:2e:db:75:
19:31:23:f5:11:00:d9:f3:5f:9d:42:e6:8d:c1:5e:35:ad:c1:
92:f1:be:b0:f7:f1:97:76:18:b9:49:33:e4:2b:41:29:53:ad:
f6:26:ad:71:da:ed:6a:22:d2:4e:da:66:9f:af:be:10:7c:2a:
49:08:c1:3d:f1:75:ef:24:62:52:4d:12:31:9c:b8:93:f8:61:
83:ee:c0:18:d7:11:9d:4e:70:8d:48:81:cb:47:ed:75:05:78:
e3:6a:a0:18:52:06:8f:9d:dd:4d:1b:0e:89:2d:39:79:22:ec:
d3:04:06:f0:08:a5:fe:eb:a0:05:da:11:f2:c6:f8:41:46:5b:
77:af:2c:85:0e:28:0e:6b:7d:c3:eb:fa:cf:96:31:97:84:56:
d0:f7:44:5a:55:bd:e1:63:a1:fe:3d:57:03:3f:7c:91:8b:5a:
91:7d:6f:e1:84:e0:fe:c2:cd:85:42:a7:61:d2:59:ee:67:01:
aa:e8:00:c8:0f:00:33:0a:12:d1:c7:7d:5f:8c:60:db:3b:63:
44:41:41:53:12:e5:88:81:42:92:a7:cb:a4:6b:85:4e:7a:86:
fe:28:cb:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 11:27:28 2024 by rpki-client on console-fra.rpki-client.org