Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134332e302f32342d3234203d3e203330303331.roa
File: 3137302e31302e3134332e302f32342d3234203d3e203330303331.roa (raw, json)
Hash identifier: 5YCxj7b3Rqkiut2Jo0TuBSjtP7TxdwENC6huxz6Ek5Y=
Subject key identifier: 31:23:6F:DA:EF:5C:AD:12:A4:5D:90:E4:83:E2:30:1D:D2:AF:04:D5
Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial: 358D729243CD2BB19F04853C2B3B8477FCF58B5A
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134332e302f32342d3234203d3e203330303331.roa
Signing time: Fri 02 Aug 2024 11:24:27 +0000
ROA not before: Fri 02 Aug 2024 11:19:27 +0000
ROA not after: Fri 01 Aug 2025 11:24:27 +0000
asID: 30031
IP address blocks: 170.10.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:8d:72:92:43:cd:2b:b1:9f:04:85:3c:2b:3b:84:77:fc:f5:8b:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Validity
Not Before: Aug 2 11:19:27 2024 GMT
Not After : Aug 1 11:24:27 2025 GMT
Subject: CN=31236FDAEF5CAD12A45D90E483E2301DD2AF04D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:47:47:63:1d:07:4a:9c:e9:70:92:3a:11:f0:
6d:51:e8:84:89:10:00:1d:df:d9:b9:07:59:2c:f2:
6e:7d:e4:52:8d:d8:6b:aa:1e:8b:a1:93:c7:dc:f8:
52:ba:5f:2a:be:93:b3:c9:ab:1a:40:b2:e0:75:9c:
f1:e8:11:74:32:5b:3a:2d:e8:56:a0:a7:86:c0:8f:
ff:a0:32:4f:97:75:64:d0:65:2c:31:93:18:79:33:
34:e7:14:1d:9a:cc:dc:0f:7b:67:e0:35:7a:f2:71:
1b:d9:10:36:38:12:cd:e8:a6:bc:f5:9d:fc:bc:ab:
54:d5:9a:b9:36:01:7d:46:77:00:17:92:fe:bd:7f:
27:2b:d5:58:88:61:39:57:50:78:87:84:45:4c:b7:
32:50:16:c0:53:f8:d7:c5:bc:b9:f3:45:4f:df:5d:
27:20:8c:fa:65:38:d1:4a:15:03:4a:43:b3:80:5e:
61:69:3a:76:79:04:69:65:2e:ae:53:a8:fa:b3:c8:
4b:0b:6a:33:38:c9:29:e6:d6:3a:d0:dd:73:66:b2:
65:d8:1a:45:1b:02:1d:ba:48:01:4d:32:63:4b:8f:
1d:45:ad:1d:8f:9c:c1:01:db:22:43:fe:22:98:25:
5e:d4:98:f3:5d:e0:20:10:cf:b3:1e:0f:c7:40:71:
c9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:23:6F:DA:EF:5C:AD:12:A4:5D:90:E4:83:E2:30:1D:D2:AF:04:D5
X509v3 Authority Key Identifier:
keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134332e302f32342d3234203d3e203330303331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.10.143.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:9f:5c:6e:2b:79:1c:db:94:2b:57:e3:00:57:de:9f:81:2b:
30:d7:62:92:cb:e2:21:09:ff:4b:13:ae:70:34:93:8b:18:e7:
69:08:cb:c7:e1:56:69:9f:5e:fb:7e:0a:99:3f:29:aa:f9:d6:
c7:5c:65:18:a0:94:a9:4e:35:61:15:f8:7a:89:2c:2a:e5:76:
9a:6f:7f:45:c8:6e:b6:0a:bf:7a:a1:cb:b0:45:2f:20:a4:a8:
95:8b:59:6d:9a:11:61:a8:b8:45:2f:4a:02:5c:ec:b0:c0:d5:
83:db:7d:59:55:b2:c1:0f:3d:43:c2:54:b8:c8:e3:ee:25:75:
53:00:62:2d:22:f0:08:ba:fa:0a:08:70:aa:ec:1d:74:83:29:
a9:c1:3f:b0:e1:54:e4:7f:7c:97:1e:f8:66:f2:ad:e8:ea:9d:
f7:5a:78:64:e4:44:cf:28:5f:e6:50:52:30:18:14:a2:c8:34:
06:d1:19:1a:de:66:fc:6a:59:0b:f8:1f:43:1e:a6:f7:ab:15:
17:ea:9e:84:4b:d3:60:38:52:ef:7b:9b:7d:42:9b:cf:55:5e:
c6:ec:a2:c5:e8:28:23:00:53:a6:a8:cb:ac:c6:88:fc:36:44:
6a:2d:72:18:ca:96:e8:cf:c2:73:92:39:55:7d:d5:3f:e8:b0:
eb:0e:83:ed
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIUNY1ykkPNK7GfBIU8KzuEd/z1i1owDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll
NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjQwODAyMTExOTI3WhcNMjUwODAxMTEyNDI3
WjAzMTEwLwYDVQQDEygzMTIzNkZEQUVGNUNBRDEyQTQ1RDkwRTQ4M0UyMzAxREQy
QUYwNEQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7EdHYx0HSpzp
cJI6EfBtUeiEiRAAHd/ZuQdZLPJufeRSjdhrqh6LoZPH3PhSul8qvpOzyasaQLLg
dZzx6BF0Mls6LehWoKeGwI//oDJPl3Vk0GUsMZMYeTM05xQdmszcD3tn4DV68nEb
2RA2OBLN6Ka89Z38vKtU1Zq5NgF9RncAF5L+vX8nK9VYiGE5V1B4h4RFTLcyUBbA
U/jXxby580VP310nIIz6ZTjRShUDSkOzgF5haTp2eQRpZS6uU6j6s8hLC2ozOMkp
5tY60N1zZrJl2BpFGwIdukgBTTJjS48dRa0dj5zBAdsiQ/4imCVe1JjzXeAgEM+z
Hg/HQHHJ8QIDAQABo4IChzCCAoMwHQYDVR0OBBYEFDEjb9rvXK0SpF2Q5IPiMB3S
rwTVMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE
AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5
NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI
KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy
LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj
NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGLBggrBgEFBQcBCwR/MH0w
ewYIKwYBBQUHMAuGb3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRv
cnkvQTkxOTJBOTgwMDAwLzQvMzEzNzMwMmUzMTMwMmUzMTM0MzMyZTMwMmYzMjM0
MmQzMjM0MjAzZDNlMjAzMzMwMzAzMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqgqPMA0GCSqGSIb3
DQEBCwUAA4IBAQBrn1xuK3kc25QrV+MAV96fgSsw12KSy+IhCf9LE65wNJOLGOdp
CMvH4VZpn177fgqZPymq+dbHXGUYoJSpTjVhFfh6iSwq5Xaab39FyG62Cr96ocuw
RS8gpKiVi1ltmhFhqLhFL0oCXOywwNWD231ZVbLBDz1DwlS4yOPuJXVTAGItIvAI
uvoKCHCq7B10gympwT+w4VTkf3yXHvhm8q3o6p33Wnhk5ETPKF/mUFIwGBSiyDQG
0Rka3mb8alkL+B9DHqb3qxUX6p6ES9NgOFLve5t9QpvPVV7G7KLF6CgjAFOmqMus
xoj8NkRqLXIYypboz8JzkjlVfdU/6LDrDoPt
-----END CERTIFICATE-----
Generated at Fri Apr 11 16:30:33 2025 by rpki-client