Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91A61310000/0/34332e3235352e38302e302f32342d3234203d3e20323134373636.roa
File: 34332e3235352e38302e302f32342d3234203d3e20323134373636.roa (raw, json)
Hash identifier: 5hWADdZsX05Xm71wk93nvrisrc0F3dwJlLqjnpXhvtY=
Subject key identifier: 13:C8:D4:C3:FF:E1:08:8D:3C:F3:FB:3F:7F:B1:F3:84:54:05:BA:82
Certificate issuer: /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Certificate serial: 5ACFAB885DC2049A74FB69A9512BA9F3313BEA2F
Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/34332e3235352e38302e302f32342d3234203d3e20323134373636.roa
Signing time: Sun 13 Oct 2024 10:59:41 +0000
ROA not before: Sun 13 Oct 2024 10:54:41 +0000
ROA not after: Sun 12 Oct 2025 10:59:41 +0000
asID: 214766
IP address blocks: 43.255.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:cf:ab:88:5d:c2:04:9a:74:fb:69:a9:51:2b:a9:f3:31:3b:ea:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A61310000
Validity
Not Before: Oct 13 10:54:41 2024 GMT
Not After : Oct 12 10:59:41 2025 GMT
Subject: CN=13C8D4C3FFE1088D3CF3FB3F7FB1F3845405BA82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:80:83:4d:64:5b:64:60:d4:28:12:c0:9d:16:
ee:b3:91:ed:fd:4b:cc:48:da:d7:47:0b:64:5a:5b:
19:a0:b1:34:98:a4:c8:d4:fb:c6:77:ad:7f:fa:71:
56:15:27:03:57:d9:a9:70:ac:d6:74:43:6e:88:e3:
4f:9a:40:a7:fd:1b:78:10:ef:da:27:b2:0a:4d:51:
6e:24:43:96:17:4f:03:41:94:42:06:b1:dd:70:c6:
db:d2:b4:70:06:ff:33:92:f6:bc:34:dd:c3:ba:4f:
40:f9:77:92:1d:c8:64:e2:d7:be:30:78:93:0f:54:
f0:7b:f4:a6:16:bc:b6:a0:11:2e:87:47:97:4d:d5:
7b:4f:83:78:39:c0:d7:bd:e6:5c:f0:84:c6:b3:4e:
52:d6:2d:90:fe:5c:85:dd:45:ef:88:8e:11:9c:5f:
7e:4b:92:58:a5:8c:af:66:fb:a5:6e:44:a4:29:b0:
07:73:94:08:9a:ae:7f:eb:36:c9:83:6d:83:3f:6b:
55:18:16:62:25:a5:7f:ec:a3:f9:3c:55:b3:70:cb:
1c:d0:ba:b5:17:9f:d4:84:65:c4:31:58:f8:fe:52:
97:72:d6:3c:64:b2:4a:ac:56:a4:05:c9:2b:a3:8b:
34:65:4d:a4:6a:83:11:d9:5a:b9:4e:3b:e8:27:b5:
3c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C8:D4:C3:FF:E1:08:8D:3C:F3:FB:3F:7F:B1:F3:84:54:05:BA:82
X509v3 Authority Key Identifier:
keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/34332e3235352e38302e302f32342d3234203d3e20323134373636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.255.80.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:92:e7:4c:eb:1b:33:73:51:a9:c2:06:55:ce:ac:35:6c:1b:
c6:f1:b1:dd:8f:6d:e5:d5:e2:df:f5:23:cc:a6:8d:3b:07:29:
c6:21:53:5f:49:a3:7f:84:58:dc:07:29:8c:2e:ce:8c:11:f2:
4c:75:8b:ad:7e:dd:7d:35:df:ad:2d:d0:2f:b5:73:fe:8e:8f:
d9:e0:5b:04:ff:b3:9e:b2:e8:78:aa:d5:7e:99:a0:b8:f0:3d:
e4:5d:3a:c7:b5:33:9e:4e:91:4d:1b:86:52:b7:62:63:02:f4:
2c:3f:bc:d8:c9:3d:87:6a:c3:52:22:ee:3e:ec:f6:12:9f:07:
05:da:e5:4b:0e:91:a4:d2:fe:3a:3e:cb:b5:da:42:c0:51:b0:
67:62:34:03:17:f6:7e:54:9d:0b:d0:0b:a3:66:45:10:92:cf:
76:10:47:11:d1:54:7b:86:77:0c:61:37:fa:2a:23:a6:8b:0b:
ea:92:76:f4:33:ca:cf:70:f6:9c:3c:a7:d9:08:c7:17:f3:d0:
33:b9:09:3f:6c:f2:56:44:ba:aa:19:39:a1:7d:bc:6e:b0:65:
c7:1c:f1:34:69:e1:34:d4:e5:6a:4f:6e:f7:24:2a:0f:be:ad:
89:7d:b6:e7:86:01:ea:c3:34:8d:2e:4a:cc:b7:54:90:66:fa:
0a:35:82:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:28:46 2025 by rpki-client