Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91E54810000/0/3130332e3137332e3232342e302f32342d3234203d3e20333938373034.roa
File: 3130332e3137332e3232342e302f32342d3234203d3e20333938373034.roa (raw, json)
Hash identifier: NOGiiY918DvBlQquMQqchM/2tk+zFTCvEUe0hw6M5FA=
Subject key identifier: 32:3B:27:1D:82:56:E9:00:1C:FE:BE:F2:2C:89:00:E0:33:27:5D:6C
Certificate issuer: /CN=A91E54810000/serialNumber=D988B2DA7F4305F0CDB93BF88B6F5A9DF98D8940
Certificate serial: 2817595FCCA0C6F65EBC5524FC4FD439958C876F
Authority key identifier: D9:88:B2:DA:7F:43:05:F0:CD:B9:3B:F8:8B:6F:5A:9D:F9:8D:89:40
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Yiy2n9DBfDNuTv4i29anfmNiUA.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91E54810000/0/3130332e3137332e3232342e302f32342d3234203d3e20333938373034.roa
Signing time: Tue 30 Apr 2024 08:14:38 +0000
ROA not before: Tue 30 Apr 2024 08:09:38 +0000
ROA not after: Tue 29 Apr 2025 08:14:38 +0000
asID: 398704
IP address blocks: 103.173.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:17:59:5f:cc:a0:c6:f6:5e:bc:55:24:fc:4f:d4:39:95:8c:87:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E54810000
Validity
Not Before: Apr 30 08:09:38 2024 GMT
Not After : Apr 29 08:14:38 2025 GMT
Subject: CN=323B271D8256E9001CFEBEF22C8900E033275D6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:f8:c8:ce:36:e0:33:56:aa:b3:b2:40:f2:54:
d9:94:52:4b:8c:aa:6a:a7:52:12:b4:3e:0e:b3:fe:
67:39:22:f9:e7:4c:f6:ee:7c:66:7c:5f:7d:79:30:
7c:ed:20:29:3c:8a:33:51:6a:ac:d6:ef:01:2c:cb:
67:de:87:80:77:b5:f4:1f:a1:ad:fd:ff:cd:96:4f:
3e:8e:61:67:4c:a7:de:87:51:94:83:2b:92:6d:6c:
86:06:96:07:3e:6e:fd:88:3c:05:69:1f:95:a0:f7:
a8:47:db:82:79:a9:b8:c2:e6:dc:4d:88:f1:7d:1a:
cc:59:64:aa:4e:73:2f:bd:c2:fb:fe:a7:04:76:3b:
94:40:8c:94:3f:7b:a4:d9:2c:01:00:fc:71:c0:65:
27:49:ff:77:e0:fb:34:e6:85:98:26:df:04:62:05:
2b:48:a5:33:14:71:7e:43:4e:e7:f0:26:f2:2a:35:
95:a9:2b:4c:2f:e9:5f:d9:e4:69:7d:c6:61:05:33:
22:70:80:66:1e:e3:23:2f:68:a9:64:45:d3:02:0a:
8c:e6:6d:5b:1f:93:d7:11:10:d7:a1:d8:b6:b8:b4:
02:92:10:10:e9:46:46:56:7f:30:5b:0f:e2:bb:e2:
8e:bb:55:3f:5b:c6:55:b0:68:33:fd:27:e7:8e:08:
b1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:3B:27:1D:82:56:E9:00:1C:FE:BE:F2:2C:89:00:E0:33:27:5D:6C
X509v3 Authority Key Identifier:
keyid:D9:88:B2:DA:7F:43:05:F0:CD:B9:3B:F8:8B:6F:5A:9D:F9:8D:89:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91E54810000/0/D988B2DA7F4305F0CDB93BF88B6F5A9DF98D8940.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Yiy2n9DBfDNuTv4i29anfmNiUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91E54810000/0/3130332e3137332e3232342e302f32342d3234203d3e20333938373034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.173.224.0/24
Signature Algorithm: sha256WithRSAEncryption
69:de:20:a1:04:15:79:53:56:99:ef:41:33:b4:e1:4a:a6:26:
49:6f:51:ec:66:75:b6:5f:06:03:a7:b5:5b:36:81:bb:89:e3:
4f:9a:1c:49:e5:01:9d:ec:8e:8f:75:2a:30:37:f3:0d:4e:14:
ae:ff:78:18:5e:27:a4:61:79:56:98:e8:b9:b7:fd:7e:68:c5:
a4:a1:f3:cc:49:0c:63:98:b5:f0:f3:d4:ff:4b:38:6a:06:86:
4a:4a:c5:b0:5f:1a:4a:77:54:0f:d1:df:4e:0a:11:3d:36:14:
37:0c:d6:b6:ba:e2:4d:31:e9:a5:94:cf:51:f3:15:97:c4:00:
78:33:f3:e9:e9:3f:bf:4d:45:e3:2b:45:3f:14:bd:ae:6b:00:
a2:6c:6c:41:e4:f0:31:97:47:4c:94:41:4c:da:ba:88:45:cb:
0a:5d:6f:65:ab:a8:0b:34:ba:84:12:69:2c:a9:e0:cf:d8:8e:
06:9b:8e:61:55:53:87:42:02:c8:c2:2a:8a:f7:e8:54:fc:6a:
ad:0f:1f:d6:5b:7e:9e:56:79:90:7c:76:b9:37:b4:a7:8f:56:
15:cc:9a:68:f3:c3:f1:a3:8a:ba:fd:0f:6d:47:e9:32:c6:52:
26:b4:37:7f:ad:d7:14:9d:3e:f4:37:90:ca:6c:4f:8c:9d:bf:
87:05:02:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:08:05 2025 by rpki-client