Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91E54810000/0/3130332e3137332e3232352e302f32342d3234203d3e20323134373630.roa
File: 3130332e3137332e3232352e302f32342d3234203d3e20323134373630.roa (raw, json)
Hash identifier: yPSmYs8E5fDkvfo+Rden//MJ2GgUiuaVxMD3uvXP4x4=
Subject key identifier: 0E:D7:D7:DA:C7:96:84:74:D8:5A:FA:1E:89:96:0E:22:03:8E:B8:CD
Certificate issuer: /CN=A91E54810000/serialNumber=D988B2DA7F4305F0CDB93BF88B6F5A9DF98D8940
Certificate serial: 328CD7B9AC2F174FADF4AD2AD5C89A53E5DC2E82
Authority key identifier: D9:88:B2:DA:7F:43:05:F0:CD:B9:3B:F8:8B:6F:5A:9D:F9:8D:89:40
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Yiy2n9DBfDNuTv4i29anfmNiUA.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91E54810000/0/3130332e3137332e3232352e302f32342d3234203d3e20323134373630.roa
Signing time: Sun 10 Nov 2024 00:31:39 +0000
ROA not before: Sun 10 Nov 2024 00:26:39 +0000
ROA not after: Sun 09 Nov 2025 00:31:39 +0000
asID: 214760
IP address blocks: 103.173.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:8c:d7:b9:ac:2f:17:4f:ad:f4:ad:2a:d5:c8:9a:53:e5:dc:2e:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E54810000
Validity
Not Before: Nov 10 00:26:39 2024 GMT
Not After : Nov 9 00:31:39 2025 GMT
Subject: CN=0ED7D7DAC7968474D85AFA1E89960E22038EB8CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:90:c6:a8:3f:5d:25:b2:47:50:9c:98:32:ac:
3a:35:b7:a4:11:cf:7b:03:80:d0:7d:8b:36:1c:ea:
b8:a0:78:f5:a1:6a:03:39:cd:0a:fd:76:98:cd:75:
7f:25:02:73:b9:8f:38:89:dc:0f:72:91:1c:91:72:
f6:b4:5f:c0:69:3f:31:c4:2b:2d:7c:39:27:96:88:
ad:00:36:67:fa:a1:fb:54:04:88:8c:71:48:b1:c0:
5f:d0:4f:56:6e:7a:59:b0:a7:2a:ed:1a:1d:fc:a6:
e7:8e:77:c8:e1:bf:d8:d8:3c:eb:32:fa:70:aa:38:
d9:49:d6:3a:6d:88:7d:3e:13:53:8d:74:58:d2:28:
7f:78:28:e4:37:bd:cc:a2:4f:00:60:2b:19:96:d1:
b6:5d:a8:15:c1:4f:82:7f:f3:5d:55:14:82:c7:8f:
a6:ce:cf:6c:c5:6c:0b:fb:cb:a8:fd:49:b5:13:91:
2b:9d:84:77:f4:e8:55:9a:0d:47:0c:8a:d6:ba:9b:
2d:f1:06:b6:37:d2:57:c7:bc:52:72:89:6a:59:d5:
6d:3b:a1:10:9b:b5:fb:31:a9:f0:2b:f4:60:99:b6:
83:d9:dd:85:c3:58:68:9b:98:74:73:ee:88:b0:3c:
f0:a0:3c:b5:78:d5:ea:20:99:f3:a5:77:c9:fb:15:
91:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:D7:D7:DA:C7:96:84:74:D8:5A:FA:1E:89:96:0E:22:03:8E:B8:CD
X509v3 Authority Key Identifier:
keyid:D9:88:B2:DA:7F:43:05:F0:CD:B9:3B:F8:8B:6F:5A:9D:F9:8D:89:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91E54810000/0/D988B2DA7F4305F0CDB93BF88B6F5A9DF98D8940.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Yiy2n9DBfDNuTv4i29anfmNiUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91E54810000/0/3130332e3137332e3232352e302f32342d3234203d3e20323134373630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.173.225.0/24
Signature Algorithm: sha256WithRSAEncryption
15:c8:cc:e6:1b:78:f4:26:81:6f:8a:58:81:9b:bc:43:eb:32:
33:96:bc:6e:7f:31:9c:8d:ad:a8:67:86:22:46:38:6c:09:68:
cc:bd:24:92:0f:8f:41:38:15:5b:25:bb:02:90:0e:f7:a1:95:
86:f5:49:fc:9e:8b:4c:7a:3f:c9:a4:e1:43:f3:25:11:0a:d2:
c5:66:bc:fc:b0:f2:d1:db:5d:0d:73:a7:f3:f0:62:0f:c6:2a:
ee:29:79:90:9e:fc:ac:c7:0a:ba:15:86:04:52:91:b1:ae:1c:
58:70:1b:90:92:ac:05:59:88:c6:f2:09:76:04:9a:11:8b:5e:
08:30:93:81:a4:bb:30:f8:7f:36:83:03:de:47:e4:a2:e3:09:
f8:e7:97:4d:bb:c6:07:34:65:8a:f2:f3:85:81:b6:e4:e1:6b:
d2:99:fb:74:59:ed:0c:25:57:85:eb:f0:3f:b4:21:63:4d:63:
83:dd:65:d6:b5:2d:03:7a:ac:ad:58:b7:2a:b2:3a:36:29:57:
fc:e7:3e:f3:bf:ad:5f:bd:e9:36:15:08:df:e0:06:b0:63:8a:
6d:1f:20:47:ad:8a:8c:34:c8:41:de:e2:71:2f:c1:57:a3:7d:
ae:0d:39:c3:e5:cb:1e:ab:2b:35:88:64:1b:77:c7:b3:0e:f5:
d7:e3:64:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 07:54:09 2025 by rpki-client