Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91E54810000/0/3130332e3137332e3232352e302f32342d3234203d3e203538333439.roa
File: 3130332e3137332e3232352e302f32342d3234203d3e203538333439.roa (raw, json)
Hash identifier: VdYrRIXaalZFja4r2vfmeQxVdjoRkrrMoFXlD0zUnkk=
Subject key identifier: 80:91:1B:22:4D:93:03:2D:9E:07:57:11:D7:4F:CA:54:55:7E:F8:60
Certificate issuer: /CN=A91E54810000/serialNumber=D988B2DA7F4305F0CDB93BF88B6F5A9DF98D8940
Certificate serial: 7E89A82DF6095E47F50AD60181D3BDE1F591A22D
Authority key identifier: D9:88:B2:DA:7F:43:05:F0:CD:B9:3B:F8:8B:6F:5A:9D:F9:8D:89:40
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Yiy2n9DBfDNuTv4i29anfmNiUA.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91E54810000/0/3130332e3137332e3232352e302f32342d3234203d3e203538333439.roa
Signing time: Sat 21 Dec 2024 12:01:32 +0000
ROA not before: Sat 21 Dec 2024 11:56:32 +0000
ROA not after: Sat 20 Dec 2025 12:01:32 +0000
asID: 58349
IP address blocks: 103.173.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:89:a8:2d:f6:09:5e:47:f5:0a:d6:01:81:d3:bd:e1:f5:91:a2:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E54810000
Validity
Not Before: Dec 21 11:56:32 2024 GMT
Not After : Dec 20 12:01:32 2025 GMT
Subject: CN=80911B224D93032D9E075711D74FCA54557EF860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:48:63:2b:37:55:ce:9e:ef:02:52:96:c5:19:
99:b4:ff:4d:36:b9:76:56:93:5d:dd:12:45:9b:d1:
6d:03:b0:f4:04:73:a1:31:06:7a:72:f7:8c:85:ea:
88:5a:89:97:9e:5b:f7:67:b3:37:af:4e:ae:5b:93:
b3:cb:b1:d8:08:56:91:d1:13:22:be:4b:0e:5c:32:
89:74:2d:ca:a2:64:8f:57:9b:5c:ba:50:77:8e:55:
11:39:36:38:f3:44:d4:08:bf:33:8e:de:c4:4c:3a:
ef:93:72:10:08:88:11:81:ec:73:7d:f4:63:70:94:
6c:e8:0d:00:00:aa:b1:be:38:d7:09:01:7a:37:28:
fa:1f:c7:7b:18:8f:91:0f:35:41:f4:b3:de:db:c7:
96:5b:46:26:f5:24:8a:b0:ce:5e:8d:0e:f1:e7:ab:
ab:24:d4:70:3e:98:77:a2:6b:90:a2:e4:28:1c:14:
95:7a:e2:2b:9a:31:96:fe:d5:6c:1f:f3:f0:fb:64:
09:37:31:3c:d3:ad:c8:c1:62:30:e6:fe:d9:94:03:
34:98:1c:0d:bd:31:d8:bf:99:2a:6c:0e:39:5e:62:
af:92:81:ec:3a:cc:62:42:63:d3:7a:81:4c:82:2a:
88:c3:35:fa:dd:0d:d1:d1:ec:80:b9:bf:e0:ab:8d:
ed:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:91:1B:22:4D:93:03:2D:9E:07:57:11:D7:4F:CA:54:55:7E:F8:60
X509v3 Authority Key Identifier:
keyid:D9:88:B2:DA:7F:43:05:F0:CD:B9:3B:F8:8B:6F:5A:9D:F9:8D:89:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91E54810000/0/D988B2DA7F4305F0CDB93BF88B6F5A9DF98D8940.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Yiy2n9DBfDNuTv4i29anfmNiUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91E54810000/0/3130332e3137332e3232352e302f32342d3234203d3e203538333439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.173.225.0/24
Signature Algorithm: sha256WithRSAEncryption
25:1d:98:50:b2:bf:22:c4:62:70:6a:2d:72:49:cd:21:a5:e3:
72:a6:ac:52:c9:c0:55:6d:b1:a4:e3:c4:2f:d2:7b:42:2a:19:
e7:73:5f:db:3d:3d:8e:bd:51:72:3c:44:8e:50:77:c9:48:f7:
8d:ea:20:c6:1c:89:26:d7:45:40:8c:8c:20:bb:21:c5:6e:c2:
20:01:72:e0:23:fe:78:80:f9:75:9b:5c:af:2e:e6:2b:ac:9c:
6b:ef:8d:2e:71:3b:e7:c1:da:88:c9:1a:b5:76:a5:73:52:51:
9f:03:31:a0:7a:50:d0:a9:e4:c3:d3:0a:d2:18:14:b1:36:b0:
4e:9b:d3:bf:a5:9d:35:2f:9f:55:63:a1:4b:a8:f8:3b:96:97:
0a:62:54:5c:96:1a:88:ec:19:2e:f6:35:2d:91:0c:34:be:c6:
c1:78:e0:8a:2b:77:f8:a0:5a:28:6e:c2:a6:02:a5:f6:35:21:
76:c2:c5:e8:32:68:fa:25:c4:25:1e:ab:7c:90:1c:8e:3c:ee:
63:af:48:9a:c7:f1:3c:b0:7d:f5:ab:5e:89:5d:a0:25:67:4e:
f8:88:57:1e:eb:9f:22:47:55:b4:a8:db:1c:84:2c:f1:f0:1a:
7f:16:d6:50:8f:bb:90:c3:3a:01:35:43:58:d9:c1:8a:27:c0:
f1:b1:0f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:10:29 2025 by rpki-client