Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9140C620000/0/3130332e3230392e3132382e302f32332d3234203d3e20313339353934.roa
File: 3130332e3230392e3132382e302f32332d3234203d3e20313339353934.roa (raw, json)
Hash identifier: kOOiEF4U9R1G15MJHkhn5Vl8xglOAbmbxGJplV3n2MM=
Subject key identifier: 49:FA:09:A9:1F:4F:E3:9F:EE:42:36:06:2B:DD:56:23:35:20:23:EE
Certificate issuer: /CN=A9140C620000/serialNumber=DC235B4BC2B9283512BE26CAE519B5C24C6A5D74
Certificate serial: 28B2078454E8235A1221AF72AD5EB31AAFFC34D7
Authority key identifier: DC:23:5B:4B:C2:B9:28:35:12:BE:26:CA:E5:19:B5:C2:4C:6A:5D:74
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CNbS8K5KDUSvibK5Rm1wkxqXXQ.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9140C620000/0/3130332e3230392e3132382e302f32332d3234203d3e20313339353934.roa
Signing time: Thu 02 Mar 2023 06:30:08 +0000
ROA not before: Thu 02 Mar 2023 06:25:08 +0000
ROA not after: Thu 29 Feb 2024 06:30:08 +0000
asID: 139594
IP address blocks: 103.209.128.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:b2:07:84:54:e8:23:5a:12:21:af:72:ad:5e:b3:1a:af:fc:34:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9140C620000/serialNumber=DC235B4BC2B9283512BE26CAE519B5C24C6A5D74
Validity
Not Before: Mar 2 06:25:08 2023 GMT
Not After : Feb 29 06:30:08 2024 GMT
Subject: CN=49FA09A91F4FE39FEE4236062BDD5623352023EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:63:08:df:e0:79:0a:ce:38:cf:98:2a:a2:c6:
60:ac:d5:a4:b8:e1:a6:db:34:cc:b9:cf:6d:aa:6d:
3b:24:79:e3:20:3a:fd:11:02:2d:ca:83:92:d3:79:
ea:44:c0:3f:63:64:46:b6:f2:f0:14:97:b2:bc:0b:
da:49:82:a8:39:00:11:6f:4c:0f:23:9d:3d:a9:60:
e6:eb:aa:58:61:89:09:ae:c5:b1:bf:1a:bd:98:51:
3e:cb:22:8a:18:bb:85:f9:8c:bd:26:99:10:ff:2f:
72:36:49:83:a3:ed:89:23:61:8f:7f:ef:53:b6:a3:
43:88:85:3b:18:00:42:14:74:22:0c:bf:e0:0e:d2:
07:90:dc:c7:42:74:38:5a:d9:1a:c9:c9:ac:72:fa:
d6:76:1b:a7:c5:bf:3f:21:b8:b6:1a:02:57:db:fc:
17:c5:87:45:1e:7d:43:86:94:c7:f2:f4:38:f7:25:
55:cb:22:f7:29:9a:d4:e6:b3:0b:1e:d9:97:00:d2:
97:55:f1:c5:96:21:58:cd:4a:ae:fe:e3:c1:80:4f:
9a:25:1b:48:c4:e5:16:49:95:95:df:e2:d2:1b:75:
a9:41:87:2b:e6:ac:d7:49:7a:88:cc:4e:25:b7:9d:
a3:b5:2d:cd:44:c4:3c:25:40:03:fc:b6:e7:9a:40:
6a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:FA:09:A9:1F:4F:E3:9F:EE:42:36:06:2B:DD:56:23:35:20:23:EE
X509v3 Authority Key Identifier:
keyid:DC:23:5B:4B:C2:B9:28:35:12:BE:26:CA:E5:19:B5:C2:4C:6A:5D:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9140C620000/0/DC235B4BC2B9283512BE26CAE519B5C24C6A5D74.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CNbS8K5KDUSvibK5Rm1wkxqXXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9140C620000/0/3130332e3230392e3132382e302f32332d3234203d3e20313339353934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.209.128.0/23
Signature Algorithm: sha256WithRSAEncryption
22:18:54:d2:89:4d:f8:35:8f:c4:43:9d:28:99:68:b1:12:ce:
35:d4:90:bf:54:58:ce:56:ce:dc:1e:9a:c0:41:26:79:2e:25:
4d:9b:7e:a3:08:31:81:c7:ca:ea:a2:62:2d:eb:c6:78:7f:92:
81:7f:fe:66:39:21:d8:e8:6b:1e:d8:1e:00:ed:2c:b8:f0:dc:
24:9c:12:ec:5f:e7:8d:76:43:99:78:a8:8e:b3:84:0e:6e:53:
84:72:df:e5:95:41:3f:6c:2f:e7:8f:8d:6a:4b:6b:fe:4c:19:
e9:31:8e:fa:d6:34:4f:40:3e:00:c7:25:95:2b:64:ed:33:0e:
ae:68:de:45:7f:82:47:a2:32:36:ed:e8:ff:e7:0e:d0:fa:0b:
02:3b:2d:16:e5:88:8b:71:19:f8:2e:b6:c8:50:e5:6e:c1:b3:
e5:db:11:84:06:fa:d4:f2:88:ba:ac:48:29:13:75:bf:69:35:
ae:68:7f:e6:b3:a8:c5:c0:fa:61:94:e8:b0:63:9d:01:74:de:
42:44:a8:8d:97:dd:af:bf:24:1a:b7:de:19:c3:5c:ab:50:78:
a2:06:29:59:37:a1:dd:81:7d:0e:35:80:49:18:7c:ab:72:13:
e8:af:07:90:1d:4a:5d:a8:ad:e9:80:e1:27:02:33:25:e3:29:
76:08:21:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:24 2024 by rpki-client on console-fra.rpki-client.org