Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A914BC7A0000/0/323430613a656530303a3a2f32382d3330203d3e20313438303032.roa
File: 323430613a656530303a3a2f32382d3330203d3e20313438303032.roa (raw, json)
Hash identifier: 0VPjFyT6priNVrj7U3sGG/lyPdzJWSqFsEPXO5ZLUQA=
Subject key identifier: E6:11:23:31:06:3B:29:38:9F:F8:33:30:FC:CE:B3:D6:7E:53:CD:8A
Certificate issuer: /CN=A914BC7A0000/serialNumber=2C067158AEC26270809CF62CF59FA1FE4F81FAB9
Certificate serial: 10D5B36B7038D91DFC634115EFA89DE472155DFD
Authority key identifier: 2C:06:71:58:AE:C2:62:70:80:9C:F6:2C:F5:9F:A1:FE:4F:81:FA:B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LAZxWK7CYnCAnPYs9Z-h_k-B-rk.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A914BC7A0000/0/323430613a656530303a3a2f32382d3330203d3e20313438303032.roa
Signing time: Tue 20 Jun 2023 10:09:27 +0000
ROA not before: Tue 20 Jun 2023 10:04:27 +0000
ROA not after: Tue 18 Jun 2024 10:09:27 +0000
asID: 148002
IP address blocks: 240a:ee00::/28 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:d5:b3:6b:70:38:d9:1d:fc:63:41:15:ef:a8:9d:e4:72:15:5d:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BC7A0000/serialNumber=2C067158AEC26270809CF62CF59FA1FE4F81FAB9
Validity
Not Before: Jun 20 10:04:27 2023 GMT
Not After : Jun 18 10:09:27 2024 GMT
Subject: CN=E6112331063B29389FF83330FCCEB3D67E53CD8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3a:f3:07:73:3a:36:4a:3e:ef:f1:79:71:19:
d8:0a:68:ae:06:9d:e1:c5:7c:24:47:ac:e5:9d:a3:
fb:03:e9:98:94:f5:21:41:ab:fa:bb:61:da:fa:19:
69:c0:e9:25:db:28:31:43:39:32:56:f6:cd:a4:35:
0a:47:e8:2e:2a:0a:47:c3:ce:31:c7:94:c8:c6:27:
68:b4:4e:50:c6:91:90:5d:74:65:5f:82:ec:02:d1:
aa:d0:81:f5:af:2e:cb:4e:27:3e:4f:46:9a:5a:96:
3a:f8:a8:fa:a1:9a:37:7c:6a:0d:ba:98:08:7f:f0:
21:00:43:04:f9:47:e3:23:c6:94:bf:ed:e5:42:72:
bc:59:f6:72:2d:28:d2:1a:59:87:bd:c6:8d:17:99:
ae:6a:3f:15:37:11:40:4a:13:cc:08:c6:c5:35:bd:
e1:63:83:e3:3c:f2:74:a7:75:e0:ae:78:d8:79:01:
17:dd:a6:16:9d:68:ba:a0:fb:3a:c9:58:65:37:6c:
ce:aa:73:3e:83:08:cb:5e:95:0e:83:ee:2f:fe:61:
69:20:84:45:e2:fc:84:c7:8b:0f:43:a3:bc:56:e7:
bd:b4:a8:9c:01:bc:3e:c6:30:eb:45:ad:45:7d:5b:
4b:43:e6:33:0d:a1:c6:89:d9:7b:82:e9:ed:83:db:
c4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:11:23:31:06:3B:29:38:9F:F8:33:30:FC:CE:B3:D6:7E:53:CD:8A
X509v3 Authority Key Identifier:
keyid:2C:06:71:58:AE:C2:62:70:80:9C:F6:2C:F5:9F:A1:FE:4F:81:FA:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A914BC7A0000/0/2C067158AEC26270809CF62CF59FA1FE4F81FAB9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LAZxWK7CYnCAnPYs9Z-h_k-B-rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A914BC7A0000/0/323430613a656530303a3a2f32382d3330203d3e20313438303032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ee00::/28
Signature Algorithm: sha256WithRSAEncryption
72:88:cf:7e:72:7b:1b:ae:e3:88:10:4c:f7:d3:9a:0e:42:7e:
76:b1:58:21:72:3a:b8:6c:52:f1:4a:46:a8:f8:c9:fd:3d:8c:
53:5a:5f:20:1c:41:b2:f0:81:5f:da:d3:32:c1:88:b2:47:f5:
1c:f0:62:8f:f0:ea:db:33:0f:a0:7d:7d:d8:d2:80:31:3a:ff:
ff:25:69:f5:79:48:63:38:5b:78:d8:99:5d:e2:01:6c:ad:f0:
bd:9b:8a:58:3a:1b:5a:32:c6:79:6d:18:06:b9:5b:74:0e:ee:
ba:7b:d7:ea:3c:55:c9:80:2d:a1:1e:72:ec:65:b4:68:21:32:
fa:af:3f:3a:d9:20:df:73:fc:61:57:c8:d4:1d:57:6b:13:2c:
58:89:f4:a1:29:5b:61:91:3c:c9:24:97:8a:fc:a0:b9:33:8c:
78:4c:05:13:b6:26:6f:85:b3:fc:50:34:de:7b:bf:46:0e:13:
4c:68:f9:82:d1:9c:ef:96:1f:25:a3:10:a1:80:10:cf:d5:7f:
40:cd:6b:9e:69:4d:3b:c9:3d:9f:5c:85:f4:6f:3a:61:ac:08:
2c:13:25:6a:75:e2:3e:50:68:f9:cf:62:57:aa:7c:10:2a:b4:
e3:bc:ba:fe:2e:ae:f9:18:63:d8:32:d8:bb:f3:66:42:ab:95:
cd:c0:c5:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 3 23:44:30 2024 by rpki-client on console-fra.rpki-client.org