Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A914BC7A0000/0/33362e35302e33362e302f32342d3234203d3e20313438303030.roa
File: 33362e35302e33362e302f32342d3234203d3e20313438303030.roa (raw, json)
Hash identifier: EK7DA5KdLXF3KJFIUfMR9HXb7VxUcROGufQnLB416UQ=
Subject key identifier: 25:9E:5A:F3:F2:7B:AB:88:66:B4:D0:42:D5:28:54:B8:B2:F2:40:99
Certificate issuer: /CN=A914BC7A0000/serialNumber=2C067158AEC26270809CF62CF59FA1FE4F81FAB9
Certificate serial: 7811582DC280A4B13EAD51810C267F7E5D83F575
Authority key identifier: 2C:06:71:58:AE:C2:62:70:80:9C:F6:2C:F5:9F:A1:FE:4F:81:FA:B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LAZxWK7CYnCAnPYs9Z-h_k-B-rk.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A914BC7A0000/0/33362e35302e33362e302f32342d3234203d3e20313438303030.roa
Signing time: Mon 26 Jun 2023 11:53:31 +0000
ROA not before: Mon 26 Jun 2023 11:48:31 +0000
ROA not after: Mon 24 Jun 2024 11:53:31 +0000
asID: 148000
IP address blocks: 36.50.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:11:58:2d:c2:80:a4:b1:3e:ad:51:81:0c:26:7f:7e:5d:83:f5:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BC7A0000/serialNumber=2C067158AEC26270809CF62CF59FA1FE4F81FAB9
Validity
Not Before: Jun 26 11:48:31 2023 GMT
Not After : Jun 24 11:53:31 2024 GMT
Subject: CN=259E5AF3F27BAB8866B4D042D52854B8B2F24099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8e:27:cc:83:b3:ad:82:be:c1:3b:19:7c:d9:
e3:bd:7d:8b:33:8b:e3:b5:bf:0e:1d:b0:b4:4f:4c:
4a:8a:9a:6f:a4:d9:ff:b0:ed:13:6f:35:b0:6a:b5:
8d:d6:30:88:aa:2b:cd:98:4f:66:04:a0:69:f5:bd:
03:eb:2a:bc:32:d2:80:74:c9:45:e7:56:c9:f6:23:
2c:90:6d:67:f6:87:d5:24:fe:3d:03:88:f5:30:10:
0d:12:1b:b1:0f:c2:50:4b:31:87:1f:b2:ea:65:77:
53:aa:84:0c:79:4d:67:a6:7b:7f:90:2a:ac:77:6e:
c4:c1:b8:37:2e:ea:87:e8:b4:2f:51:9b:25:d3:d2:
87:5b:1f:e0:e3:81:f2:48:05:de:c1:a9:2e:53:17:
86:85:ee:4d:22:5d:22:d5:c4:81:ce:ae:27:92:48:
b9:a4:bf:fa:9d:f7:fe:ad:b8:88:e0:3e:f7:48:de:
27:17:39:5d:a7:6c:d9:df:ba:b2:80:95:80:88:c2:
6c:cb:fc:6b:ea:53:81:16:8b:b1:9f:d7:31:71:0e:
13:13:59:f0:49:d3:b3:9c:3c:08:93:3e:0d:d5:ef:
2d:ba:4b:62:0c:66:41:06:fd:91:64:92:ad:5f:fa:
99:65:84:52:14:a7:64:23:1f:44:8c:e9:7f:70:25:
39:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:9E:5A:F3:F2:7B:AB:88:66:B4:D0:42:D5:28:54:B8:B2:F2:40:99
X509v3 Authority Key Identifier:
keyid:2C:06:71:58:AE:C2:62:70:80:9C:F6:2C:F5:9F:A1:FE:4F:81:FA:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A914BC7A0000/0/2C067158AEC26270809CF62CF59FA1FE4F81FAB9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LAZxWK7CYnCAnPYs9Z-h_k-B-rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A914BC7A0000/0/33362e35302e33362e302f32342d3234203d3e20313438303030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
36.50.36.0/24
Signature Algorithm: sha256WithRSAEncryption
21:83:e9:8f:af:14:2b:f9:08:28:66:35:84:31:d5:24:12:b9:
35:e4:68:c4:f0:e6:9c:4b:45:cf:6b:f0:43:9f:15:d7:1f:98:
4e:b7:de:17:fd:39:fb:c7:fd:eb:1c:77:8a:45:17:ac:e8:61:
e4:8b:4d:17:59:96:1d:d6:31:65:88:8c:94:c3:3e:71:34:5c:
0b:e5:82:cb:86:24:3f:c7:b4:f5:5f:80:1e:3c:1b:3c:bc:7a:
35:6b:93:c1:f4:95:39:94:e4:61:e5:40:2d:33:2b:e1:ae:62:
5f:73:09:d4:cc:d8:61:c9:99:79:76:a0:30:7f:98:55:f7:9a:
8b:98:92:79:ae:80:09:00:15:85:c6:98:4a:f9:b0:c3:5a:db:
4a:d4:44:e5:33:d2:e7:e9:4a:35:5c:b6:f7:fa:54:fc:ed:b4:
e6:46:de:0b:05:22:b7:6a:a9:76:b8:ee:ca:3b:0e:df:6d:f1:
73:c8:1e:62:eb:9a:a3:6b:48:c7:e7:ed:51:4a:4c:ac:de:c6:
ba:cc:32:ad:27:d4:05:2a:17:18:f9:1c:5d:58:06:29:76:61:
bd:b3:e4:fb:d3:2e:74:a4:3d:cd:6d:47:38:5e:28:80:5c:3e:
be:ce:72:fc:e6:8d:0f:d6:bb:03:21:08:7b:3b:31:4b:16:c7:
3b:02:44:e9
-----BEGIN CERTIFICATE-----
MIIFHDCCBASgAwIBAgIUeBFYLcKApLE+rVGBDCZ/fl2D9XUwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNEJDN0EwMDAwMTEwLwYDVQQFEygyQzA2NzE1OEFF
QzI2MjcwODA5Q0Y2MkNGNTlGQTFGRTRGODFGQUI5MB4XDTIzMDYyNjExNDgzMVoX
DTI0MDYyNDExNTMzMVowMzExMC8GA1UEAxMoMjU5RTVBRjNGMjdCQUI4ODY2QjRE
MDQyRDUyODU0QjhCMkYyNDA5OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALiOJ8yDs62CvsE7GXzZ4719izOL47W/Dh2wtE9MSoqab6TZ/7DtE281sGq1
jdYwiKorzZhPZgSgafW9A+sqvDLSgHTJRedWyfYjLJBtZ/aH1ST+PQOI9TAQDRIb
sQ/CUEsxhx+y6mV3U6qEDHlNZ6Z7f5AqrHduxMG4Ny7qh+i0L1GbJdPSh1sf4OOB
8kgF3sGpLlMXhoXuTSJdItXEgc6uJ5JIuaS/+p33/q24iOA+90jeJxc5Xads2d+6
soCVgIjCbMv8a+pTgRaLsZ/XMXEOExNZ8EnTs5w8CJM+DdXvLbpLYgxmQQb9kWSS
rV/6mWWEUhSnZCMfRIzpf3AlOQECAwEAAaOCAg8wggILMB0GA1UdDgQWBBQlnlrz
8nuriGa00ELVKFS4svJAmTAfBgNVHSMEGDAWgBQsBnFYrsJicICc9iz1n6H+T4H6
uTAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE0QkM3QTAwMDAvMC8yQzA2NzE1
OEFFQzI2MjcwODA5Q0Y2MkNGNTlGQTFGRTRGODFGQUI5LmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9MQVp4V0s3Q1lu
Q0FuUFlzOVotaF9rLUItcmsuY2VyMIGJBggrBgEFBQcBCwR9MHsweQYIKwYBBQUH
MAuGbXJzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxNEJD
N0EwMDAwLzAvMzMzNjJlMzUzMDJlMzMzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2Uy
MDMxMzQzODMwMzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACQyJDANBgkqhkiG9w0BAQsFAAOCAQEA
IYPpj68UK/kIKGY1hDHVJBK5NeRoxPDmnEtFz2vwQ58V1x+YTrfeF/05+8f96xx3
ikUXrOhh5ItNF1mWHdYxZYiMlMM+cTRcC+WCy4YkP8e09V+AHjwbPLx6NWuTwfSV
OZTkYeVALTMr4a5iX3MJ1MzYYcmZeXagMH+YVfeai5iSea6ACQAVhcaYSvmww1rb
StRE5TPS5+lKNVy29/pU/O205kbeCwUit2qpdrjuyjsO323xc8geYuuao2tIx+ft
UUpMrN7GuswyrSfUBSoXGPkcXVgGKXZhvbPk+9MudKQ9zW1HOF4ogFw+vs5y/OaN
D9a7AyEIezsxSxbHOwJE6Q==
-----END CERTIFICATE-----
Generated at Wed Jan 3 23:44:30 2024 by rpki-client on console-fra.rpki-client.org