Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A916C75D0000/0/323430373a636463303a633031303a3a2f34342d3438203d3e20313438393832.roa
File: 323430373a636463303a633031303a3a2f34342d3438203d3e20313438393832.roa (raw, json)
Hash identifier: UqBYE4LtW/U2fPviz+VQ+WHWBmb8XhZd5JA6RYMVzd0=
Subject key identifier: 3F:5B:6E:CF:8F:AA:A1:2D:86:A0:D7:0E:37:F4:09:07:33:D0:88:9E
Certificate issuer: /CN=A916C75D0000/serialNumber=492C94B5D5EC5F8E371BA1D7C081A711B8E26A6D
Certificate serial: 60BE6647965D1C3506EA15BE38828F287FF0D2B4
Authority key identifier: 49:2C:94:B5:D5:EC:5F:8E:37:1B:A1:D7:C0:81:A7:11:B8:E2:6A:6D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSyUtdXsX443G6HXwIGnEbjiam0.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A916C75D0000/0/323430373a636463303a633031303a3a2f34342d3438203d3e20313438393832.roa
Signing time: Wed 19 Jun 2024 13:04:59 +0000
ROA not before: Wed 19 Jun 2024 12:59:59 +0000
ROA not after: Wed 18 Jun 2025 13:04:59 +0000
asID: 148982
IP address blocks: 2407:cdc0:c010::/44 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:be:66:47:96:5d:1c:35:06:ea:15:be:38:82:8f:28:7f:f0:d2:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C75D0000/serialNumber=492C94B5D5EC5F8E371BA1D7C081A711B8E26A6D
Validity
Not Before: Jun 19 12:59:59 2024 GMT
Not After : Jun 18 13:04:59 2025 GMT
Subject: CN=3F5B6ECF8FAAA12D86A0D70E37F4090733D0889E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:00:b5:15:ea:59:c6:0a:e1:77:9d:19:f4:c6:
d0:3a:b1:ee:e9:15:6c:ea:0f:a7:6e:2d:ff:7b:68:
e1:c7:25:67:1f:30:59:3c:bf:8b:f2:94:be:a9:53:
cb:15:1a:5c:08:0c:c7:cf:18:12:ce:9c:13:3e:b6:
2a:4e:4e:ae:ce:33:6d:3b:b1:c6:79:80:d6:a7:f4:
b6:1d:e7:5e:8e:53:d5:c4:39:07:20:20:f3:50:ea:
e0:49:a1:f1:36:d9:22:e8:6d:ff:ae:8e:b1:f6:a5:
ba:a4:cb:c2:27:7a:96:95:af:09:3b:4a:e2:34:84:
43:07:d5:00:70:6a:16:49:4b:2b:13:06:05:0c:ec:
1a:23:be:64:7e:8e:ae:4c:cc:ef:d4:0a:9c:98:53:
6d:57:98:f9:64:4e:f3:dc:54:d3:59:02:54:44:3b:
6b:95:46:cf:2c:4e:2a:3c:1b:16:1f:b8:28:c3:3c:
f4:31:f4:e0:4d:c9:63:8e:88:c3:8e:6b:78:d5:43:
41:17:2a:bf:33:df:1a:a0:2b:d0:6c:c5:51:7e:42:
97:f8:34:79:c4:da:4f:6d:6a:58:b3:48:68:58:fd:
38:2a:ee:20:5b:15:af:24:13:a6:59:0a:bd:21:aa:
7b:1e:05:30:83:fc:b5:cb:1e:97:15:2b:92:8f:60:
7c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:5B:6E:CF:8F:AA:A1:2D:86:A0:D7:0E:37:F4:09:07:33:D0:88:9E
X509v3 Authority Key Identifier:
keyid:49:2C:94:B5:D5:EC:5F:8E:37:1B:A1:D7:C0:81:A7:11:B8:E2:6A:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A916C75D0000/0/492C94B5D5EC5F8E371BA1D7C081A711B8E26A6D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSyUtdXsX443G6HXwIGnEbjiam0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A916C75D0000/0/323430373a636463303a633031303a3a2f34342d3438203d3e20313438393832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2407:cdc0:c010::/44
Signature Algorithm: sha256WithRSAEncryption
cc:81:a1:73:73:f9:ea:3f:a1:a2:7c:82:e6:5d:09:1e:2f:9f:
87:9d:24:f3:f9:4b:2a:94:0b:d8:21:01:e3:5d:64:04:83:1d:
d3:b0:06:b5:e9:63:8c:b5:c2:95:4e:7a:d0:e1:1d:fc:15:1a:
c6:9e:6e:4c:d5:62:c6:36:f1:ca:0c:fe:54:85:7d:f4:3f:99:
52:b0:17:c9:05:0d:3d:88:13:96:ff:6b:54:e2:b0:db:0f:de:
9f:41:0a:e5:c9:a2:e2:cd:e4:a5:7b:89:a7:44:03:b6:3b:59:
1d:17:b4:5a:64:bb:65:6a:df:ad:c9:65:eb:a2:14:4f:6b:60:
e8:25:06:e4:94:8d:b4:cd:ca:55:42:bb:0b:5c:79:0c:be:97:
04:49:91:b6:9f:2a:3d:55:da:56:76:0c:d6:b1:41:7d:b2:de:
94:cc:66:cc:12:9b:e9:b1:e6:69:f6:d1:09:3a:35:11:51:20:
de:6d:4d:51:a2:c4:d0:ca:9e:6a:12:c0:0f:ce:ed:e8:60:a7:
d2:b4:90:a6:1a:b8:4f:67:1b:54:00:68:74:c0:ea:fa:ef:37:
2d:6b:bd:ea:5c:14:03:1f:5c:cb:8d:26:81:b4:03:cc:22:26:
99:17:39:01:bb:e0:c2:08:90:16:f8:b0:1a:da:15:03:5f:2f:
8f:9b:c2:4a
-----BEGIN CERTIFICATE-----
MIIFLjCCBBagAwIBAgIUYL5mR5ZdHDUG6hW+OIKPKH/w0rQwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNkM3NUQwMDAwMTEwLwYDVQQFEyg0OTJDOTRCNUQ1
RUM1RjhFMzcxQkExRDdDMDgxQTcxMUI4RTI2QTZEMB4XDTI0MDYxOTEyNTk1OVoX
DTI1MDYxODEzMDQ1OVowMzExMC8GA1UEAxMoM0Y1QjZFQ0Y4RkFBQTEyRDg2QTBE
NzBFMzdGNDA5MDczM0QwODg5RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMkAtRXqWcYK4XedGfTG0Dqx7ukVbOoPp24t/3to4cclZx8wWTy/i/KUvqlT
yxUaXAgMx88YEs6cEz62Kk5Ors4zbTuxxnmA1qf0th3nXo5T1cQ5ByAg81Dq4Emh
8TbZIuht/66OsfaluqTLwid6lpWvCTtK4jSEQwfVAHBqFklLKxMGBQzsGiO+ZH6O
rkzM79QKnJhTbVeY+WRO89xU01kCVEQ7a5VGzyxOKjwbFh+4KMM89DH04E3JY46I
w45reNVDQRcqvzPfGqAr0GzFUX5Cl/g0ecTaT21qWLNIaFj9OCruIFsVryQTplkK
vSGqex4FMIP8tcselxUrko9gfBsCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBQ/W27P
j6qhLYag1w439AkHM9CInjAfBgNVHSMEGDAWgBRJLJS11exfjjcbodfAgacRuOJq
bTAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE2Qzc1RDAwMDAvMC80OTJDOTRC
NUQ1RUM1RjhFMzcxQkExRDdDMDgxQTcxMUI4RTI2QTZELmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9TU3lVdGRYc1g0
NDNHNkhYd0lHbkViamlhbTAuY2VyMIGYBggrBgEFBQcBCwSBizCBiDCBhQYIKwYB
BQUHMAuGeXJzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkx
NkM3NUQwMDAwLzAvMzIzNDMwMzczYTYzNjQ2MzMwM2E2MzMwMzEzMDNhM2EyZjM0
MzQyZDM0MzgyMDNkM2UyMDMxMzQzODM5MzgzMi5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCQHzcDAEDAN
BgkqhkiG9w0BAQsFAAOCAQEAzIGhc3P56j+honyC5l0JHi+fh50k8/lLKpQL2CEB
411kBIMd07AGteljjLXClU560OEd/BUaxp5uTNVixjbxygz+VIV99D+ZUrAXyQUN
PYgTlv9rVOKw2w/en0EK5cmi4s3kpXuJp0QDtjtZHRe0WmS7ZWrfrcll66IUT2tg
6CUG5JSNtM3KVUK7C1x5DL6XBEmRtp8qPVXaVnYM1rFBfbLelMxmzBKb6bHmafbR
CTo1EVEg3m1NUaLE0MqeahLAD87t6GCn0rSQphq4T2cbVABodMDq+u83LWu96lwU
Ax9cy40mgbQDzCImmRc5AbvgwgiQFviwGtoVA18vj5vCSg==
-----END CERTIFICATE-----
Generated at Thu Aug 15 08:04:12 2024 by rpki-client on console-fra.rpki-client.org