Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91857810000/0/3130332e3134312e36382e302f32332d3234203d3e20383334.roa
File: 3130332e3134312e36382e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: lc8C+rVpjveJmIIVmKC6ItzvbVT/O6GyM1GuQUePd4M=
Subject key identifier: 66:DE:35:C0:00:8C:33:CB:EB:21:0E:2B:CB:24:A9:46:51:4D:70:D2
Certificate issuer: /CN=A91857810000/serialNumber=BECEB6F76A19B81208F3D3402617F51AE69E8C24
Certificate serial: 433DD0557D4DC252CCDEFAC2FD282B675CB12DE9
Authority key identifier: BE:CE:B6:F7:6A:19:B8:12:08:F3:D3:40:26:17:F5:1A:E6:9E:8C:24
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vs6292oZuBII89NAJhf1GuaejCQ.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91857810000/0/3130332e3134312e36382e302f32332d3234203d3e20383334.roa
Signing time: Wed 24 Jul 2024 11:16:21 +0000
ROA not before: Wed 24 Jul 2024 11:11:21 +0000
ROA not after: Wed 23 Jul 2025 11:16:21 +0000
asID: 834
IP address blocks: 103.141.68.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:3d:d0:55:7d:4d:c2:52:cc:de:fa:c2:fd:28:2b:67:5c:b1:2d:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91857810000/serialNumber=BECEB6F76A19B81208F3D3402617F51AE69E8C24
Validity
Not Before: Jul 24 11:11:21 2024 GMT
Not After : Jul 23 11:16:21 2025 GMT
Subject: CN=66DE35C0008C33CBEB210E2BCB24A946514D70D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:25:c6:ce:6e:80:02:ef:93:96:69:dc:0f:ab:
af:51:41:c8:df:9b:47:08:a7:18:1c:de:42:d7:79:
06:63:39:98:fb:39:bc:58:ae:00:31:70:3e:34:a7:
ce:76:be:d0:30:fd:33:2d:18:8d:34:61:c4:2a:61:
dc:b5:fc:1d:f8:53:79:77:05:4d:c1:81:32:d1:fc:
e7:cd:b1:bf:88:c5:8a:97:1f:76:bb:69:1e:46:0f:
ef:fb:4c:52:ae:58:8c:dd:c4:d0:75:72:21:68:5e:
a2:8b:64:95:d4:da:b9:5e:0f:24:f2:29:4f:61:d9:
6d:e1:76:fa:1c:33:da:e9:94:87:cc:b2:1c:d5:95:
7e:cf:b0:4a:d2:06:9f:a6:8a:ef:a4:54:09:28:ea:
23:eb:a8:e4:cd:4f:65:4a:af:6d:23:9f:24:88:7d:
95:e8:f4:82:63:dc:0c:92:04:61:17:4a:5c:42:ea:
75:83:a1:ce:7e:77:18:ee:52:06:29:95:69:a2:5f:
d3:e4:0c:9a:34:5c:89:80:61:99:34:3d:46:33:17:
1a:06:40:64:8a:df:ad:93:5f:71:17:78:27:37:52:
04:9b:00:33:96:37:cb:18:50:4a:17:44:18:d1:60:
5c:4f:ed:4e:78:8a:27:0b:35:a2:4b:89:1e:01:ba:
d5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:DE:35:C0:00:8C:33:CB:EB:21:0E:2B:CB:24:A9:46:51:4D:70:D2
X509v3 Authority Key Identifier:
keyid:BE:CE:B6:F7:6A:19:B8:12:08:F3:D3:40:26:17:F5:1A:E6:9E:8C:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91857810000/0/BECEB6F76A19B81208F3D3402617F51AE69E8C24.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vs6292oZuBII89NAJhf1GuaejCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91857810000/0/3130332e3134312e36382e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.141.68.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:d6:e6:de:25:32:bf:50:c8:d3:66:cc:b2:34:a5:28:75:15:
3e:16:2f:e2:c2:5c:e8:69:8c:c1:de:93:18:ad:e3:e2:1b:1b:
f8:ea:c0:59:c1:e8:08:33:d5:d7:bd:a6:ad:37:c9:73:e1:4e:
ee:49:e2:f8:a8:6f:37:8f:28:ee:9c:3d:e5:fb:ee:ce:d8:9f:
62:ac:d5:4d:d8:f7:f7:b0:08:e7:ea:e4:91:41:d5:f8:86:8e:
6e:38:5c:ac:f1:7c:6e:24:fb:9a:90:59:45:01:19:05:1e:86:
a0:bc:c6:cd:76:d3:6e:4b:79:96:d5:d5:b1:33:f1:73:60:6e:
61:60:d6:39:3f:c5:8a:ee:84:e8:8d:64:82:ae:77:0d:dd:7e:
8a:74:0c:3c:4f:b4:e4:f6:9a:45:74:3c:68:2d:f0:76:f9:5c:
d0:b4:3b:c2:a0:84:0f:c8:73:96:6e:bd:76:bc:f9:6d:61:60:
d7:02:4b:f3:fb:18:e8:86:31:4a:7c:ec:a8:13:05:1e:93:dc:
8d:4d:be:84:62:c2:7f:9b:a2:a5:04:eb:63:7c:ca:fd:44:0d:
c3:a3:a2:e3:04:df:f9:69:c1:3d:9e:b6:54:d3:df:f9:59:77:
50:41:e5:24:49:55:cd:4a:74:56:22:27:ae:77:cb:26:60:e2:
fa:c0:95:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 12 16:40:44 2024 by rpki-client on console-fra.rpki-client.org