Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91857810000/0/3130332e3134312e36382e302f32342d3234203d3e20313338313536.roa
File: 3130332e3134312e36382e302f32342d3234203d3e20313338313536.roa (raw, json)
Hash identifier: eVfmszeMKYZkJCpiPEEB18VYn34aTEog8kyg8sONdFM=
Subject key identifier: 84:28:9E:8A:76:FC:57:38:AF:AA:E7:50:61:14:58:DA:BB:92:C3:72
Certificate issuer: /CN=A91857810000/serialNumber=63514AAD07AC49AEED8CB6EA17864CF60F2A2CBB
Certificate serial: 169AE2ACC1A6B848F412914F37930572AC4B1DBD
Authority key identifier: 63:51:4A:AD:07:AC:49:AE:ED:8C:B6:EA:17:86:4C:F6:0F:2A:2C:BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1FKrQesSa7tjLbqF4ZM9g8qLLs.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91857810000/0/3130332e3134312e36382e302f32342d3234203d3e20313338313536.roa
Signing time: Wed 08 Jun 2022 06:48:19 +0000
ROA not before: Wed 08 Jun 2022 06:43:19 +0000
ROA not after: Wed 07 Jun 2023 06:48:19 +0000
asID: 138156
IP address blocks: 103.141.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:9a:e2:ac:c1:a6:b8:48:f4:12:91:4f:37:93:05:72:ac:4b:1d:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91857810000/serialNumber=63514AAD07AC49AEED8CB6EA17864CF60F2A2CBB
Validity
Not Before: Jun 8 06:43:19 2022 GMT
Not After : Jun 7 06:48:19 2023 GMT
Subject: CN=84289E8A76FC5738AFAAE750611458DABB92C372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c6:bb:17:9e:a3:75:af:6e:5e:9e:d9:dc:04:
9e:9e:0a:c0:ed:e8:21:da:bd:b2:66:df:46:58:03:
eb:f1:e0:17:2d:13:20:b3:ae:08:77:76:1b:3f:d4:
c4:bf:37:94:63:1f:bd:68:60:de:01:a4:e1:15:67:
13:27:ad:3e:a3:83:f4:24:a6:21:b9:7b:77:e3:e8:
ce:64:89:63:7d:8e:e1:57:0f:73:ad:b5:a1:4d:b7:
9d:c2:6d:31:db:9e:3e:90:c1:fd:cb:73:1c:b4:4f:
20:60:a6:5b:1b:a5:dc:a6:a1:2b:a3:f0:d0:7a:50:
2b:6b:0c:dc:3f:32:1e:f2:e1:b6:b6:f7:6c:16:b9:
52:8b:9f:75:2e:fa:df:d1:65:b3:24:e6:42:3b:b6:
40:e4:47:5b:45:48:bd:e2:88:cc:55:6d:dd:27:5e:
78:a0:27:0b:f7:ca:ab:54:0e:98:53:be:eb:6c:f3:
fe:b9:52:22:3c:2a:f4:00:7d:5e:a4:70:05:c8:f4:
c7:38:d6:db:ba:f0:4f:33:eb:55:e5:d3:37:d3:eb:
5c:0f:dd:fd:20:fa:ef:71:92:e3:14:58:c1:c1:f8:
55:0d:72:fc:5a:d8:f1:02:88:39:3a:48:f3:19:c2:
47:96:ec:55:c3:14:3b:77:ea:e7:95:49:72:18:81:
09:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:28:9E:8A:76:FC:57:38:AF:AA:E7:50:61:14:58:DA:BB:92:C3:72
X509v3 Authority Key Identifier:
keyid:63:51:4A:AD:07:AC:49:AE:ED:8C:B6:EA:17:86:4C:F6:0F:2A:2C:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91857810000/0/63514AAD07AC49AEED8CB6EA17864CF60F2A2CBB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1FKrQesSa7tjLbqF4ZM9g8qLLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91857810000/0/3130332e3134312e36382e302f32342d3234203d3e20313338313536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.141.68.0/24
Signature Algorithm: sha256WithRSAEncryption
85:1f:9d:4d:fe:ff:ac:dc:6e:d9:b3:96:b5:cd:1a:db:47:2f:
ec:b8:1d:06:c7:a8:2c:cd:72:da:31:46:2c:df:8c:a9:e7:20:
57:85:3b:5c:f8:99:df:85:99:5a:b6:5f:a4:74:a5:58:3d:c6:
d7:a1:a2:46:a7:de:5e:a4:7d:40:82:35:c0:20:3f:2a:c8:0b:
c4:79:61:53:6e:b3:86:dd:cc:0c:d9:5f:57:0e:18:37:31:fa:
a3:e0:69:a9:ac:c1:c6:a7:7f:5b:3d:a9:61:01:06:dd:bf:56:
80:c9:8e:94:98:96:4c:7d:40:d7:24:94:07:fc:97:54:a7:8c:
6f:d9:55:74:ac:d2:a8:8d:de:10:78:f5:0f:79:53:1a:44:70:
87:be:43:2a:f5:9a:b9:82:6c:ad:9f:f8:67:e0:a1:9c:d5:4e:
5d:10:37:92:16:07:28:82:60:79:94:40:80:c3:cf:19:05:38:
1d:b8:b4:b5:e5:4b:fe:26:4b:e0:d4:15:84:e7:f6:70:0a:18:
e0:15:f1:eb:3e:81:fd:23:cf:77:70:6a:47:b8:e6:1b:95:0d:
53:eb:60:78:69:21:3f:ce:57:ea:d2:64:91:0e:4f:85:94:b0:
92:18:5c:e3:bf:de:50:07:54:48:0e:af:96:be:df:c5:3f:0c:
29:76:fa:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:40 2023 by rpki-client on console-fra.rpki-client.org