Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91857810000/0/3130332e3134312e36392e302f32342d3234203d3e20313338313536.roa
File: 3130332e3134312e36392e302f32342d3234203d3e20313338313536.roa (raw, json)
Hash identifier: JOVlty0eDUNkApeXytnZZfCr2zc8q94knRi71yl0k4c=
Subject key identifier: 27:96:0F:E7:A0:9A:50:04:65:95:25:1D:8A:83:4D:92:C7:E0:3A:CC
Certificate issuer: /CN=A91857810000/serialNumber=63514AAD07AC49AEED8CB6EA17864CF60F2A2CBB
Certificate serial: 61BB5C508EBD6C2A5C3D5EBB689F906452AFC078
Authority key identifier: 63:51:4A:AD:07:AC:49:AE:ED:8C:B6:EA:17:86:4C:F6:0F:2A:2C:BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1FKrQesSa7tjLbqF4ZM9g8qLLs.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91857810000/0/3130332e3134312e36392e302f32342d3234203d3e20313338313536.roa
Signing time: Wed 08 Jun 2022 06:48:22 +0000
ROA not before: Wed 08 Jun 2022 06:43:22 +0000
ROA not after: Wed 07 Jun 2023 06:48:22 +0000
asID: 138156
IP address blocks: 103.141.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:bb:5c:50:8e:bd:6c:2a:5c:3d:5e:bb:68:9f:90:64:52:af:c0:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91857810000/serialNumber=63514AAD07AC49AEED8CB6EA17864CF60F2A2CBB
Validity
Not Before: Jun 8 06:43:22 2022 GMT
Not After : Jun 7 06:48:22 2023 GMT
Subject: CN=27960FE7A09A50046595251D8A834D92C7E03ACC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1d:a2:bf:43:2f:68:f4:3d:7e:a7:49:e4:c4:
ee:08:b2:13:ed:4d:1d:8c:19:e3:5d:40:15:99:ef:
ee:c0:21:8b:7d:bf:9b:b1:4a:c2:ea:36:cd:d1:a3:
31:25:3b:c2:a5:31:32:9b:d7:d2:dd:1d:75:bc:85:
b4:21:c2:de:85:20:fd:7b:10:f0:d3:56:3a:be:2b:
a3:1e:09:86:07:f0:a3:4a:7b:9e:20:3c:8f:ab:b3:
d0:3c:d5:8a:00:78:84:1f:dc:19:e1:9e:19:b9:ef:
41:01:dc:f0:7d:6d:e9:8d:bd:de:3e:1d:3e:ab:79:
35:1a:17:f7:49:3f:f2:c6:c7:aa:a5:bd:12:16:5f:
20:fb:7e:c5:95:35:54:18:72:5d:d6:44:f9:6c:11:
9b:b7:8e:3d:f9:17:d6:44:c0:fa:13:a8:b5:5a:ad:
eb:99:5c:7c:cf:79:39:64:91:09:87:4d:0d:8a:b1:
51:57:ee:3b:83:ef:6f:a2:6a:4a:df:70:c0:c2:af:
0f:32:20:91:d1:f0:9f:fd:d7:8a:44:df:6f:08:c8:
f3:a2:c8:8b:7b:73:8c:1b:b3:6c:71:0d:88:8e:e0:
a8:4c:52:36:c1:6d:4d:65:ca:d2:58:82:1e:d7:f6:
9b:7d:b2:c0:60:b8:46:c4:d0:12:b8:59:ff:25:91:
66:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:96:0F:E7:A0:9A:50:04:65:95:25:1D:8A:83:4D:92:C7:E0:3A:CC
X509v3 Authority Key Identifier:
keyid:63:51:4A:AD:07:AC:49:AE:ED:8C:B6:EA:17:86:4C:F6:0F:2A:2C:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91857810000/0/63514AAD07AC49AEED8CB6EA17864CF60F2A2CBB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1FKrQesSa7tjLbqF4ZM9g8qLLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91857810000/0/3130332e3134312e36392e302f32342d3234203d3e20313338313536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.141.69.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:9d:2b:c7:91:62:c6:7f:3d:96:c7:09:5f:5e:fa:ce:7b:96:
3a:6c:b1:8b:aa:11:b3:34:31:4f:d8:ed:d9:50:74:19:7c:bb:
41:33:a5:6c:d6:32:87:8f:1e:7a:db:9c:f4:e8:49:c6:3e:85:
99:b7:f8:a4:0f:18:9e:e0:5a:74:48:6f:58:9b:aa:89:5c:b2:
99:54:e9:6d:e8:3b:2e:a8:02:21:60:60:34:2c:62:dc:17:72:
93:eb:62:58:d3:c9:84:cb:5b:d1:e6:ff:16:8f:a4:9c:ef:64:
6e:d7:29:46:8b:7a:b5:1e:74:3c:b2:3a:53:79:c8:6c:2c:f4:
c6:2c:78:bd:51:da:02:61:eb:de:5f:72:bd:42:39:29:c0:58:
f0:2a:e6:d8:e2:b4:1e:04:71:e5:77:a5:be:57:22:05:6a:58:
5e:4c:cf:4a:b6:01:7f:89:14:36:52:d8:bc:ac:7b:5a:94:84:
04:c6:8e:d4:00:98:8f:19:26:5c:1d:b9:45:c5:0b:a7:d6:4f:
b3:0b:5a:60:97:2b:66:66:c0:8a:8a:75:65:05:ce:b6:fa:18:
65:5a:8f:40:01:04:d1:8c:7e:d3:a6:17:28:14:00:da:39:00:
e5:09:ec:cb:a2:08:1b:5f:f0:f5:16:0c:cb:02:b4:81:68:42:
e8:73:32:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:40 2023 by rpki-client on console-fra.rpki-client.org