Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91857810000/1/3130332e3134312e36382e302f32342d3234203d3e20313338313536.roa
File: 3130332e3134312e36382e302f32342d3234203d3e20313338313536.roa (raw, json)
Hash identifier: z5LUttuuwvRuse2heaJRnfkivZy2e1xQxFML0766tGw=
Subject key identifier: D0:F2:75:7D:A5:3A:14:95:29:CB:72:0D:18:73:11:B1:98:E3:EB:17
Certificate issuer: /CN=A91857810000/serialNumber=6B154E1DE7185CF18264814F64D7DDD9986615C1
Certificate serial: 64D6E584B6F5DF79B3AA2E7B9CEB4A06CDE6F65B
Authority key identifier: 6B:15:4E:1D:E7:18:5C:F1:82:64:81:4F:64:D7:DD:D9:98:66:15:C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/axVOHecYXPGCZIFPZNfd2ZhmFcE.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91857810000/1/3130332e3134312e36382e302f32342d3234203d3e20313338313536.roa
Signing time: Mon 28 Nov 2022 08:24:38 +0000
ROA not before: Mon 28 Nov 2022 08:19:38 +0000
ROA not after: Mon 27 Nov 2023 08:24:38 +0000
asID: 138156
IP address blocks: 103.141.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:d6:e5:84:b6:f5:df:79:b3:aa:2e:7b:9c:eb:4a:06:cd:e6:f6:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91857810000/serialNumber=6B154E1DE7185CF18264814F64D7DDD9986615C1
Validity
Not Before: Nov 28 08:19:38 2022 GMT
Not After : Nov 27 08:24:38 2023 GMT
Subject: CN=D0F2757DA53A149529CB720D187311B198E3EB17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:24:0e:77:ff:3f:ee:f9:ff:af:4f:0b:3a:6f:
8a:41:4e:fa:94:d4:98:4e:13:37:04:c1:00:a0:3d:
b9:ac:27:fa:d7:07:46:48:5e:6b:10:06:0e:90:67:
f7:b2:40:5d:2c:6f:34:a5:6f:83:ab:01:2b:50:cf:
ed:ba:90:76:ff:38:8e:41:21:bb:32:ea:c7:72:d9:
df:8b:fe:52:ed:5b:df:54:f4:7f:82:4b:90:64:ce:
83:76:6e:77:f2:13:cf:e0:46:ba:98:c5:e4:ce:2d:
00:cf:14:c2:35:61:92:d1:89:c5:4e:ea:2a:0e:f5:
ae:66:48:ef:76:47:8f:28:39:8d:4b:cc:a1:72:62:
29:3d:64:c0:ed:29:90:d8:f9:ad:2a:0e:4b:67:14:
a8:41:3e:15:4f:d3:80:76:43:3f:a6:1d:03:fa:bd:
18:f8:0a:af:e7:48:eb:d0:67:dd:93:9a:ad:c8:70:
bb:c9:38:0c:ce:83:2d:93:ec:48:19:36:da:63:bf:
d4:c5:fd:ce:8e:b4:61:af:d4:b0:09:7a:a3:d6:5d:
11:38:af:be:68:47:cd:b1:18:6a:b9:41:59:93:1a:
de:2f:4a:c0:d9:c6:96:5d:9b:16:eb:ec:a1:9a:f5:
0f:1f:60:a6:4f:69:ef:ce:a6:a3:ac:50:a4:4d:ab:
c4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F2:75:7D:A5:3A:14:95:29:CB:72:0D:18:73:11:B1:98:E3:EB:17
X509v3 Authority Key Identifier:
keyid:6B:15:4E:1D:E7:18:5C:F1:82:64:81:4F:64:D7:DD:D9:98:66:15:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91857810000/1/6B154E1DE7185CF18264814F64D7DDD9986615C1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/axVOHecYXPGCZIFPZNfd2ZhmFcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91857810000/1/3130332e3134312e36382e302f32342d3234203d3e20313338313536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.141.68.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:dc:41:01:be:7a:e3:22:7c:6b:0a:90:65:09:38:03:fc:74:
3e:00:f3:21:ec:81:47:cc:2a:3f:f7:0f:46:2f:f2:c0:2b:e1:
9b:e4:b0:bc:e5:26:6c:b5:78:6b:0e:1f:f1:1b:23:32:9f:81:
62:37:15:0c:33:d1:fb:07:29:cc:23:58:99:0c:a3:ae:6b:70:
90:c3:f6:f0:85:e7:15:54:8a:04:d1:a3:24:0b:22:74:42:be:
74:ac:01:6d:82:e4:20:eb:3b:38:0e:34:46:4c:6f:ea:80:62:
63:0b:3c:49:56:a4:22:2a:d4:ec:8c:f5:7e:b5:0a:52:0b:9f:
53:59:79:f2:0a:0c:06:8a:26:05:54:a5:13:97:8d:82:f7:3b:
97:d4:69:6c:26:d7:95:7a:cc:26:22:1d:f6:1b:c7:6e:27:31:
d1:f1:44:2a:86:f3:ba:30:c9:5c:29:34:31:61:82:e0:9c:96:
c0:67:b1:c7:e4:88:74:4b:75:27:ae:53:0c:10:94:f0:71:96:
f0:15:f8:ea:a6:3f:d2:da:ad:b1:f9:c7:e5:1f:ad:55:d2:7f:
8b:22:a1:b0:fd:cd:d4:a0:7b:fa:cd:ed:11:84:d8:57:e8:3c:
69:99:f8:7e:15:4a:0d:e3:d9:d7:66:75:a7:0f:44:6d:69:52:
31:ed:4f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:50 2024 by rpki-client on console-ams.rpki-client.org