Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A918C2870000/0/3230332e3137362e3138392e302f32342d3234203d3e203634343936.roa
File: 3230332e3137362e3138392e302f32342d3234203d3e203634343936.roa (raw, json)
Hash identifier: sNmfe2Z16hxAb03jOShXFBJXEr8qkpjFvq+rYRijptY=
Subject key identifier: C9:7F:9A:55:58:BD:30:08:1A:81:B8:08:02:84:A4:4B:88:99:07:E7
Certificate issuer: /CN=A918C2870000/serialNumber=913F545EA088A9E81EBDFE45B3B159358FAAC137
Certificate serial: 72BAA770BB530C79DC92597D89D212A7543C6A3B
Authority key identifier: 91:3F:54:5E:A0:88:A9:E8:1E:BD:FE:45:B3:B1:59:35:8F:AA:C1:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kT9UXqCIqegevf5Fs7FZNY-qwTc.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A918C2870000/0/3230332e3137362e3138392e302f32342d3234203d3e203634343936.roa
Signing time: Mon 12 Jun 2023 12:07:03 +0000
ROA not before: Mon 12 Jun 2023 12:02:03 +0000
ROA not after: Mon 10 Jun 2024 12:07:03 +0000
asID: 64496
IP address blocks: 203.176.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:ba:a7:70:bb:53:0c:79:dc:92:59:7d:89:d2:12:a7:54:3c:6a:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C2870000/serialNumber=913F545EA088A9E81EBDFE45B3B159358FAAC137
Validity
Not Before: Jun 12 12:02:03 2023 GMT
Not After : Jun 10 12:07:03 2024 GMT
Subject: CN=C97F9A5558BD30081A81B8080284A44B889907E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1d:b7:61:78:bb:59:52:9b:77:9b:16:d1:0c:
49:42:06:5d:e2:27:3a:54:bd:be:5a:e8:9b:9a:ef:
a5:8a:7d:c0:fb:b2:95:c0:ee:c6:44:3f:72:e7:e1:
ff:09:90:b7:98:38:7a:a4:09:10:e9:5b:e1:ed:18:
dc:fb:ba:06:5b:59:55:f5:bb:f9:8d:eb:5b:94:bf:
46:6b:e7:37:15:8a:50:e9:16:78:d5:8f:76:24:01:
1b:f4:9e:92:fa:4b:20:e6:2d:c5:df:be:ac:4d:a8:
65:46:a4:95:bc:43:a2:46:a8:bb:8c:7c:ec:76:1a:
2c:d0:a1:18:87:a4:01:f7:f1:5a:a7:f4:76:07:f5:
4f:37:f5:14:00:f3:4d:21:9e:1c:b4:70:5f:c9:57:
e2:bc:a2:f1:c0:64:20:81:59:c8:c2:de:73:ac:67:
e4:a4:09:09:ee:5a:56:af:5d:6b:a5:54:0c:36:2b:
15:7a:b8:9d:d7:18:39:4f:69:cd:b4:37:13:44:ab:
3f:42:1e:39:16:c2:4f:ca:f8:90:ba:bd:cf:d3:55:
bc:31:49:ba:87:48:1d:3d:02:e9:e6:70:20:b0:db:
20:59:64:bd:b6:1b:42:d7:03:63:eb:ad:f9:fc:27:
94:3c:59:f6:e9:31:53:b8:50:9b:1e:99:ee:85:93:
e2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:7F:9A:55:58:BD:30:08:1A:81:B8:08:02:84:A4:4B:88:99:07:E7
X509v3 Authority Key Identifier:
keyid:91:3F:54:5E:A0:88:A9:E8:1E:BD:FE:45:B3:B1:59:35:8F:AA:C1:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A918C2870000/0/913F545EA088A9E81EBDFE45B3B159358FAAC137.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kT9UXqCIqegevf5Fs7FZNY-qwTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A918C2870000/0/3230332e3137362e3138392e302f32342d3234203d3e203634343936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.176.189.0/24
Signature Algorithm: sha256WithRSAEncryption
11:14:2c:32:70:d4:ec:25:ad:9b:38:f8:2b:41:11:d2:c7:fa:
d2:9b:89:55:95:72:d8:96:5d:fe:fe:76:93:22:7c:16:0b:ba:
45:1f:24:f5:6a:83:92:16:a8:89:32:e9:fb:ad:72:4b:da:ae:
6b:c1:9a:8a:06:e9:0c:fd:dc:43:1e:5c:d7:ec:57:b1:2e:52:
6c:10:48:63:c1:9c:7e:4f:74:b8:d7:41:fe:87:bd:bf:e2:ad:
f2:9e:3a:c2:1d:1c:38:df:56:0d:06:e7:95:ca:ca:d8:55:e9:
b3:20:e4:3e:21:70:c8:a2:d4:81:6f:29:85:51:98:9d:dc:6e:
e4:df:6d:0f:27:5a:a7:2e:20:0f:96:c9:5b:8d:49:54:8e:ff:
2d:5b:fc:d7:75:f1:5d:60:e2:ea:b4:89:2b:fa:98:1b:0f:d9:
ef:6c:7a:c4:c7:c4:88:72:4b:f8:66:89:20:9b:cc:ad:65:44:
d4:3f:bc:84:a6:3a:c2:0a:42:5b:1a:1f:b8:ea:a0:35:93:e2:
33:1d:65:26:5e:3f:6b:f4:44:fe:31:e4:fe:5c:08:38:77:d1:
ec:f6:30:da:e5:39:95:83:23:19:85:6a:66:b0:85:c9:24:91:
7f:3c:20:34:76:e9:de:27:29:c9:2a:48:d0:fa:5c:79:fc:67:
53:15:d5:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:24 2024 by rpki-client on console-fra.rpki-client.org