Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A918C2870000/0/3230332e3137362e3138392e302f32342d3234203d3e203635353335.roa
File: 3230332e3137362e3138392e302f32342d3234203d3e203635353335.roa (raw, json)
Hash identifier: O6uGqeW6Kl23A1tbCDLj4ALl+AWBkOLphSTyuHsE464=
Subject key identifier: 1C:57:0F:7E:C6:09:05:C3:B9:37:38:EE:C7:D6:14:33:65:CB:71:5A
Certificate issuer: /CN=A918C2870000/serialNumber=E57259BDCCA5458735C528F8C3045D138CE58C85
Certificate serial: 5A9F0B244C59D3AC7063EB8F048DE95A1DA0211C
Authority key identifier: E5:72:59:BD:CC:A5:45:87:35:C5:28:F8:C3:04:5D:13:8C:E5:8C:85
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5XJZvcylRYc1xSj4wwRdE4zljIU.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A918C2870000/0/3230332e3137362e3138392e302f32342d3234203d3e203635353335.roa
Signing time: Fri 11 Aug 2023 04:24:55 +0000
ROA not before: Fri 11 Aug 2023 04:19:55 +0000
ROA not after: Fri 09 Aug 2024 04:24:55 +0000
asID: 65535
IP address blocks: 203.176.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:9f:0b:24:4c:59:d3:ac:70:63:eb:8f:04:8d:e9:5a:1d:a0:21:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C2870000/serialNumber=E57259BDCCA5458735C528F8C3045D138CE58C85
Validity
Not Before: Aug 11 04:19:55 2023 GMT
Not After : Aug 9 04:24:55 2024 GMT
Subject: CN=1C570F7EC60905C3B93738EEC7D6143365CB715A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:19:72:76:ec:85:23:31:97:ac:ae:36:3d:67:
5b:9b:9e:c6:a9:f4:4b:cc:67:ca:0b:e2:c9:bd:c3:
9e:3e:f0:4c:4a:90:2a:6b:d3:15:3f:56:7d:f4:21:
bf:fb:6b:20:00:9a:d2:5a:a4:8c:0d:b5:2f:d6:79:
0a:b8:8f:53:3b:68:ff:db:ec:5a:0a:ec:11:ea:0f:
2d:ba:21:2b:80:b1:7e:52:fd:22:5a:e9:35:58:ac:
76:8e:f8:cd:42:e4:51:8d:9a:5d:b7:e6:c5:d2:16:
ba:d1:0a:49:e0:c3:ed:ba:f1:1e:3e:a2:42:75:6b:
6c:4c:15:79:7d:d2:6e:a8:cb:57:90:eb:27:3f:bd:
68:80:6a:df:89:63:21:57:ca:d5:44:4d:7b:18:36:
0e:e8:79:2f:c9:59:0f:b9:3a:d5:46:93:d1:45:c8:
9b:d2:18:db:9c:36:4c:bf:de:d9:e1:78:db:97:16:
a9:fd:d5:50:67:e0:be:36:94:4f:fa:9a:d0:85:ef:
df:cc:31:84:28:cc:ec:84:86:20:2b:21:27:79:a9:
26:e6:6e:1e:08:71:71:71:35:2d:5b:03:7a:7e:0d:
a2:97:f3:87:df:15:1d:a3:b3:f3:a6:83:33:80:2f:
53:fb:f4:29:6a:12:6c:df:7d:00:fb:17:63:7d:61:
bf:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:57:0F:7E:C6:09:05:C3:B9:37:38:EE:C7:D6:14:33:65:CB:71:5A
X509v3 Authority Key Identifier:
keyid:E5:72:59:BD:CC:A5:45:87:35:C5:28:F8:C3:04:5D:13:8C:E5:8C:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A918C2870000/0/E57259BDCCA5458735C528F8C3045D138CE58C85.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5XJZvcylRYc1xSj4wwRdE4zljIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A918C2870000/0/3230332e3137362e3138392e302f32342d3234203d3e203635353335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.176.189.0/24
Signature Algorithm: sha256WithRSAEncryption
35:5a:34:02:2c:16:e4:b8:67:d6:4e:6c:2b:ad:e6:e3:bf:6c:
82:de:b4:fa:d5:13:6c:e1:fc:13:a7:a8:80:f4:b0:f5:1a:68:
9d:65:c6:e2:64:c3:50:90:6a:a1:2d:1d:e5:23:8d:32:11:0d:
7b:e4:74:2d:5f:70:b9:b4:0c:73:9f:6d:e3:1b:0c:36:36:cb:
69:dc:77:8d:eb:bf:ba:8a:2e:a4:55:d5:86:2b:38:d6:01:da:
b2:f1:9c:aa:56:a4:63:65:3d:c1:5b:45:e0:14:49:2e:9f:0a:
c9:3d:a1:47:f4:1c:a5:b1:f5:88:02:a8:e9:87:f9:11:c0:07:
a2:a7:a3:92:15:c9:ef:27:82:5a:5d:e0:a9:f6:57:d0:e6:eb:
ef:0d:73:ce:97:de:41:65:97:e4:66:61:cd:34:76:d7:8d:f8:
64:ac:b8:aa:e3:20:2e:ba:d4:c0:7a:0e:73:ed:75:56:80:93:
0b:62:93:1f:ee:4a:df:41:89:59:66:29:4a:6b:88:97:0c:20:
9f:ab:f1:02:48:ed:6d:84:52:88:d0:7c:d2:8e:c6:87:1d:26:
72:17:75:20:37:ca:db:ce:b0:2c:b7:df:a2:bd:b5:c4:d6:30:
a3:a3:5d:05:d5:22:aa:78:87:fa:41:84:db:9e:54:fe:72:be:
33:b1:d0:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:24 2024 by rpki-client on console-fra.rpki-client.org