Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A918C2870000/0/323430313a343630303a3a2f33322d3332203d3e203634343936.roa
File: 323430313a343630303a3a2f33322d3332203d3e203634343936.roa (raw, json)
Hash identifier: YA7OveE0RNikCGfwOZej1VNBrlBWWxGG35Qh7W6ZLgw=
Subject key identifier: E5:34:9C:E6:87:45:DD:3C:A3:27:6A:76:B3:C2:73:F5:67:71:20:06
Certificate issuer: /CN=A918C2870000/serialNumber=1FFF7A9DD668F0B8F7A6C1987C4234BD9D4046F3
Certificate serial: 29EA0D9FCA9BD488F796982EEC92765B685E0743
Authority key identifier: 1F:FF:7A:9D:D6:68:F0:B8:F7:A6:C1:98:7C:42:34:BD:9D:40:46:F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_96ndZo8Lj3psGYfEI0vZ1ARvM.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A918C2870000/0/323430313a343630303a3a2f33322d3332203d3e203634343936.roa
Signing time: Tue 20 Jun 2023 13:45:53 +0000
ROA not before: Tue 20 Jun 2023 13:40:53 +0000
ROA not after: Tue 18 Jun 2024 13:45:53 +0000
asID: 64496
IP address blocks: 2401:4600::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:ea:0d:9f:ca:9b:d4:88:f7:96:98:2e:ec:92:76:5b:68:5e:07:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C2870000/serialNumber=1FFF7A9DD668F0B8F7A6C1987C4234BD9D4046F3
Validity
Not Before: Jun 20 13:40:53 2023 GMT
Not After : Jun 18 13:45:53 2024 GMT
Subject: CN=E5349CE68745DD3CA3276A76B3C273F567712006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d7:e6:20:6d:7f:82:4c:3c:d7:7c:0a:6d:25:
0b:dd:19:fa:d7:18:d2:2d:15:b7:e9:2c:8d:cc:0a:
82:43:28:92:a9:f3:a3:91:89:63:66:11:4f:ca:8d:
a7:a1:7a:fd:00:ff:32:ed:3f:e6:de:75:53:1b:a9:
f3:8a:ab:a5:2f:50:91:17:1e:62:b1:6a:1f:dd:ac:
a4:4d:dd:48:d7:7d:d0:02:8e:fa:97:f0:18:df:71:
70:b1:c4:80:16:e8:67:45:eb:1c:70:dc:a9:6d:65:
f8:c1:5f:12:09:d9:9f:40:fb:6f:f6:b1:ea:f0:8b:
77:2f:6d:7d:55:03:07:95:3e:7c:f1:2a:b5:a2:35:
6f:f0:18:53:05:e7:a3:16:b1:c3:8c:65:4a:20:ff:
0b:60:f8:02:ad:ba:52:b1:44:22:89:f5:2f:19:54:
cf:29:60:80:e0:23:0c:94:1f:06:ab:e1:49:a1:5c:
ea:5c:80:4d:8f:0c:a4:34:76:b2:aa:72:39:57:e0:
19:d4:c4:72:c6:40:0a:ae:7a:89:24:7a:7d:9b:10:
9c:91:a0:39:08:5e:a0:7f:3b:56:04:fc:1c:89:b3:
cb:ba:a4:bf:03:95:4f:61:21:95:8b:82:f7:2f:47:
4f:d6:5b:8f:d6:81:f0:7e:53:1e:bd:3d:8b:f6:6d:
0b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:34:9C:E6:87:45:DD:3C:A3:27:6A:76:B3:C2:73:F5:67:71:20:06
X509v3 Authority Key Identifier:
keyid:1F:FF:7A:9D:D6:68:F0:B8:F7:A6:C1:98:7C:42:34:BD:9D:40:46:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A918C2870000/0/1FFF7A9DD668F0B8F7A6C1987C4234BD9D4046F3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_96ndZo8Lj3psGYfEI0vZ1ARvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A918C2870000/0/323430313a343630303a3a2f33322d3332203d3e203634343936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:4600::/32
Signature Algorithm: sha256WithRSAEncryption
71:8f:95:96:54:56:fe:ec:f2:61:12:67:71:ca:d3:ff:0c:4f:
f1:18:45:8f:e1:06:78:cb:88:a5:a6:0b:a6:45:3b:44:77:4f:
14:d0:eb:95:5c:6e:87:81:06:f2:b2:e8:db:2f:96:d7:d9:28:
b3:a2:7d:0e:ce:51:d3:0a:56:d5:29:e3:a0:26:05:e8:b1:29:
f2:c3:8d:85:89:5a:aa:ae:4f:18:dc:99:b9:ca:fb:9e:73:75:
43:46:57:3c:1c:88:c7:3b:15:3a:fb:91:dd:38:b0:80:5c:91:
f6:75:dc:d5:38:fd:15:07:38:92:ce:08:cc:15:1c:cf:ba:d2:
9f:53:bd:a9:1c:b4:9e:dc:bb:cf:3d:5e:fa:af:07:12:ee:28:
b5:4e:95:ba:b3:83:8b:30:71:81:db:ec:d7:94:96:47:ce:9f:
90:5e:35:36:67:93:58:e5:fd:33:cd:35:57:8c:05:36:ce:c9:
8a:b8:14:99:31:39:66:53:75:f2:fb:33:3b:03:52:b6:4c:0f:
0d:23:f6:cd:df:38:0b:ef:7a:24:a9:f4:bc:97:14:65:44:b7:
20:7e:a1:1e:1b:c1:bc:b2:d5:6d:15:35:56:18:fb:99:49:ee:
31:aa:31:11:de:81:cd:7d:d8:a1:e0:72:cb:98:9d:a7:bb:18:
10:52:34:65
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgIUKeoNn8qb1Ij3lpgu7JJ2W2heB0MwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxOEMyODcwMDAwMTEwLwYDVQQFEygxRkZGN0E5REQ2
NjhGMEI4RjdBNkMxOTg3QzQyMzRCRDlENDA0NkYzMB4XDTIzMDYyMDEzNDA1M1oX
DTI0MDYxODEzNDU1M1owMzExMC8GA1UEAxMoRTUzNDlDRTY4NzQ1REQzQ0EzMjc2
QTc2QjNDMjczRjU2NzcxMjAwNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJjX5iBtf4JMPNd8Cm0lC90Z+tcY0i0Vt+ksjcwKgkMokqnzo5GJY2YRT8qN
p6F6/QD/Mu0/5t51Uxup84qrpS9QkRceYrFqH92spE3dSNd90AKO+pfwGN9xcLHE
gBboZ0XrHHDcqW1l+MFfEgnZn0D7b/ax6vCLdy9tfVUDB5U+fPEqtaI1b/AYUwXn
oxaxw4xlSiD/C2D4Aq26UrFEIon1LxlUzylggOAjDJQfBqvhSaFc6lyATY8MpDR2
sqpyOVfgGdTEcsZACq56iSR6fZsQnJGgOQheoH87VgT8HImzy7qkvwOVT2EhlYuC
9y9HT9Zbj9aB8H5THr09i/ZtC58CAwEAAaOCAhAwggIMMB0GA1UdDgQWBBTlNJzm
h0XdPKMnanazwnP1Z3EgBjAfBgNVHSMEGDAWgBQf/3qd1mjwuPemwZh8QjS9nUBG
8zAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE4QzI4NzAwMDAvMC8xRkZGN0E5
REQ2NjhGMEI4RjdBNkMxOTg3QzQyMzRCRDlENDA0NkYzLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9IXzk2bmRabzhM
ajNwc0dZZkVJMHZaMUFSdk0uY2VyMIGJBggrBgEFBQcBCwR9MHsweQYIKwYBBQUH
MAuGbXJzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxOEMy
ODcwMDAwLzAvMzIzNDMwMzEzYTM0MzYzMDMwM2EzYTJmMzMzMjJkMzMzMjIwM2Qz
ZTIwMzYzNDM0MzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggr
BgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQBRgAwDQYJKoZIhvcNAQELBQADggEB
AHGPlZZUVv7s8mESZ3HK0/8MT/EYRY/hBnjLiKWmC6ZFO0R3TxTQ65VcboeBBvKy
6NsvltfZKLOifQ7OUdMKVtUp46AmBeixKfLDjYWJWqquTxjcmbnK+55zdUNGVzwc
iMc7FTr7kd04sIBckfZ13NU4/RUHOJLOCMwVHM+60p9TvakctJ7cu889XvqvBxLu
KLVOlbqzg4swcYHb7NeUlkfOn5BeNTZnk1jl/TPNNVeMBTbOyYq4FJkxOWZTdfL7
MzsDUrZMDw0j9s3fOAvveiSp9LyXFGVEtyB+oR4bwbyy1W0VNVYY+5lJ7jGqMRHe
gc192KHgcsuYnae7GBBSNGU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:24 2024 by rpki-client on console-fra.rpki-client.org