Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/1/3136372e3136322e302e302f31372d3137203d3e2030.roa
File: 3136372e3136322e302e302f31372d3137203d3e2030.roa (raw, json)
Hash identifier: itbzEdt91lP3bsJcvmtFWKkbl9GREG5/z0aLe4b0VsU=
Subject key identifier: 41:AE:29:08:17:9C:2E:25:7A:62:F7:50:A1:44:EB:05:D5:B1:44:9A
Certificate issuer: /CN=A9139F080000/serialNumber=4A19DB1BBDB332C4EC1079728213C2E58ED7DE56
Certificate serial: 72407BE4F73A3E7DA0BC787D4FAA9A7328373338
Authority key identifier: 4A:19:DB:1B:BD:B3:32:C4:EC:10:79:72:82:13:C2:E5:8E:D7:DE:56
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ShnbG72zMsTsEHlyghPC5Y7X3lY.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/1/3136372e3136322e302e302f31372d3137203d3e2030.roa
Signing time: Sat 17 Sep 2022 01:09:28 +0000
ROA not before: Sat 17 Sep 2022 01:04:28 +0000
ROA not after: Sat 16 Sep 2023 01:09:28 +0000
asID: 0
IP address blocks: 167.162.0.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:40:7b:e4:f7:3a:3e:7d:a0:bc:78:7d:4f:aa:9a:73:28:37:33:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139F080000
Validity
Not Before: Sep 17 01:04:28 2022 GMT
Not After : Sep 16 01:09:28 2023 GMT
Subject: CN=41AE2908179C2E257A62F750A144EB05D5B1449A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:dc:33:7b:27:20:57:4a:fc:8c:84:69:c9:40:
41:6c:e5:38:72:a1:04:ce:c2:60:5a:f3:2b:e8:1b:
f0:08:a0:e5:7d:2c:b8:ed:0b:bf:9f:f6:c3:cf:03:
74:97:2e:f1:8e:a5:bd:77:a0:da:33:7b:76:b0:65:
a5:10:83:01:ba:1b:d3:b7:54:cc:9f:5c:88:1b:39:
fd:9e:df:cf:d8:38:fb:ea:a3:d8:e0:ff:24:81:59:
39:b5:50:f7:ba:0a:e6:1f:b6:7e:1f:a2:f0:ee:4d:
d7:b1:ec:2c:fd:c8:a5:fe:59:45:ac:e5:25:d0:e6:
9a:0f:bf:e1:ef:4c:76:f0:62:15:9b:3b:3f:07:6b:
8c:4a:8b:10:2a:eb:99:04:e4:7e:39:42:2d:be:14:
9d:11:3a:9f:1d:5e:6f:e5:3d:a7:6a:85:a1:7e:16:
30:ed:09:26:95:e3:57:5e:9b:70:b1:f5:a3:9c:14:
b1:1c:1d:96:47:4f:c5:3f:5b:f2:da:a4:83:93:0f:
48:5a:4e:a5:30:cb:af:2c:84:aa:97:57:99:43:55:
5c:60:75:09:81:f5:d7:51:23:d9:cf:41:29:26:d0:
b8:67:42:48:9f:08:fd:92:2d:23:41:a6:98:13:b7:
1f:44:2f:ef:f0:40:7d:8f:26:fe:73:ba:a2:60:9d:
8c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:AE:29:08:17:9C:2E:25:7A:62:F7:50:A1:44:EB:05:D5:B1:44:9A
X509v3 Authority Key Identifier:
keyid:4A:19:DB:1B:BD:B3:32:C4:EC:10:79:72:82:13:C2:E5:8E:D7:DE:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91905300000/1/4A19DB1BBDB332C4EC1079728213C2E58ED7DE56.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ShnbG72zMsTsEHlyghPC5Y7X3lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/1/3136372e3136322e302e302f31372d3137203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.162.0.0/17
Signature Algorithm: sha256WithRSAEncryption
b2:0f:38:0a:33:2a:2d:3c:cc:47:55:7f:c2:35:f2:26:66:1b:
a2:d9:24:d7:cd:85:06:cf:59:28:cd:81:f6:98:bd:ca:ad:70:
88:92:6e:26:cf:a8:c8:4c:af:49:15:73:3b:58:9f:9f:7a:a0:
6c:96:1b:e5:bd:0b:20:93:4d:c1:9c:a6:97:f4:d0:f0:1a:ae:
78:ed:fd:94:7f:84:93:e9:b0:40:95:f0:2b:54:03:5b:97:4e:
87:ed:c8:25:75:d4:6c:ac:23:95:1f:4a:27:a2:f1:67:f1:35:
87:bf:2c:f3:95:cf:77:f0:bc:ee:68:e4:45:b9:df:0d:75:5f:
26:90:ac:79:7f:80:3c:77:be:24:55:0a:b6:60:39:c3:15:33:
ca:46:81:1a:f3:05:d4:52:26:85:01:b6:b7:a2:b1:ee:fd:8e:
2a:b6:ce:95:1c:00:cb:6c:5a:ac:e2:26:7b:64:bc:0e:fe:b1:
a3:5f:6d:bb:1a:4e:99:14:61:29:63:37:ba:7a:4e:28:ca:ee:
67:06:44:cf:37:75:31:94:be:9a:98:2c:13:f8:7e:95:38:bf:
e7:e1:42:44:fa:53:d4:b7:01:a5:92:39:ae:15:06:67:05:b4:
be:31:2c:93:76:63:77:40:9b:e0:15:09:7c:73:ef:cd:9e:c4:
c2:20:85:b1
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgIUckB75Pc6Pn2gvHh9T6qacyg3MzgwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMzlGMDgwMDAwMTEwLwYDVQQFEyg0QTE5REIxQkJE
QjMzMkM0RUMxMDc5NzI4MjEzQzJFNThFRDdERTU2MB4XDTIyMDkxNzAxMDQyOFoX
DTIzMDkxNjAxMDkyOFowMzExMC8GA1UEAxMoNDFBRTI5MDgxNzlDMkUyNTdBNjJG
NzUwQTE0NEVCMDVENUIxNDQ5QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAN7cM3snIFdK/IyEaclAQWzlOHKhBM7CYFrzK+gb8Aig5X0suO0Lv5/2w88D
dJcu8Y6lvXeg2jN7drBlpRCDAbob07dUzJ9ciBs5/Z7fz9g4++qj2OD/JIFZObVQ
97oK5h+2fh+i8O5N17HsLP3Ipf5ZRazlJdDmmg+/4e9MdvBiFZs7PwdrjEqLECrr
mQTkfjlCLb4UnRE6nx1eb+U9p2qFoX4WMO0JJpXjV16bcLH1o5wUsRwdlkdPxT9b
8tqkg5MPSFpOpTDLryyEqpdXmUNVXGB1CYH111Ej2c9BKSbQuGdCSJ8I/ZItI0Gm
mBO3H0Qv7/BAfY8m/nO6omCdjNUCAwEAAaOCAgcwggIDMB0GA1UdDgQWBBRBrikI
F5wuJXpi91ChROsF1bFEmjAfBgNVHSMEGDAWgBRKGdsbvbMyxOwQeXKCE8Lljtfe
VjAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvMS80QTE5REIx
QkJEQjMzMkM0RUMxMDc5NzI4MjEzQzJFNThFRDdERTU2LmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9TaG5iRzcyek1z
VHNFSGx5Z2hQQzVZN1gzbFkuY2VyMIGBBggrBgEFBQcBCwR1MHMwcQYIKwYBBQUH
MAuGZXJzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxOTA1
MzAwMDAwLzEvMzEzNjM3MmUzMTM2MzIyZTMwMmUzMDJmMzEzNzJkMzEzNzIwM2Qz
ZTIwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAenogAwDQYJKoZIhvcNAQELBQADggEBALIPOAozKi08
zEdVf8I18iZmG6LZJNfNhQbPWSjNgfaYvcqtcIiSbibPqMhMr0kVcztYn596oGyW
G+W9CyCTTcGcppf00PAarnjt/ZR/hJPpsECV8CtUA1uXToftyCV11GysI5UfSiei
8WfxNYe/LPOVz3fwvO5o5EW53w11XyaQrHl/gDx3viRVCrZgOcMVM8pGgRrzBdRS
JoUBtreise79jiq2zpUcAMtsWqziJntkvA7+saNfbbsaTpkUYSljN7p6TijK7mcG
RM83dTGUvpqYLBP4fpU4v+fhQkT6U9S3AaWSOa4VBmcFtL4xLJN2Y3dAm+AVCXxz
782exMIghbE=
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:52:03 2025 by rpki-client