Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/1/3136372e3136322e3133322e302f32322d3234203d3e20333936393832.roa
File: 3136372e3136322e3133322e302f32322d3234203d3e20333936393832.roa (raw, json)
Hash identifier: kSxv8zX3CLi28BjAXK/e/ovY/Cm+JfXqORrLXqTFp7M=
Subject key identifier: F3:76:90:04:48:9F:7F:83:1F:52:8F:0F:6E:7D:6E:48:26:6C:0C:B8
Certificate issuer: /CN=A9139F080000/serialNumber=4A19DB1BBDB332C4EC1079728213C2E58ED7DE56
Certificate serial: 64C78A1F46B079E1E28298869F82D8BF7860D950
Authority key identifier: 4A:19:DB:1B:BD:B3:32:C4:EC:10:79:72:82:13:C2:E5:8E:D7:DE:56
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ShnbG72zMsTsEHlyghPC5Y7X3lY.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/1/3136372e3136322e3133322e302f32322d3234203d3e20333936393832.roa
Signing time: Tue 21 Sep 2021 22:27:37 +0000
ROA not before: Tue 21 Sep 2021 22:22:37 +0000
ROA not after: Tue 20 Sep 2022 22:27:37 +0000
asID: 396982
IP address blocks: 167.162.132.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:c7:8a:1f:46:b0:79:e1:e2:82:98:86:9f:82:d8:bf:78:60:d9:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139F080000
Validity
Not Before: Sep 21 22:22:37 2021 GMT
Not After : Sep 20 22:27:37 2022 GMT
Subject: CN=3082010A0282010100A9016EE150776B59A90657DF4BFAA6294157D92B1FDF6DD8A0A38E9D40CA6F718CE660300403AF32DF1FD279BC84B830F4E972317773C12E39E1B658BDAFC34668EECC5A2353CE1694DDFD68E56A8838C7EF80B5363D090432D1A3F1BA17FA5478644332A44800902B928CC0D19D059886DBE4EDA2C106CF103BC7E9D48701E017969E73906E23264549AD6C3CF696191F60D56013DB522184CED8D0F98C71A58223EDF8810FD85CFDC4BEA1A3682F62AA2B57587A5874493A78BC632E864D58182CD5A26CAF44FBC231A7D8965DAF9AA3504BB381F6B0A46B7E283A26C347DF5D20F778C4DD34B5A0FE880F8427979125C2CADFE426D4E30D3F0D88CC242FCF0203010001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:01:6e:e1:50:77:6b:59:a9:06:57:df:4b:fa:
a6:29:41:57:d9:2b:1f:df:6d:d8:a0:a3:8e:9d:40:
ca:6f:71:8c:e6:60:30:04:03:af:32:df:1f:d2:79:
bc:84:b8:30:f4:e9:72:31:77:73:c1:2e:39:e1:b6:
58:bd:af:c3:46:68:ee:cc:5a:23:53:ce:16:94:dd:
fd:68:e5:6a:88:38:c7:ef:80:b5:36:3d:09:04:32:
d1:a3:f1:ba:17:fa:54:78:64:43:32:a4:48:00:90:
2b:92:8c:c0:d1:9d:05:98:86:db:e4:ed:a2:c1:06:
cf:10:3b:c7:e9:d4:87:01:e0:17:96:9e:73:90:6e:
23:26:45:49:ad:6c:3c:f6:96:19:1f:60:d5:60:13:
db:52:21:84:ce:d8:d0:f9:8c:71:a5:82:23:ed:f8:
81:0f:d8:5c:fd:c4:be:a1:a3:68:2f:62:aa:2b:57:
58:7a:58:74:49:3a:78:bc:63:2e:86:4d:58:18:2c:
d5:a2:6c:af:44:fb:c2:31:a7:d8:96:5d:af:9a:a3:
50:4b:b3:81:f6:b0:a4:6b:7e:28:3a:26:c3:47:df:
5d:20:f7:78:c4:dd:34:b5:a0:fe:88:0f:84:27:97:
91:25:c2:ca:df:e4:26:d4:e3:0d:3f:0d:88:cc:24:
2f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:76:90:04:48:9F:7F:83:1F:52:8F:0F:6E:7D:6E:48:26:6C:0C:B8
X509v3 Authority Key Identifier:
keyid:4A:19:DB:1B:BD:B3:32:C4:EC:10:79:72:82:13:C2:E5:8E:D7:DE:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91905300000/1/4A19DB1BBDB332C4EC1079728213C2E58ED7DE56.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ShnbG72zMsTsEHlyghPC5Y7X3lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/1/3136372e3136322e3133322e302f32322d3234203d3e20333936393832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.162.132.0/22
Signature Algorithm: sha256WithRSAEncryption
af:60:c2:4b:71:e4:ae:ec:9c:c6:99:98:a3:ec:c0:82:39:6a:
78:e4:0a:35:58:ef:51:20:e4:ea:6e:19:60:9c:4e:a5:3e:4e:
1c:f0:ca:d3:1b:54:4c:7d:b5:cf:db:49:35:7a:1e:3c:5c:70:
e1:09:3b:31:12:12:77:f5:a2:bd:cd:48:fd:7c:dc:38:a9:a7:
2c:c1:97:7a:3c:f2:db:18:11:c5:5f:37:b2:46:04:30:30:1d:
0f:04:af:a4:77:16:63:e2:ef:7b:05:43:e6:1a:d5:0d:53:0b:
9d:eb:5c:03:ca:52:11:81:b9:35:43:ce:aa:39:10:30:1a:fc:
ce:7f:93:e4:45:4f:d3:f4:02:10:13:3f:1c:77:10:ae:58:b6:
40:e7:bf:a6:44:da:a2:e7:d7:97:7d:cc:69:b0:e6:2a:09:0a:
2a:73:f1:70:ef:dc:fb:fa:a7:f3:e1:26:10:ab:9d:c5:af:dd:
94:76:14:f5:32:9b:bc:62:ad:cf:a8:39:20:93:b5:88:81:ce:
ac:dd:c0:69:49:bc:03:99:73:77:cb:3b:f7:1c:0a:0f:11:9c:
53:25:f3:4d:03:a7:ea:d9:50:5b:38:7a:6d:ba:74:5a:1a:d2:
9c:ca:5f:1a:fd:3d:7d:6c:7b:dc:5f:28:19:eb:fc:1d:c5:18:
5a:e2:61:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:49:15 2025 by rpki-client