Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/2/3139392e3138322e3133322e302f32322d3234203d3e203231353534.roa
File: 3139392e3138322e3133322e302f32322d3234203d3e203231353534.roa (raw, json)
Hash identifier: l6vJu/3mXA9fJbf+zzeOz+JDOXN3qfLoAy3QMT+EMTw=
Subject key identifier: EA:F0:A1:63:75:60:75:BF:FA:83:D1:0E:50:09:AC:B2:E1:65:85:72
Certificate issuer: /CN=69277d0a9b474673c9d19f36418a5bd347fb8bd3d827cad52f
Certificate serial: 0B4CA8EF7F526A54ED65A3C37916D849541C837B
Authority key identifier: 84:58:7B:F6:7D:2A:DA:31:FC:7E:0F:F9:3D:E2:E2:66:D3:31:64:C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a816e8ad-9bcc-46da-afd8-70dd97bd0232/69277d0a9b474673c9d19f36418a5bd347fb8bd3d827cad52f.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/2/3139392e3138322e3133322e302f32322d3234203d3e203231353534.roa
Signing time: Sun 01 Jan 2023 03:43:40 +0000
ROA not before: Sun 01 Jan 2023 03:38:40 +0000
ROA not after: Sun 31 Dec 2023 03:43:40 +0000
asID: 21554
IP address blocks: 199.182.132.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:4c:a8:ef:7f:52:6a:54:ed:65:a3:c3:79:16:d8:49:54:1c:83:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69277d0a9b474673c9d19f36418a5bd347fb8bd3d827cad52f
Validity
Not Before: Jan 1 03:38:40 2023 GMT
Not After : Dec 31 03:43:40 2023 GMT
Subject: CN=EAF0A163756075BFFA83D10E5009ACB2E1658572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c7:65:6c:2c:15:f5:d8:a4:7b:c8:39:b8:ed:
1e:32:23:a8:cb:df:ba:14:7e:80:3e:f4:8a:7e:13:
c9:d9:97:bf:90:5a:e8:e5:21:ce:de:1f:53:e7:53:
3a:93:fd:9c:48:6b:14:4b:6d:5b:74:dd:79:0c:37:
18:32:76:b5:e7:9a:9f:ef:6f:a9:ce:b1:d9:d4:76:
27:f3:f5:60:22:7e:88:fa:a6:db:81:82:12:ae:7f:
aa:7f:23:ca:89:c1:76:98:2f:69:82:49:66:3e:bc:
d4:d0:a1:42:c9:f9:e1:4b:7d:34:4f:67:2a:a0:1b:
bd:32:b4:a3:e2:ca:60:31:58:83:dc:7a:85:dd:d5:
af:c2:1d:fb:7f:29:f7:be:ac:d2:56:11:73:94:02:
04:16:94:ad:c3:be:7c:a2:a7:8a:4d:bc:6d:4c:84:
b9:02:ee:24:a3:c9:21:b7:fb:f5:14:23:48:75:07:
5e:09:ce:10:d0:c9:07:ad:2e:dd:a5:87:19:e6:4f:
8d:75:ae:0f:94:ff:68:75:e0:29:1f:f7:3a:6c:e9:
f7:15:57:f3:f4:f6:2d:db:eb:a2:0f:11:33:6e:29:
c7:ec:c6:8a:25:6d:d8:f4:6b:dc:de:5f:eb:19:f9:
9f:44:3b:5f:46:8c:e7:33:1b:24:cc:d1:5c:3c:70:
18:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F0:A1:63:75:60:75:BF:FA:83:D1:0E:50:09:AC:B2:E1:65:85:72
X509v3 Authority Key Identifier:
keyid:84:58:7B:F6:7D:2A:DA:31:FC:7E:0F:F9:3D:E2:E2:66:D3:31:64:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91905300000/2/84587BF67D2ADA31FC7E0FF93DE2E266D33164C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a816e8ad-9bcc-46da-afd8-70dd97bd0232/69277d0a9b474673c9d19f36418a5bd347fb8bd3d827cad52f.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/2/3139392e3138322e3133322e302f32322d3234203d3e203231353534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.182.132.0/22
Signature Algorithm: sha256WithRSAEncryption
53:c9:1f:75:c2:82:d7:28:64:42:2e:29:3d:aa:c2:4b:bc:13:
d6:8b:a2:c4:ff:2f:85:46:00:12:01:54:57:2f:ca:dd:57:0c:
d6:91:f0:ba:e7:24:2d:4f:9e:78:ec:e6:b2:e7:fa:c9:bb:65:
eb:93:a2:04:f6:9e:4b:36:97:d3:28:75:ba:bf:35:f8:8f:21:
61:21:f6:30:8f:e2:a0:0c:09:2e:86:b0:5a:1c:f2:fd:04:44:
9e:5f:09:1e:8e:bc:1b:c1:b8:d8:7a:9e:2f:ba:13:c1:4a:70:
3a:ba:97:d5:3d:a9:ea:21:e9:8b:3d:81:b3:8d:67:62:27:73:
8f:fc:80:70:57:2c:19:eb:3d:9f:b4:23:72:77:e0:06:57:e2:
f2:41:0c:05:41:54:58:47:ea:3d:0d:b0:02:36:57:29:a2:ad:
31:0e:89:e4:e7:8e:5f:83:57:23:dd:7c:06:f6:c7:16:4d:ef:
18:ab:ed:e3:33:c7:ac:0e:ea:54:6e:cd:85:02:ba:cb:bb:c7:
b0:5c:cd:05:0e:ca:8c:2e:a0:66:ce:3e:4e:af:f3:c1:05:e5:
e5:34:13:7f:ea:e0:c2:d7:b3:10:a2:ba:ed:be:52:36:74:ed:
6a:06:4d:50:d0:e2:62:f5:57:39:1a:6f:75:7f:3c:62:0c:cf:
dc:24:78:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:17:59 2025 by rpki-client