Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91FA6CA0000/0/3230322e3133342e35362e302f32342d3234203d3e203130313131.roa
File: 3230322e3133342e35362e302f32342d3234203d3e203130313131.roa (raw, json)
Hash identifier: tQy3gauKgHtUTlsX+rEfIFer5i0HnLPx7KM17IiILlk=
Subject key identifier: 44:F0:50:6F:85:EB:32:21:CA:78:0B:50:7D:C0:7B:8E:E7:06:2B:00
Certificate issuer: /CN=A91FA6CA0000/serialNumber=8206A8C59A4EEE4E543D4EF691089C306760AF9C
Certificate serial: 7FFC68C38746BE36C75161F601C5924BD2CBB04D
Authority key identifier: 82:06:A8:C5:9A:4E:EE:4E:54:3D:4E:F6:91:08:9C:30:67:60:AF:9C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggaoxZpO7k5UPU72kQicMGdgr5w.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91FA6CA0000/0/3230322e3133342e35362e302f32342d3234203d3e203130313131.roa
Signing time: Wed 01 Nov 2023 04:01:00 +0000
ROA not before: Wed 01 Nov 2023 03:56:00 +0000
ROA not after: Wed 30 Oct 2024 04:01:00 +0000
asID: 10111
IP address blocks: 202.134.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:fc:68:c3:87:46:be:36:c7:51:61:f6:01:c5:92:4b:d2:cb:b0:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA6CA0000/serialNumber=8206A8C59A4EEE4E543D4EF691089C306760AF9C
Validity
Not Before: Nov 1 03:56:00 2023 GMT
Not After : Oct 30 04:01:00 2024 GMT
Subject: CN=44F0506F85EB3221CA780B507DC07B8EE7062B00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:52:7e:8f:a1:b4:92:72:5a:58:ab:11:43:f9:
99:e3:02:91:38:60:53:69:48:cc:5c:b0:d4:e1:49:
86:7b:83:7f:7b:b4:a5:9b:85:c8:9b:70:db:bd:73:
ce:18:39:fe:f6:00:36:a0:74:15:09:41:23:e7:39:
9b:3d:b3:fb:30:7a:4a:7c:1d:39:eb:2c:1d:0a:97:
4f:99:00:08:6d:45:6f:59:a6:92:3b:e4:8e:ca:53:
27:7c:51:0b:d8:4c:c1:f7:2d:1e:51:41:a5:9e:aa:
08:0d:1a:19:de:d2:96:8c:e9:fe:c5:cf:c7:fd:0c:
5a:39:9e:02:d2:bb:b0:60:87:71:7c:3f:e0:69:9f:
59:d2:c2:bf:55:b5:8a:a1:0e:14:d8:96:4a:93:d6:
7e:15:0d:a9:6c:60:d1:ea:19:d7:aa:b6:e0:3a:3e:
e0:f9:d5:b6:e3:8f:3e:22:62:c6:e9:f2:44:76:d6:
1c:0f:5b:07:88:b8:25:9d:a2:50:91:87:ba:22:f9:
b6:62:dd:de:f9:9e:1a:14:07:f5:ed:b6:17:a6:ec:
28:3d:9f:6e:9d:0e:76:4c:1e:3f:e3:f1:93:18:58:
ca:a7:36:2b:f9:50:4d:ea:1e:76:df:88:7c:d0:68:
2b:a3:25:19:bc:e0:1f:68:00:8a:b9:0d:d6:8c:50:
ac:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F0:50:6F:85:EB:32:21:CA:78:0B:50:7D:C0:7B:8E:E7:06:2B:00
X509v3 Authority Key Identifier:
keyid:82:06:A8:C5:9A:4E:EE:4E:54:3D:4E:F6:91:08:9C:30:67:60:AF:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91FA6CA0000/0/8206A8C59A4EEE4E543D4EF691089C306760AF9C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggaoxZpO7k5UPU72kQicMGdgr5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91FA6CA0000/0/3230322e3133342e35362e302f32342d3234203d3e203130313131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.134.56.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:38:81:e0:fd:c3:3d:8a:49:fe:fe:77:ea:f5:82:2b:c0:1f:
59:1e:ad:a1:c8:69:80:61:db:76:4d:4a:5a:fa:15:fc:73:89:
c0:68:bc:13:0c:5a:bc:4d:4a:e1:0c:51:e8:05:80:8c:ae:e2:
61:9a:fc:66:17:5b:85:2d:21:57:96:27:a8:f7:32:a9:47:aa:
44:a6:f6:f6:5b:c6:e9:90:3c:3a:e4:d0:79:ab:28:25:b3:82:
0b:25:c9:6b:6b:ca:b4:a8:6a:12:8b:e1:4c:4d:c6:c4:cc:1e:
d5:b3:64:1f:99:88:15:59:27:ef:c9:6e:f1:4d:3a:c9:63:49:
f8:4e:04:d3:55:90:ab:be:9f:42:aa:6f:07:a6:dc:56:91:ab:
aa:58:fe:1a:50:02:73:39:2d:5f:9d:21:f1:a4:06:6b:eb:1b:
20:2b:84:06:27:d2:ba:da:a0:06:d6:57:50:cf:ef:7c:0d:43:
81:6f:dd:cc:bf:af:d0:df:50:81:c8:20:83:79:fa:a7:37:f6:
6c:c9:cc:d8:c0:e8:cd:fb:9d:5a:f0:1a:ae:35:13:11:74:c5:
a8:5d:53:a8:2d:fe:ad:07:99:47:0a:e3:52:14:4d:6d:3b:85:
cb:e4:a4:c5:6d:ee:b5:52:70:73:18:98:cf:18:34:94:fd:9d:
4d:40:d7:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:25 2024 by rpki-client on console-fra.rpki-client.org