Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91FA6CA0000/0/3230322e3133342e35362e302f32342d3234203d3e20383334.roa
File: 3230322e3133342e35362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: oMMKnNutMS1A4of0qUEwpt8dVXowu+fugPqQpbNDh58=
Subject key identifier: 40:66:F5:0C:68:9A:60:AD:4F:0C:60:93:A9:9C:55:19:5E:9D:12:4F
Certificate issuer: /CN=A91FA6CA0000/serialNumber=8206A8C59A4EEE4E543D4EF691089C306760AF9C
Certificate serial: 0D6E9A6268A47BA283D03A54CEF7A7953F2D5D9C
Authority key identifier: 82:06:A8:C5:9A:4E:EE:4E:54:3D:4E:F6:91:08:9C:30:67:60:AF:9C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggaoxZpO7k5UPU72kQicMGdgr5w.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91FA6CA0000/0/3230322e3133342e35362e302f32342d3234203d3e20383334.roa
Signing time: Tue 23 Jan 2024 07:35:05 +0000
ROA not before: Tue 23 Jan 2024 07:30:05 +0000
ROA not after: Tue 21 Jan 2025 07:35:05 +0000
asID: 834
IP address blocks: 202.134.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:6e:9a:62:68:a4:7b:a2:83:d0:3a:54:ce:f7:a7:95:3f:2d:5d:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA6CA0000/serialNumber=8206A8C59A4EEE4E543D4EF691089C306760AF9C
Validity
Not Before: Jan 23 07:30:05 2024 GMT
Not After : Jan 21 07:35:05 2025 GMT
Subject: CN=4066F50C689A60AD4F0C6093A99C55195E9D124F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b8:93:e3:49:60:99:b4:fc:19:79:aa:b1:ed:
ef:eb:80:8a:4d:e7:55:f1:4a:f2:76:ca:e3:0c:d6:
27:ce:c0:b9:f0:7d:09:46:7b:78:af:03:01:3b:7e:
0b:e7:e3:04:c5:41:04:0c:22:6b:aa:fb:42:36:d3:
ea:57:7b:22:85:c2:70:ed:b0:3b:57:ee:c7:21:2e:
ee:37:bc:38:94:e4:d1:7f:8d:bb:41:20:32:c3:ea:
81:00:83:47:cc:ac:59:d0:35:13:08:9a:c1:08:83:
c7:11:f4:86:6a:cf:1f:f8:e7:1a:c8:1a:f9:7e:89:
82:e1:0f:5c:50:62:91:2a:98:56:72:a4:ce:30:ab:
19:e1:40:a7:64:83:3d:e4:e6:82:54:9c:d5:26:b6:
09:ba:96:e5:d3:20:28:ba:63:e8:c9:f4:34:0f:41:
0a:37:4b:9e:44:3a:f9:7e:ec:23:01:0f:ff:61:e8:
dc:43:96:ac:98:9c:69:8f:7f:67:74:9c:c7:bf:2a:
64:f9:4f:f6:a9:ad:f3:3f:88:6a:f2:95:06:4c:e1:
42:a6:14:c1:88:4f:d0:41:9a:c4:61:25:3c:75:ba:
c8:e9:d3:33:be:cb:b6:08:43:ba:ec:4c:ae:c4:28:
13:00:c0:8d:7c:60:67:51:c6:bb:97:b2:53:3a:12:
7a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:66:F5:0C:68:9A:60:AD:4F:0C:60:93:A9:9C:55:19:5E:9D:12:4F
X509v3 Authority Key Identifier:
keyid:82:06:A8:C5:9A:4E:EE:4E:54:3D:4E:F6:91:08:9C:30:67:60:AF:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91FA6CA0000/0/8206A8C59A4EEE4E543D4EF691089C306760AF9C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggaoxZpO7k5UPU72kQicMGdgr5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91FA6CA0000/0/3230322e3133342e35362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.134.56.0/24
Signature Algorithm: sha256WithRSAEncryption
91:c7:95:1c:37:b5:24:8a:d1:d8:81:78:ca:c3:e3:ac:a6:2e:
c6:a9:5f:ee:e0:c3:bb:d8:9d:1d:0e:a2:ba:8e:46:50:7a:84:
bc:f2:6b:11:b2:a7:18:a9:1c:44:58:ed:58:89:26:fa:1e:b2:
82:cf:2d:46:d9:64:68:14:e5:e4:6f:cb:52:8f:a8:a6:db:74:
10:37:33:86:32:16:50:48:e3:4f:b2:a8:7d:54:75:21:aa:74:
19:52:45:24:54:e0:2d:a5:18:10:46:d8:4a:19:04:80:55:dd:
29:b0:00:4e:76:c7:ea:67:90:20:dc:ad:6d:77:a1:11:aa:4f:
41:8f:32:36:03:2e:62:5a:7b:9a:01:79:6e:1d:97:f7:f5:28:
0b:ec:23:11:a6:60:4f:49:75:37:cf:dd:7b:f1:05:2c:67:44:
06:d1:8c:7a:99:2a:21:65:37:d4:7c:30:8a:c2:54:e7:2b:9b:
ce:12:8e:4c:1a:74:f1:f0:24:15:f5:fc:41:53:69:35:ed:77:
84:65:2c:e0:85:df:b2:37:9e:5d:3b:ed:cb:25:58:a7:e8:c9:
09:69:89:ad:cc:14:5d:39:04:7c:ea:0e:32:f5:19:47:3f:be:
c8:09:b2:f2:0c:8f:59:b1:5a:83:fb:fd:df:52:7e:39:70:c8:
a1:46:d0:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 2 05:16:16 2024 by rpki-client on console-ams.rpki-client.org