Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91FA6CA0000/0/3230322e3133342e35372e302f32342d3234203d3e20383334.roa
File: 3230322e3133342e35372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: q2UFnkeX8fyTajN2V70/gDrp9rBmJzHix6i1AGagoUo=
Subject key identifier: AC:21:27:7A:4E:1C:49:40:91:58:AE:CC:2E:2F:BA:F1:4E:79:91:DC
Certificate issuer: /CN=A91FA6CA0000/serialNumber=8206A8C59A4EEE4E543D4EF691089C306760AF9C
Certificate serial: 7ECA94351DC3B237FB3AC03EEEF21940B1F9D391
Authority key identifier: 82:06:A8:C5:9A:4E:EE:4E:54:3D:4E:F6:91:08:9C:30:67:60:AF:9C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggaoxZpO7k5UPU72kQicMGdgr5w.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91FA6CA0000/0/3230322e3133342e35372e302f32342d3234203d3e20383334.roa
Signing time: Wed 17 Jan 2024 08:40:05 +0000
ROA not before: Wed 17 Jan 2024 08:35:05 +0000
ROA not after: Wed 15 Jan 2025 08:40:05 +0000
asID: 834
IP address blocks: 202.134.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:ca:94:35:1d:c3:b2:37:fb:3a:c0:3e:ee:f2:19:40:b1:f9:d3:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA6CA0000/serialNumber=8206A8C59A4EEE4E543D4EF691089C306760AF9C
Validity
Not Before: Jan 17 08:35:05 2024 GMT
Not After : Jan 15 08:40:05 2025 GMT
Subject: CN=AC21277A4E1C49409158AECC2E2FBAF14E7991DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:60:ce:85:a0:70:69:47:5d:05:fa:22:9a:fd:
24:cd:7d:bd:34:18:6b:cc:fa:40:9c:39:1e:fb:aa:
fb:55:85:47:50:7f:5c:27:3a:a2:f7:e3:08:d8:ec:
46:5a:ed:e1:32:1f:66:38:d5:ed:84:d6:90:28:56:
cf:81:2f:71:9c:c7:cd:62:b4:da:2c:9b:0d:ec:9c:
69:6b:c1:3a:67:38:00:aa:bc:4e:5d:f1:96:85:dd:
c7:f4:20:32:8a:2e:53:87:d2:65:a0:ff:01:74:d9:
9c:fa:87:66:1e:e7:35:88:c4:e3:d5:d5:18:73:21:
1b:22:48:24:ed:f1:0b:f2:ef:6e:7d:dc:16:9b:f2:
8d:10:ac:f7:fd:47:c8:37:d0:e7:18:fd:1f:de:a3:
bf:3c:c5:cb:f1:57:18:56:a5:c9:3d:ee:8e:f2:8a:
94:0d:5b:fc:cf:29:bc:38:d6:fc:22:95:eb:f3:93:
d3:4b:79:8f:8a:6a:f4:f5:11:54:6b:98:fd:11:c5:
08:b6:a3:ef:20:eb:ec:74:7f:2a:f3:76:0d:b5:15:
28:04:e6:ed:71:b9:b4:38:14:16:30:f8:73:55:3f:
e2:90:ea:0f:31:a4:1c:22:75:33:bf:6b:ae:13:9f:
64:4c:e5:23:18:eb:4d:89:01:52:96:e9:e0:91:a1:
d9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:21:27:7A:4E:1C:49:40:91:58:AE:CC:2E:2F:BA:F1:4E:79:91:DC
X509v3 Authority Key Identifier:
keyid:82:06:A8:C5:9A:4E:EE:4E:54:3D:4E:F6:91:08:9C:30:67:60:AF:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91FA6CA0000/0/8206A8C59A4EEE4E543D4EF691089C306760AF9C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggaoxZpO7k5UPU72kQicMGdgr5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91FA6CA0000/0/3230322e3133342e35372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.134.57.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:aa:6c:f5:82:fa:4a:23:db:b0:99:f7:a5:d3:44:e9:76:14:
75:1e:0f:b9:7f:e5:7f:2f:e9:eb:f6:17:bc:10:78:2c:c8:d3:
f3:66:ef:e4:e5:25:24:6f:12:cb:d8:f4:0c:4b:8b:20:bd:73:
5e:88:eb:4c:2b:37:69:4a:52:47:e4:2e:69:69:ac:0c:4f:2f:
c9:fd:9f:c0:79:c3:76:a3:7b:95:71:04:38:cc:68:f5:40:20:
89:18:c7:e7:e8:03:09:32:9f:03:b3:e7:25:c2:1f:cd:a4:f6:
e7:89:96:65:ee:1f:14:08:72:ef:9f:4b:0d:e0:63:cf:3c:08:
c0:fa:bf:82:65:ea:43:49:8d:47:ab:ae:d3:21:16:83:71:30:
a5:86:f9:c3:a1:eb:fd:a0:e8:b4:91:f3:70:24:bb:33:ba:6e:
b3:fe:6d:e4:24:19:a6:03:cc:a4:0a:17:ce:4e:19:ce:4d:3e:
3e:35:e3:ce:28:1c:19:43:8c:82:18:0e:86:ba:d2:d7:90:48:
8e:36:69:c7:3e:cc:59:c0:18:6a:a6:a4:40:17:38:0a:72:8b:
bc:37:21:e8:39:96:31:f5:db:3e:82:28:e5:dc:aa:6b:cf:bb:
7c:68:c6:7b:af:11:ac:f1:b6:63:a1:ee:aa:26:67:a3:e2:a0:
c9:6a:c7:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:51 2024 by rpki-client on console-ams.rpki-client.org