Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/0/3230332e32382e3138312e302f32342d3234203d3e2039343439.roa
File: 3230332e32382e3138312e302f32342d3234203d3e2039343439.roa (raw, json)
Hash identifier: 1Z9NFwu84Arj0S4sz3h+29lvpdXrfwUJ9GXMB4OkKsQ=
Subject key identifier: 11:F8:A5:B4:41:AA:9D:DF:3F:39:C5:E0:8C:1F:7E:20:87:1A:8D:AA
Certificate issuer: /CN=A91905300000/serialNumber=30356EF46D594DA57C7697011183ACFFE04613E0
Certificate serial: 4F7E0D97FE7AF799DDC6BEA0C84A773BE76BEC80
Authority key identifier: 30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/0/3230332e32382e3138312e302f32342d3234203d3e2039343439.roa
Signing time: Tue 02 Apr 2024 01:20:19 +0000
ROA not before: Tue 02 Apr 2024 01:15:19 +0000
ROA not after: Tue 01 Apr 2025 01:20:19 +0000
asID: 9449
IP address blocks: 203.28.181.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:7e:0d:97:fe:7a:f7:99:dd:c6:be:a0:c8:4a:77:3b:e7:6b:ec:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91905300000/serialNumber=30356EF46D594DA57C7697011183ACFFE04613E0
Validity
Not Before: Apr 2 01:15:19 2024 GMT
Not After : Apr 1 01:20:19 2025 GMT
Subject: CN=11F8A5B441AA9DDF3F39C5E08C1F7E20871A8DAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a7:57:87:48:0b:ec:25:4c:8c:57:c0:a0:fa:
78:0b:ae:d3:ae:01:ba:a2:0e:16:08:9a:ad:f1:32:
1b:71:f4:21:93:2c:9c:4d:5c:6c:24:7f:32:e3:34:
e2:f1:80:60:ba:03:bd:ce:f7:3f:c1:7b:30:c2:15:
5f:49:f6:54:44:87:09:b1:7b:28:35:27:e3:3d:57:
8f:b5:35:cc:1c:9e:bf:16:83:94:cc:81:14:74:08:
00:47:77:05:5d:12:f1:23:4c:cb:b9:cd:db:14:ec:
9d:38:79:b9:c2:31:ac:cc:1e:4f:9a:32:36:0a:6b:
f3:90:af:8a:0a:8e:06:f1:65:1c:bb:a1:3a:6c:1c:
fc:5e:a5:9a:6a:1a:c3:7b:8d:b6:06:82:e1:bf:2e:
62:f8:ea:e9:cf:8c:63:f0:ea:e2:d9:d9:13:e2:45:
26:19:82:6e:e1:9a:3f:5b:80:b2:6a:2f:57:a1:4d:
e0:15:e6:0a:5b:61:61:83:07:2f:f2:b9:2d:92:7a:
f8:7a:37:45:e6:6c:7e:8d:8d:b2:b5:c6:d4:24:9f:
d1:c0:c6:f8:54:41:20:c0:a9:18:11:36:6c:bf:53:
a5:c1:f1:37:a6:5e:9b:a1:7d:e1:d8:ed:36:dc:2c:
4f:40:58:56:70:aa:0d:0c:d5:89:22:7f:14:b6:8b:
22:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:F8:A5:B4:41:AA:9D:DF:3F:39:C5:E0:8C:1F:7E:20:87:1A:8D:AA
X509v3 Authority Key Identifier:
keyid:30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/3230332e32382e3138312e302f32342d3234203d3e2039343439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.28.181.0/24
Signature Algorithm: sha256WithRSAEncryption
07:23:77:1c:3e:7b:a3:a7:de:1d:0d:c7:80:7b:e3:6d:80:4f:
a8:f3:33:9e:c7:c3:51:91:11:87:78:d4:5b:b4:51:7a:66:b1:
77:4f:a4:d6:cb:44:af:11:45:08:91:20:9f:4c:f2:eb:83:56:
5c:af:17:3a:e4:10:74:56:1f:f3:38:73:22:90:dd:e0:82:79:
af:0b:52:c5:74:b5:54:1f:5a:5b:7c:9f:a8:c2:67:92:d8:14:
e2:12:02:2f:d0:09:fd:61:e4:de:0d:35:7c:0d:e3:21:e6:48:
96:22:9f:01:15:9b:bd:03:cc:dc:fd:5f:f1:e3:69:7c:e3:3f:
ae:7d:05:d3:9b:c9:c1:a4:d7:e7:fe:f9:bb:ba:b0:9b:59:ff:
df:86:e2:56:cf:02:60:a9:5a:2b:0e:0f:9a:6d:ca:28:ac:20:
d3:73:61:53:1a:ee:9a:f0:18:fb:d8:e8:69:40:36:2c:42:6e:
59:c6:fb:99:22:f1:79:b9:3a:13:59:2d:15:c6:12:8c:53:be:
94:24:9e:84:72:9b:18:3d:67:76:59:25:9d:5d:b6:ec:3a:b2:
47:43:67:9d:73:bb:3a:1c:ad:4c:a4:68:36:c1:29:d5:31:e1:
63:14:8c:39:2d:16:7c:a8:fd:f9:c1:4c:1a:51:bc:93:16:a2:
7b:f8:75:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 06:15:40 2024 by rpki-client on console-ams.rpki-client.org