Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/7/3130332e3138342e3137342e302f32332d3234203d3e2039383838.roa
File: 3130332e3138342e3137342e302f32332d3234203d3e2039383838.roa (raw, json)
Hash identifier: h2bSnnI9a+kGlKn3GxEShW8TmFpFzCWMgYRzWIvLc4c=
Subject key identifier: 87:FC:BF:4B:34:AF:9C:FB:C2:F4:B7:1E:9D:79:81:67:E6:E8:56:A5
Certificate issuer: /CN=A919619E0000/serialNumber=4B1987D5160068092602529871C93EA320045A75
Certificate serial: 7E3575B5286ABEE810479AC19373556064DC13DD
Authority key identifier: 4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/7/3130332e3138342e3137342e302f32332d3234203d3e2039383838.roa
Signing time: Tue 21 Jan 2025 00:10:15 +0000
ROA not before: Tue 21 Jan 2025 00:05:15 +0000
ROA not after: Tue 20 Jan 2026 00:10:15 +0000
asID: 9888
IP address blocks: 103.184.174.0/23 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:35:75:b5:28:6a:be:e8:10:47:9a:c1:93:73:55:60:64:dc:13:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919619E0000
Validity
Not Before: Jan 21 00:05:15 2025 GMT
Not After : Jan 20 00:10:15 2026 GMT
Subject: CN=87FCBF4B34AF9CFBC2F4B71E9D798167E6E856A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:20:87:33:75:28:ba:54:ab:76:12:2d:8b:03:
36:82:88:0b:ee:93:da:60:c4:27:c2:94:10:9a:1e:
64:6d:6a:25:7e:da:5c:7d:1f:05:6a:82:8d:fc:6a:
ac:9c:25:79:c3:70:48:d0:52:00:b6:5b:e8:48:6b:
e7:9f:d6:89:95:e1:58:b9:b1:74:cf:0d:b1:3f:78:
5a:16:95:5c:78:6a:29:6a:11:c8:c1:17:1a:87:e3:
9b:8a:7e:04:38:df:0b:8b:20:86:b5:41:af:e4:47:
ae:be:1c:54:50:b4:98:fb:7b:4f:cd:f6:f9:f9:42:
c8:e5:26:d6:d1:b6:48:ae:6f:14:6b:2f:86:27:55:
35:a5:bb:fa:e9:db:cc:68:30:61:c3:5d:f4:ce:74:
60:2a:eb:52:5b:1b:5e:09:9f:16:0b:fe:9c:54:9c:
21:92:93:36:81:cd:5e:52:83:2f:0b:a6:37:98:6f:
99:0d:69:02:11:a3:80:32:01:b7:4a:47:79:71:96:
0a:40:21:71:2d:ef:f1:6e:97:8a:11:e6:e3:56:8a:
49:4b:5f:75:30:80:0c:55:0d:0c:19:ee:3a:69:23:
41:67:4b:f2:ce:d7:24:47:db:57:68:62:af:3b:59:
85:88:3c:bf:3e:68:b3:19:68:c8:2d:6d:40:70:cd:
db:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:FC:BF:4B:34:AF:9C:FB:C2:F4:B7:1E:9D:79:81:67:E6:E8:56:A5
X509v3 Authority Key Identifier:
keyid:4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/3130332e3138342e3137342e302f32332d3234203d3e2039383838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.184.174.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:4f:19:78:38:e5:d2:44:1c:64:82:1d:8f:97:db:1c:65:12:
f3:f8:9c:a2:a5:2b:ed:49:6d:a8:6f:1b:49:c0:aa:cb:fb:e3:
de:86:a1:91:f4:5c:55:d4:d1:34:2d:ad:9e:a9:7e:e1:80:e7:
4a:51:5a:2e:a4:f0:a5:08:b7:c9:c8:73:bf:8b:1e:5f:b5:f9:
b2:6c:9f:3e:61:8c:fa:48:41:5a:fb:b6:d0:73:15:0c:67:4c:
f8:04:3c:60:33:d2:55:10:82:07:1f:e0:52:59:01:be:1f:11:
8b:82:22:e2:c2:a6:15:ac:57:01:44:68:66:10:5e:ee:83:51:
41:3f:c5:c5:e4:ab:e5:75:f3:c4:ea:48:59:57:99:34:00:4b:
e1:fe:f5:f5:dd:b3:6e:a2:f8:56:c3:22:f6:fc:77:0d:28:ac:
7f:d5:b2:af:87:bd:42:53:d4:60:56:3e:ed:f2:95:85:9a:13:
c0:44:a9:83:82:2a:a6:0d:b8:d1:ff:89:c0:b5:aa:92:1f:ce:
af:4b:03:ab:b6:95:db:c7:28:c0:01:aa:d9:43:6b:2f:2d:8a:
f6:94:f9:ea:5e:6d:36:48:14:0d:b5:7a:eb:34:41:8e:a0:8f:
d6:4b:07:dc:bd:eb:22:6a:07:c6:1d:0a:8e:e6:60:49:d1:e3:
78:94:26:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 16:07:31 2025 by rpki-client