Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/7/3130332e3138342e3137342e302f32332d3234203d3e2039383838.roa
File: 3130332e3138342e3137342e302f32332d3234203d3e2039383838.roa (raw, json)
Hash identifier: H8gLNqh7yn+iSk+4wEVqjTJjqULkmSbmUc2nzD2G580=
Subject key identifier: 4F:0D:0E:7C:17:F6:85:3D:D8:5F:7F:78:42:23:EA:A9:A3:14:2D:80
Certificate issuer: /CN=A919619E0000/serialNumber=4B1987D5160068092602529871C93EA320045A75
Certificate serial: 3F575E5150D28FDF74ACC2FA141DC2111539B632
Authority key identifier: 4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/7/3130332e3138342e3137342e302f32332d3234203d3e2039383838.roa
Signing time: Mon 19 Feb 2024 23:43:12 +0000
ROA not before: Mon 19 Feb 2024 23:38:12 +0000
ROA not after: Mon 17 Feb 2025 23:43:12 +0000
asID: 9888
IP address blocks: 103.184.174.0/23 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:57:5e:51:50:d2:8f:df:74:ac:c2:fa:14:1d:c2:11:15:39:b6:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919619E0000/serialNumber=4B1987D5160068092602529871C93EA320045A75
Validity
Not Before: Feb 19 23:38:12 2024 GMT
Not After : Feb 17 23:43:12 2025 GMT
Subject: CN=4F0D0E7C17F6853DD85F7F784223EAA9A3142D80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d5:8e:e7:f4:25:b0:4d:48:46:2d:45:c2:3d:
3e:70:8e:e8:3f:cd:96:53:c2:d1:fb:e4:8b:aa:4d:
c9:80:70:d3:a4:60:93:ad:32:74:b2:4d:ae:89:6f:
45:1c:9d:20:5f:f0:1d:10:7a:18:56:ca:fb:43:f3:
d8:53:47:40:3f:67:87:6a:b0:c7:d1:d3:17:0c:7d:
60:4b:25:96:3e:c8:9b:d5:5f:0d:fa:0e:af:c1:59:
fa:ee:80:a0:5a:e8:f6:41:31:ae:05:6f:3d:8a:b1:
21:29:b6:a9:7c:90:41:88:15:81:18:2d:fb:ed:92:
2d:fd:73:80:f2:6e:b2:d5:f6:46:03:09:9f:cf:1b:
61:9c:50:5c:bb:a2:87:dd:02:74:1c:6f:fe:bf:e4:
16:bf:03:37:ac:68:bf:68:7b:e2:be:a2:08:90:0c:
51:3c:fb:18:b0:f3:a7:af:41:bc:18:91:22:91:ff:
1e:ad:52:a1:4a:a5:81:84:69:63:b3:45:35:6e:85:
05:de:1b:aa:30:7d:29:4c:9b:0e:2c:95:13:1b:74:
6b:48:f5:03:1e:ab:3e:8a:23:e4:31:ef:99:ba:4c:
e7:fb:4a:c4:d6:08:4f:72:c3:ee:52:41:ce:7a:65:
46:74:a4:e1:c7:5c:79:38:58:d2:71:d4:ce:d3:87:
47:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:0D:0E:7C:17:F6:85:3D:D8:5F:7F:78:42:23:EA:A9:A3:14:2D:80
X509v3 Authority Key Identifier:
keyid:4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/3130332e3138342e3137342e302f32332d3234203d3e2039383838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.184.174.0/23
Signature Algorithm: sha256WithRSAEncryption
12:f9:36:76:58:c3:d2:96:cb:1a:6a:35:24:91:b7:a1:67:d1:
62:d0:e6:4e:40:bc:64:b0:d0:dd:9b:e4:f9:94:8f:29:a9:7a:
2b:d1:b8:92:7e:e0:4e:11:41:29:15:b1:f6:6b:a2:97:79:e2:
9d:67:a5:65:43:16:a3:c9:80:18:8e:c7:9c:35:53:c4:03:b2:
b5:08:e9:8c:f3:7b:9a:b2:fa:40:96:fe:e8:ea:e9:b4:78:a2:
40:f9:a7:20:41:9c:95:18:6b:78:7b:d5:de:50:81:1f:a2:29:
b8:45:f0:80:10:4f:94:84:f4:1f:f5:69:1a:1b:2f:85:f9:2e:
cf:e9:64:78:1b:68:ee:bc:21:9d:e7:10:38:55:cc:0f:bd:00:
df:b0:dc:f0:d0:76:58:3d:14:45:b9:d4:cd:b3:3c:8a:6c:3d:
c8:a6:40:3b:5d:21:cb:41:60:ee:5f:d8:75:1c:77:84:3e:ec:
7b:40:1a:db:e2:0a:19:ba:61:30:dc:34:b5:cb:6f:d5:db:bd:
3f:ed:fb:a2:3f:40:cb:36:a3:8b:ad:31:5b:64:ec:b6:98:75:
fb:bc:f4:83:32:f7:a1:93:bc:86:f3:81:bb:4a:e3:72:96:0c:
61:7c:d7:f4:bf:aa:56:9e:21:64:af:68:2f:f8:09:9d:cc:83:
a0:e8:aa:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 10:27:39 2024 by rpki-client on console-ams.rpki-client.org