Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132382e302f32342d3234203d3e203130313033.roa
File: 3130332e3233382e3132382e302f32342d3234203d3e203130313033.roa (raw, json)
Hash identifier: RV9e8b3wzSGdZRggtXHLrrR7fbBhf4AwtUfhTbHItHU=
Subject key identifier: F2:49:AF:67:8F:18:F1:33:6D:77:61:F1:1E:E0:98:9A:A1:C3:1B:59
Certificate issuer: /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Certificate serial: 714D38C77D67C1BB736950D68333F2B9450B039F
Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132382e302f32342d3234203d3e203130313033.roa
Signing time: Tue 03 Sep 2024 05:54:28 +0000
ROA not before: Tue 03 Sep 2024 05:49:28 +0000
ROA not after: Tue 02 Sep 2025 05:54:28 +0000
asID: 10103
IP address blocks: 103.238.128.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:4d:38:c7:7d:67:c1:bb:73:69:50:d6:83:33:f2:b9:45:0b:03:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A61310000
Validity
Not Before: Sep 3 05:49:28 2024 GMT
Not After : Sep 2 05:54:28 2025 GMT
Subject: CN=F249AF678F18F1336D7761F11EE0989AA1C31B59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:40:da:5f:e4:a9:e3:8d:7e:21:37:61:17:1d:
d3:17:e8:e2:94:a6:b0:cf:00:24:1b:40:2b:5e:85:
c2:12:80:c3:69:a0:89:8a:86:40:33:92:00:d4:d1:
0b:5a:0e:9d:c1:67:7d:dd:82:bd:80:c4:8a:95:d5:
e2:5e:d9:67:80:ea:41:eb:15:d8:0e:8e:52:11:87:
ae:04:97:4b:69:fc:69:11:ab:58:f4:25:72:7a:d4:
9d:b8:fa:d4:97:31:91:bc:a4:ad:f2:62:c1:23:24:
23:48:dc:b8:ab:d2:40:04:39:a8:a0:8d:11:68:fc:
b0:fb:31:b3:8b:ee:91:b2:f2:2c:d6:1b:7e:c4:92:
4f:3b:8c:b3:33:dd:65:ca:26:70:49:4d:e0:3c:d4:
bb:27:09:84:96:87:2c:53:5f:4d:a4:2a:33:8b:bd:
9f:10:aa:ff:37:fe:0b:5a:d7:24:cd:cf:f2:ae:b4:
a3:09:74:9d:56:3e:4e:d7:6f:dd:a2:4d:5a:f6:1f:
34:e6:94:ff:bc:83:49:36:7f:35:c5:69:5f:f7:9e:
29:39:65:48:89:82:e5:74:08:5e:8e:c9:77:bb:49:
bf:8a:41:d8:b5:00:ed:ac:fa:2c:d5:8d:0d:a5:c9:
38:d8:7b:e4:6f:7e:af:a3:c8:2d:fa:58:c5:b7:43:
bb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:49:AF:67:8F:18:F1:33:6D:77:61:F1:1E:E0:98:9A:A1:C3:1B:59
X509v3 Authority Key Identifier:
keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132382e302f32342d3234203d3e203130313033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.238.128.0/24
Signature Algorithm: sha256WithRSAEncryption
12:38:b3:df:3e:01:ec:80:13:1a:2b:bc:e2:6a:ce:0f:e6:ba:
f4:da:39:37:4c:a4:03:16:06:be:72:fd:df:88:39:9e:06:d0:
bf:e3:5b:57:04:9a:0c:48:6f:5e:66:1c:c8:75:3c:44:94:94:
12:c2:b4:e0:c7:e2:92:68:21:c8:3e:ec:ee:37:7b:18:28:2e:
a8:79:12:81:b8:d9:0f:bf:05:cf:5f:77:cb:b7:d2:cd:34:42:
e4:38:aa:db:d6:33:67:d6:99:b9:2f:eb:0d:d7:d4:0c:58:f5:
02:ed:11:de:50:38:72:fc:c4:c2:38:8a:2e:f4:22:c5:d2:d0:
91:a3:26:68:ea:5c:e3:fd:9f:bb:c7:81:a6:b7:92:ae:51:4d:
b8:14:05:be:f7:93:99:92:c1:1b:f8:ec:62:c0:2a:9c:cd:75:
90:b2:c9:aa:0b:8c:d1:38:f9:5f:60:1a:92:ba:73:41:3e:bb:
97:6d:42:61:f0:49:21:5a:4e:06:c8:d9:8f:2e:12:be:0c:ad:
d5:ab:5d:93:46:10:d3:89:67:54:43:b1:bd:04:6c:48:60:e2:
47:1e:19:9f:32:f3:a6:c0:61:cf:9b:46:d2:e2:01:b6:2b:b0:
e7:37:b5:4d:cb:eb:19:62:ab:ae:e4:c9:f8:16:6f:25:e3:7d:
c4:f0:b3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:58:42 2025 by rpki-client