Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132382e302f32342d3234203d3e20313336353537.roa
File: 3130332e3233382e3132382e302f32342d3234203d3e20313336353537.roa (raw, json)
Hash identifier: /Dtb6azraw2ExUqC6LC+BU51rLy6g6750yDkoX/WQ20=
Subject key identifier: 52:D2:59:E4:FB:74:11:D5:F6:50:26:DA:B9:CF:85:7E:0B:34:87:C7
Certificate issuer: /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Certificate serial: 45AAA8751AC0EDBEABFF47E14E2D4650807DF01A
Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132382e302f32342d3234203d3e20313336353537.roa
Signing time: Fri 23 Feb 2024 04:44:42 +0000
ROA not before: Fri 23 Feb 2024 04:39:42 +0000
ROA not after: Fri 21 Feb 2025 04:44:42 +0000
asID: 136557
IP address blocks: 103.238.128.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:aa:a8:75:1a:c0:ed:be:ab:ff:47:e1:4e:2d:46:50:80:7d:f0:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A61310000
Validity
Not Before: Feb 23 04:39:42 2024 GMT
Not After : Feb 21 04:44:42 2025 GMT
Subject: CN=52D259E4FB7411D5F65026DAB9CF857E0B3487C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8e:a5:fd:06:00:af:1a:d1:74:ed:05:0d:c9:
78:8d:f4:f6:8f:1d:14:7d:5c:b5:e7:7c:e2:29:9b:
41:e3:da:9d:3d:7e:43:84:a3:e1:61:71:15:c2:cb:
ee:00:12:8f:02:4e:9c:69:cc:b4:89:f1:1b:97:6a:
93:5f:c5:b7:8e:53:e9:5a:5a:1d:32:55:7b:92:9e:
20:67:b3:bb:25:06:39:b3:b7:54:8b:89:eb:6c:7f:
73:06:33:83:8f:e2:b6:75:0e:4c:86:08:57:e3:a1:
38:58:a5:54:43:60:54:d7:e6:8e:08:8c:65:74:eb:
0e:b1:03:4e:d2:22:f1:44:ee:48:3c:64:64:61:8e:
ea:cc:3b:db:7b:b7:ee:da:8a:74:af:ce:c8:7f:41:
33:55:55:20:f4:81:9d:8d:1a:7b:41:42:9f:f3:d7:
9a:82:74:4a:c8:83:42:8b:f1:50:07:4c:7f:d6:80:
10:b1:cc:a4:c6:31:a4:83:58:1f:e9:e5:53:92:aa:
2a:b8:ab:ac:7a:9c:7e:fc:ab:91:c9:5b:17:60:bb:
15:85:6c:e2:9e:48:59:a9:ee:bb:75:19:b0:b5:a5:
fc:7e:b4:50:86:da:70:c6:58:cb:ba:b5:94:47:22:
63:b8:4a:9a:b3:6f:09:f6:2c:58:fe:18:63:5b:cf:
35:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D2:59:E4:FB:74:11:D5:F6:50:26:DA:B9:CF:85:7E:0B:34:87:C7
X509v3 Authority Key Identifier:
keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132382e302f32342d3234203d3e20313336353537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.238.128.0/24
Signature Algorithm: sha256WithRSAEncryption
07:fa:0c:5d:5c:ba:38:3d:d6:1d:12:07:70:79:3f:33:90:6c:
16:04:69:95:1a:d2:b3:a6:a1:47:2e:34:98:7d:52:28:10:b7:
3d:5a:10:c2:d7:bc:65:4a:bf:e8:ba:d2:3c:1e:a6:27:79:9d:
ce:0b:b3:c9:c6:4f:d8:51:2c:6d:1e:27:23:46:6a:a1:d1:35:
c9:fe:80:14:95:52:6f:f3:17:70:7b:45:3a:f2:e7:e0:3f:83:
c2:00:ed:56:2b:91:91:e7:49:70:a3:09:22:a4:23:46:fc:47:
1d:6b:38:e8:3c:17:45:6e:f7:97:76:f6:53:01:c2:27:7a:87:
7a:5b:fc:fd:07:5c:30:6a:56:07:21:62:d5:57:ee:1c:a8:66:
f2:4d:5e:ab:b9:a3:2c:77:ab:60:08:91:a2:0b:ea:f8:03:86:
fb:29:a8:c8:4a:93:f7:00:b8:62:30:fd:9d:47:34:48:eb:0b:
d9:73:72:8e:e5:b1:46:69:07:8e:1d:91:08:32:9f:bc:33:28:
9b:72:df:f5:23:fa:bc:88:28:c8:17:43:7a:a6:b0:fd:ef:dc:
a6:57:09:bd:f8:47:4e:68:65:39:93:3d:06:ac:ba:5a:c5:d7:
51:af:13:de:ac:fe:66:b5:d6:6d:96:65:8a:75:40:ea:42:d5:
2a:e9:8c:77
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIURaqodRrA7b6r/0fhTi1GUIB98BowDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxQTYxMzEwMDAwMTEwLwYDVQQFEyg3MkVDMEQ4QjM4
NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAwMB4XDTI0MDIyMzA0Mzk0MloX
DTI1MDIyMTA0NDQ0MlowMzExMC8GA1UEAxMoNTJEMjU5RTRGQjc0MTFENUY2NTAy
NkRBQjlDRjg1N0UwQjM0ODdDNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJ+Opf0GAK8a0XTtBQ3JeI309o8dFH1cted84imbQePanT1+Q4Sj4WFxFcLL
7gASjwJOnGnMtInxG5dqk1/Ft45T6VpaHTJVe5KeIGezuyUGObO3VIuJ62x/cwYz
g4/itnUOTIYIV+OhOFilVENgVNfmjgiMZXTrDrEDTtIi8UTuSDxkZGGO6sw723u3
7tqKdK/OyH9BM1VVIPSBnY0ae0FCn/PXmoJ0SsiDQovxUAdMf9aAELHMpMYxpINY
H+nlU5KqKrirrHqcfvyrkclbF2C7FYVs4p5IWanuu3UZsLWl/H60UIbacMZYy7q1
lEciY7hKmrNvCfYsWP4YY1vPNQsCAwEAAaOCAhcwggITMB0GA1UdDgQWBBRS0lnk
+3QR1fZQJtq5z4V+CzSHxzAfBgNVHSMEGDAWgBRy7A2LOG2W+8dBwF82Yct62o64
ADAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFBNjEzMTAwMDAvMC83MkVDMEQ4
QjM4NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAwLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9jdXdOaXpodGx2
dkhRY0JmTm1ITGV0cU91QUEuY2VyMIGRBggrBgEFBQcBCwSBhDCBgTB/BggrBgEF
BQcwC4ZzcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFB
NjEzMTAwMDAvMC8zMTMwMzMyZTMyMzMzODJlMzEzMjM4MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzEzMzM2MzUzNTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ+6AMA0GCSqGSIb3DQEB
CwUAA4IBAQAH+gxdXLo4PdYdEgdweT8zkGwWBGmVGtKzpqFHLjSYfVIoELc9WhDC
17xlSr/outI8HqYneZ3OC7PJxk/YUSxtHicjRmqh0TXJ/oAUlVJv8xdwe0U68ufg
P4PCAO1WK5GR50lwowkipCNG/EcdazjoPBdFbveXdvZTAcIneod6W/z9B1wwalYH
IWLVV+4cqGbyTV6ruaMsd6tgCJGiC+r4A4b7KajISpP3ALhiMP2dRzRI6wvZc3KO
5bFGaQeOHZEIMp+8Myibct/1I/q8iCjIF0N6prD979ymVwm9+EdOaGU5kz0GrLpa
xddRrxPerP5mtdZtlmWKdUDqQtUq6Yx3
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:58:43 2025 by rpki-client