Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132382e302f32342d3234203d3e2035303635.roa
File: 3130332e3233382e3132382e302f32342d3234203d3e2035303635.roa (raw, json)
Hash identifier: KrhptvJkhND5uSB7VbtvMXBTbHBbkYD7ooVvdQjZkeU=
Subject key identifier: 23:78:B8:1D:BC:52:39:55:95:35:4A:88:A2:20:B3:0D:3C:01:1C:CB
Certificate issuer: /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Certificate serial: 2FB97CE651F2FEDB4B8AEB38F1EE955F5728F541
Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132382e302f32342d3234203d3e2035303635.roa
Signing time: Wed 17 Jul 2024 15:13:04 +0000
ROA not before: Wed 17 Jul 2024 15:08:04 +0000
ROA not after: Wed 16 Jul 2025 15:13:04 +0000
asID: 5065
IP address blocks: 103.238.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Sep 2024 05:54:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:b9:7c:e6:51:f2:fe:db:4b:8a:eb:38:f1:ee:95:5f:57:28:f5:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A61310000
Validity
Not Before: Jul 17 15:08:04 2024 GMT
Not After : Jul 16 15:13:04 2025 GMT
Subject: CN=2378B81DBC52395595354A88A220B30D3C011CCB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1f:89:52:8b:0c:82:0d:e2:28:e3:c7:2c:ff:
84:c3:1d:28:87:6e:57:34:6e:ae:91:bb:b1:7e:7f:
8b:26:9f:85:4b:8b:fc:34:1d:ae:66:c3:83:83:2e:
3c:0e:c8:4e:18:88:a3:37:f9:69:c1:fb:b8:53:f1:
a9:f2:91:7c:a5:56:fa:e2:89:fd:83:d1:84:2f:59:
e8:62:dd:e3:fa:b4:96:de:34:3d:8e:56:31:25:fe:
70:14:69:50:34:80:21:01:03:16:14:58:79:b1:d0:
14:76:72:bf:43:dd:e8:25:11:60:19:66:40:a5:d8:
a8:79:1c:63:51:14:54:6e:de:68:b9:40:79:97:16:
d9:4c:a3:06:04:a0:ef:9a:51:cc:7b:5d:22:db:86:
32:ab:77:c9:9b:94:3d:f5:31:19:f7:c4:55:4f:87:
bb:20:7d:7e:8d:b8:f6:40:2d:ed:54:7b:b7:ac:6c:
e6:7a:64:03:27:92:f0:ea:bc:cb:18:2a:80:d2:be:
bb:f7:7b:db:68:99:19:54:cf:8a:42:ca:e1:35:26:
3c:93:6c:ae:82:18:52:43:1f:5f:23:5d:de:4f:f3:
d5:c5:6a:3b:d7:b9:4e:ff:20:f0:d6:d4:29:67:66:
e7:30:45:3c:fc:8b:ab:a0:dc:3f:a0:9e:40:a2:d4:
d1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:78:B8:1D:BC:52:39:55:95:35:4A:88:A2:20:B3:0D:3C:01:1C:CB
X509v3 Authority Key Identifier:
keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132382e302f32342d3234203d3e2035303635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.238.128.0/24
Signature Algorithm: sha256WithRSAEncryption
02:6f:4b:5e:7a:b9:aa:50:c1:b7:87:67:63:f7:54:c3:70:4c:
0d:ea:d0:09:8c:d8:01:96:9d:cf:47:67:e8:1a:fa:13:c4:f3:
7e:d3:4f:2e:0b:0d:a8:d4:c6:3b:3c:42:8a:4a:aa:8f:74:27:
48:e0:f2:f4:2e:50:56:57:1d:fe:67:8e:c5:48:6a:90:d5:b2:
75:00:6d:64:84:35:51:4d:5e:90:65:c9:55:36:5a:aa:0a:e0:
07:40:ae:6f:64:41:17:a7:3a:08:98:9a:c0:71:91:e3:07:62:
f1:0f:5a:94:81:bc:d4:bd:3b:91:a4:1e:b3:fc:88:49:fe:b2:
64:c8:7b:2a:4f:03:93:9a:43:6e:e5:ff:9e:1f:f1:42:62:f1:
a4:30:4f:a0:61:17:91:71:9d:bf:96:08:da:b6:ba:96:37:52:
36:66:ed:fb:a9:12:87:99:84:f9:21:57:e8:73:1b:3c:70:0f:
1d:ac:65:d3:37:89:d9:83:a3:1d:4a:1f:b0:8f:00:38:0d:dc:
0e:c1:ca:7d:47:dc:60:0f:e7:09:27:c9:79:6c:94:75:01:4c:
a4:96:05:8e:48:d6:5d:27:ed:77:97:da:7b:f1:4a:22:11:5a:
ec:b4:92:49:d3:06:09:81:32:4d:81:0d:ea:6f:1b:b9:50:9f:
13:ed:fe:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:55:50 2025 by rpki-client