Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132382e302f32342d3234203d3e20383334.roa
File: 3130332e3233382e3132382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: v6X/U/xM1OhYBk7vSXGar7MUO7llLuyKwRsRO/wPP08=
Subject key identifier: 76:7F:18:F3:D1:E1:59:B7:E3:AC:F6:AC:D3:57:18:B8:BF:C4:4B:75
Certificate issuer: /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Certificate serial: 35D407AA9623B62FC7DFC29E4D92C697EF19133A
Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132382e302f32342d3234203d3e20383334.roa
Signing time: Sat 28 Sep 2024 00:01:29 +0000
ROA not before: Fri 27 Sep 2024 23:56:29 +0000
ROA not after: Sat 27 Sep 2025 00:01:29 +0000
asID: 834
IP address blocks: 103.238.128.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:d4:07:aa:96:23:b6:2f:c7:df:c2:9e:4d:92:c6:97:ef:19:13:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A61310000
Validity
Not Before: Sep 27 23:56:29 2024 GMT
Not After : Sep 27 00:01:29 2025 GMT
Subject: CN=767F18F3D1E159B7E3ACF6ACD35718B8BFC44B75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:81:86:5c:36:3d:c9:ba:05:ee:60:0a:ab:ce:
a0:77:f4:f9:b4:71:3b:07:f7:6f:a0:f2:e6:e8:b1:
94:4b:c9:5d:c9:8a:88:c6:61:ee:68:c2:14:b3:da:
b0:db:ec:46:6f:ce:0c:9f:a7:bc:a9:5e:38:d1:48:
44:7e:45:53:81:9f:af:2c:bf:dd:9f:c3:35:c8:08:
35:a8:7c:d2:f3:94:59:26:9a:0b:19:da:75:d2:3a:
12:d2:ff:0e:3f:b0:11:c1:d8:8d:0e:2b:83:28:14:
d9:8e:d0:dc:57:a4:cc:59:38:2f:4a:20:7e:e8:88:
93:9d:9b:be:8f:67:bc:72:5d:0f:58:43:63:0b:b7:
2e:ad:0f:19:9e:36:73:5a:34:98:2a:78:d4:a0:38:
e7:a8:b5:b4:ec:8c:a9:32:e4:de:d8:e0:29:5a:83:
a5:ad:4a:ae:64:e2:22:e6:74:fb:ef:7f:fe:90:35:
01:6a:32:46:d1:b7:62:8c:13:51:36:bb:98:98:d8:
60:2e:fa:aa:7a:6b:95:e1:21:ec:86:ce:a6:a9:3f:
88:f5:b5:89:e0:a7:71:c0:a9:55:9e:89:09:66:f8:
d2:3b:bd:bb:1f:71:d0:d1:44:97:2f:a9:85:89:af:
a8:f2:d4:00:e7:11:aa:5b:6a:88:31:58:96:77:84:
d6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:7F:18:F3:D1:E1:59:B7:E3:AC:F6:AC:D3:57:18:B8:BF:C4:4B:75
X509v3 Authority Key Identifier:
keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.238.128.0/24
Signature Algorithm: sha256WithRSAEncryption
91:e4:c7:cb:e7:b7:54:49:ee:de:a3:4b:a9:18:80:e0:e9:6f:
29:46:26:58:3b:9c:41:71:7f:12:c4:eb:ba:ff:26:bc:e1:81:
d8:31:88:d9:d4:34:eb:ea:81:32:b3:ee:99:04:80:ec:9a:0c:
35:15:74:1e:2c:2d:d1:1c:73:e9:e9:2c:17:ca:f8:70:93:2d:
f4:7a:0c:9d:7b:a8:62:cf:32:c3:a2:e3:38:87:c4:85:0e:0a:
b5:68:d3:a1:8f:3c:b5:0b:20:93:56:8d:08:b5:22:f1:07:0a:
35:ce:68:46:dd:c8:42:32:8e:2c:46:27:3f:73:bf:94:a0:09:
45:71:c0:fe:53:ab:d3:c4:4c:6e:00:36:f6:79:62:4b:26:f8:
ce:2f:7b:fd:b8:17:43:cd:c8:5d:18:99:e5:8b:89:aa:84:62:
d8:81:2e:89:dc:e1:d2:27:1d:76:21:29:fd:72:a6:1a:21:f5:
33:a4:c5:55:94:94:04:37:e3:35:50:04:bf:48:2e:7c:14:04:
88:96:16:0a:52:89:47:4b:1b:a3:40:f8:ca:1a:db:9a:fc:a5:
5f:75:11:ae:14:35:69:97:74:c7:8e:5a:d7:c1:d2:4d:b8:83:
f2:d9:25:ef:7b:db:27:ca:90:57:d0:2f:9f:fa:1d:fe:bf:93:
87:3c:1f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:55:50 2025 by rpki-client