Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3133302e302f32342d3234203d3e203630353034.roa
File: 3130332e3233382e3133302e302f32342d3234203d3e203630353034.roa (raw, json)
Hash identifier: Jl36BUfQB/vBkBz6VIgcdeuQPRY0ZX4t0KG3+aZs/+s=
Subject key identifier: 0C:3B:22:46:8B:4F:5D:CF:FA:AB:4F:29:04:1A:52:F1:6A:A0:1A:FF
Certificate issuer: /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Certificate serial: 15CAFC00FC3AC48E41D7D5430485538B0604A948
Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3133302e302f32342d3234203d3e203630353034.roa
Signing time: Thu 12 Dec 2024 07:28:36 +0000
ROA not before: Thu 12 Dec 2024 07:23:36 +0000
ROA not after: Thu 11 Dec 2025 07:28:36 +0000
asID: 60504
IP address blocks: 103.238.130.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:ca:fc:00:fc:3a:c4:8e:41:d7:d5:43:04:85:53:8b:06:04:a9:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A61310000
Validity
Not Before: Dec 12 07:23:36 2024 GMT
Not After : Dec 11 07:28:36 2025 GMT
Subject: CN=0C3B22468B4F5DCFFAAB4F29041A52F16AA01AFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5c:ac:fe:45:84:82:fc:7f:9d:15:ed:a5:da:
be:5b:63:3e:a7:f7:02:db:86:83:47:67:f4:58:85:
6d:4c:8a:d6:21:69:5e:c9:5a:a1:a8:9b:04:10:bb:
c2:ae:83:cd:ee:c8:b9:6e:44:94:34:a8:e4:3a:cb:
b7:7e:57:e1:27:b9:f8:81:cf:c0:3a:6f:da:dc:dd:
6c:8b:e5:0a:c4:a6:3b:76:28:64:0d:44:74:b4:66:
16:59:4b:65:16:15:ff:70:46:87:7c:d7:98:63:cd:
5f:f8:29:07:e4:5e:dd:4d:0f:4d:9e:ea:ed:17:09:
53:c7:df:66:05:77:48:c6:bf:99:45:74:40:e7:b8:
3c:8c:db:25:3b:5e:22:88:98:a8:b0:b5:5d:ee:a2:
58:95:cd:c6:a2:1a:2f:2e:61:33:6a:51:d9:f9:eb:
16:3c:15:b9:b5:a8:78:48:4b:4a:c3:26:b4:c8:eb:
87:50:0c:8d:20:d9:41:cc:51:09:64:e4:8d:0f:9f:
00:58:18:c1:ea:90:85:30:a7:ec:97:2e:0c:32:a6:
6c:11:64:d1:1f:a9:36:a9:2e:26:0e:04:82:fc:f1:
cb:8f:d2:c3:1e:86:a5:44:a5:10:cc:dc:0e:eb:a2:
91:0e:53:27:93:86:fe:00:7b:6e:86:9a:08:eb:d9:
e5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:3B:22:46:8B:4F:5D:CF:FA:AB:4F:29:04:1A:52:F1:6A:A0:1A:FF
X509v3 Authority Key Identifier:
keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3133302e302f32342d3234203d3e203630353034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.238.130.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:40:68:51:06:27:19:ed:62:d7:26:13:76:a9:dd:e7:73:da:
3d:41:b9:cc:4e:1e:b6:77:60:a8:e8:53:62:ac:23:80:7f:da:
d9:9d:7f:5e:52:0a:f6:42:e6:17:96:2b:99:3d:c7:3c:96:75:
f0:04:52:12:4f:87:4a:23:b4:34:07:88:ad:de:32:f7:0f:bc:
a9:d4:d1:0e:51:1a:5c:05:c8:eb:bb:9d:90:b6:cf:bd:dd:fb:
c1:ee:5e:a4:5c:fc:91:f4:10:09:06:58:8f:f9:ef:14:8b:5d:
1c:05:b3:fa:91:5f:67:66:51:c6:aa:33:cf:fc:54:ad:bc:10:
fa:ef:71:ee:a3:02:95:31:eb:c7:35:92:20:b9:66:79:29:1b:
89:5c:f6:d1:22:17:aa:00:9d:83:64:0f:ce:35:41:36:fe:6b:
48:03:a2:a4:10:cb:7e:1c:b0:57:63:94:ec:6f:8c:cf:ce:fa:
a5:aa:0c:4c:85:d5:9f:84:f9:8f:12:3f:11:72:04:c4:64:c5:
83:aa:71:fc:58:38:ca:df:76:a4:bb:8f:6f:df:9c:86:14:fd:
5c:51:31:d3:37:fe:15:7b:d9:9b:9d:8d:cc:de:1c:ed:b0:a4:
0a:b6:28:7c:97:95:f5:a6:13:22:89:6c:a8:0b:56:35:fc:86:
30:37:65:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:58:44 2025 by rpki-client