Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91E54810000/0/3130332e3137332e3232352e302f32342d3234203d3e20323036323634.roa
File: 3130332e3137332e3232352e302f32342d3234203d3e20323036323634.roa (raw, json)
Hash identifier: ZEE+8KVxQlZLvKugDGOI38R9pAYUq9MTH9jaK8TLrns=
Subject key identifier: C3:FB:D9:4B:33:82:D7:25:5E:25:66:99:13:84:83:38:F3:4D:BB:67
Certificate issuer: /CN=A91E54810000/serialNumber=D988B2DA7F4305F0CDB93BF88B6F5A9DF98D8940
Certificate serial: 725742C9C5F4E33FCC547F7E53C63E6DEE804886
Authority key identifier: D9:88:B2:DA:7F:43:05:F0:CD:B9:3B:F8:8B:6F:5A:9D:F9:8D:89:40
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Yiy2n9DBfDNuTv4i29anfmNiUA.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91E54810000/0/3130332e3137332e3232352e302f32342d3234203d3e20323036323634.roa
Signing time: Mon 09 Dec 2024 03:30:55 +0000
ROA not before: Mon 09 Dec 2024 03:25:55 +0000
ROA not after: Mon 08 Dec 2025 03:30:55 +0000
asID: 206264
IP address blocks: 103.173.225.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:57:42:c9:c5:f4:e3:3f:cc:54:7f:7e:53:c6:3e:6d:ee:80:48:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E54810000
Validity
Not Before: Dec 9 03:25:55 2024 GMT
Not After : Dec 8 03:30:55 2025 GMT
Subject: CN=C3FBD94B3382D7255E25669913848338F34DBB67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d1:db:9c:77:2c:ae:4d:1b:73:e2:5f:ba:32:
d0:13:9a:ad:a8:b6:74:14:6e:ff:84:11:37:c8:e1:
b3:00:ba:df:df:2e:85:a2:67:41:3c:e7:c3:db:77:
87:cf:26:25:6d:67:fb:7f:09:f8:5d:0f:0d:1a:c9:
fc:3d:95:e9:df:28:c7:ff:9f:ad:39:1a:5a:f7:98:
50:3c:69:d5:27:ac:d6:8a:ed:bb:ad:37:e9:3f:e8:
12:4c:94:61:29:ed:b2:f2:0f:15:1e:c9:91:49:bb:
74:7a:b9:77:e3:22:91:78:61:06:b7:ed:c9:53:56:
52:2f:6e:a6:f9:21:ba:ca:78:c1:2a:d5:4d:41:7b:
b5:ef:7f:aa:5a:33:cb:73:5b:6a:ac:9d:cd:97:f2:
ec:b6:26:5b:c5:4c:ea:78:f5:1d:0f:94:72:67:f3:
ef:34:5f:30:4c:83:e3:42:3e:2f:7e:c9:0c:78:7a:
54:e5:b6:ff:04:b8:0d:fb:dd:47:46:02:4f:e4:f1:
a1:52:82:bf:d3:98:31:0d:32:86:05:47:49:d8:b4:
29:c5:70:d5:b5:01:c3:6e:66:0b:eb:fd:2d:22:eb:
56:b5:5c:38:80:cb:c4:27:7c:8b:7a:5d:52:56:69:
17:a0:32:a1:59:95:8f:0f:5d:f7:00:0d:43:12:c2:
ac:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:FB:D9:4B:33:82:D7:25:5E:25:66:99:13:84:83:38:F3:4D:BB:67
X509v3 Authority Key Identifier:
keyid:D9:88:B2:DA:7F:43:05:F0:CD:B9:3B:F8:8B:6F:5A:9D:F9:8D:89:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91E54810000/0/D988B2DA7F4305F0CDB93BF88B6F5A9DF98D8940.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Yiy2n9DBfDNuTv4i29anfmNiUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91E54810000/0/3130332e3137332e3232352e302f32342d3234203d3e20323036323634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.173.225.0/24
Signature Algorithm: sha256WithRSAEncryption
99:84:6e:37:db:f3:83:03:27:d1:d8:f8:f4:9d:43:ee:35:16:
97:68:00:d4:d7:ca:b2:0b:6a:8f:72:6f:26:3b:0e:08:cd:0e:
63:ba:cb:e1:9e:37:cf:f5:6c:01:68:9c:ce:6b:60:03:1e:dc:
53:ab:ee:2b:f0:0e:5d:fe:fb:11:c1:47:04:25:cf:da:59:36:
f8:92:06:f7:8b:a2:4e:61:c3:52:2c:bb:85:aa:cf:57:83:89:
bf:c3:61:e4:c3:73:63:24:28:ba:ec:44:24:14:ca:04:3e:a4:
a7:5e:85:1d:13:1d:9f:e0:46:13:06:fa:a4:22:6a:3d:13:cb:
06:d4:ee:64:c9:9f:32:fb:26:98:2a:d1:90:4c:d2:6a:48:c8:
3d:a9:c0:44:46:7f:30:59:96:97:95:fa:62:ce:37:f9:f5:8f:
6c:62:9a:ee:33:d2:e0:ee:23:f7:25:61:e7:0d:ce:9c:74:43:
cf:31:ce:da:38:da:ae:ce:3d:ff:79:ed:4c:64:37:97:c9:f2:
ca:51:67:2f:4d:80:78:cb:7e:23:c1:61:ae:07:c7:99:44:7d:
ca:1e:49:b4:29:46:14:f3:6d:df:90:ad:a3:f8:28:67:00:e8:
08:e5:5e:61:6e:31:fa:bb:87:83:a3:b4:9d:44:0a:95:4b:2d:
60:2f:f8:e6
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIUcldCycX04z/MVH9+U8Y+be6ASIYwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRTU0ODEwMDAwMTEwLwYDVQQFEyhEOTg4QjJEQTdG
NDMwNUYwQ0RCOTNCRjg4QjZGNUE5REY5OEQ4OTQwMB4XDTI0MTIwOTAzMjU1NVoX
DTI1MTIwODAzMzA1NVowMzExMC8GA1UEAxMoQzNGQkQ5NEIzMzgyRDcyNTVFMjU2
Njk5MTM4NDgzMzhGMzREQkI2NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMfR25x3LK5NG3PiX7oy0BOarai2dBRu/4QRN8jhswC6398uhaJnQTznw9t3
h88mJW1n+38J+F0PDRrJ/D2V6d8ox/+frTkaWveYUDxp1Ses1ortu6036T/oEkyU
YSntsvIPFR7JkUm7dHq5d+MikXhhBrftyVNWUi9upvkhusp4wSrVTUF7te9/qloz
y3NbaqydzZfy7LYmW8VM6nj1HQ+Ucmfz7zRfMEyD40I+L37JDHh6VOW2/wS4Dfvd
R0YCT+TxoVKCv9OYMQ0yhgVHSdi0KcVw1bUBw25mC+v9LSLrVrVcOIDLxCd8i3pd
UlZpF6AyoVmVjw9d9wANQxLCrJMCAwEAAaOCAhcwggITMB0GA1UdDgQWBBTD+9lL
M4LXJV4lZpkThIM48027ZzAfBgNVHSMEGDAWgBTZiLLaf0MF8M25O/iLb1qd+Y2J
QDAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFFNTQ4MTAwMDAvMC9EOTg4QjJE
QTdGNDMwNUYwQ0RCOTNCRjg4QjZGNUE5REY5OEQ4OTQwLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yWWl5Mm45REJm
RE51VHY0aTI5YW5mbU5pVUEuY2VyMIGRBggrBgEFBQcBCwSBhDCBgTB/BggrBgEF
BQcwC4ZzcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFF
NTQ4MTAwMDAvMC8zMTMwMzMyZTMxMzczMzJlMzIzMjM1MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzIzMDM2MzIzNjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ63hMA0GCSqGSIb3DQEB
CwUAA4IBAQCZhG432/ODAyfR2Pj0nUPuNRaXaADU18qyC2qPcm8mOw4IzQ5jusvh
njfP9WwBaJzOa2ADHtxTq+4r8A5d/vsRwUcEJc/aWTb4kgb3i6JOYcNSLLuFqs9X
g4m/w2Hkw3NjJCi67EQkFMoEPqSnXoUdEx2f4EYTBvqkImo9E8sG1O5kyZ8y+yaY
KtGQTNJqSMg9qcBERn8wWZaXlfpizjf59Y9sYpruM9Lg7iP3JWHnDc6cdEPPMc7a
ONquzj3/ee1MZDeXyfLKUWcvTYB4y34jwWGuB8eZRH3KHkm0KUYU823fkK2j+Chn
AOgI5V5hbjH6u4eDo7SdRAqVSy1gL/jm
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:10:06 2025 by rpki-client