Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A916C75D0000/0/3130332e3137322e34302e302f32332d3234203d3e203338313336.roa
File: 3130332e3137322e34302e302f32332d3234203d3e203338313336.roa (raw, json)
Hash identifier: EYLRdy4B+uy4rOgrkYU9IwpcEC0Js43S8x2/KlOQNec=
Subject key identifier: D5:81:25:58:CA:45:57:48:50:81:1E:93:2D:2C:7F:66:33:E5:C0:4A
Certificate issuer: /CN=A916C75D0000/serialNumber=492C94B5D5EC5F8E371BA1D7C081A711B8E26A6D
Certificate serial: 25EFCB3AA898D8CD74045ABD2A28943B2138A309
Authority key identifier: 49:2C:94:B5:D5:EC:5F:8E:37:1B:A1:D7:C0:81:A7:11:B8:E2:6A:6D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSyUtdXsX443G6HXwIGnEbjiam0.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A916C75D0000/0/3130332e3137322e34302e302f32332d3234203d3e203338313336.roa
Signing time: Wed 19 Jun 2024 12:59:28 +0000
ROA not before: Wed 19 Jun 2024 12:54:28 +0000
ROA not after: Wed 18 Jun 2025 12:59:28 +0000
asID: 38136
IP address blocks: 103.172.40.0/23 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:ef:cb:3a:a8:98:d8:cd:74:04:5a:bd:2a:28:94:3b:21:38:a3:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C75D0000/serialNumber=492C94B5D5EC5F8E371BA1D7C081A711B8E26A6D
Validity
Not Before: Jun 19 12:54:28 2024 GMT
Not After : Jun 18 12:59:28 2025 GMT
Subject: CN=D5812558CA45574850811E932D2C7F6633E5C04A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:10:9a:17:05:c2:5d:5e:ce:01:4c:92:64:13:
c8:29:e6:7e:4c:9a:f1:45:91:d1:ca:f9:c3:5a:dc:
a6:00:59:cd:02:2f:d1:66:19:21:45:bc:5f:e0:ce:
2a:53:dc:bc:63:bf:61:9d:58:79:e3:76:d4:9f:b1:
20:9c:9e:da:17:c6:87:10:c4:33:13:86:41:c2:43:
43:c3:83:3f:86:a4:12:cf:1b:82:5b:6c:f7:9b:4d:
75:5c:d1:f3:d3:65:d4:89:ed:76:0c:fa:f6:4c:be:
13:fc:11:1f:cb:58:d5:8c:ce:98:94:dc:c3:4a:62:
2e:99:79:90:72:f5:32:5a:9d:2e:86:7d:f2:d9:b1:
65:df:3c:e7:17:71:28:ca:e8:95:a6:0a:d9:d3:f3:
57:ec:c3:b3:d6:fb:09:83:74:d1:be:46:fc:ff:ca:
bb:66:a6:c8:32:bb:10:a2:df:cc:6d:a6:e2:3f:78:
58:45:3b:27:0a:dd:0e:2b:bd:6d:d3:cf:76:b5:73:
71:2d:fd:62:91:0d:4d:66:01:7b:21:49:70:1a:34:
43:ed:25:bf:d5:0d:b8:ab:ce:90:7f:d1:a4:a1:6d:
31:04:c1:5e:75:f0:ce:a1:f7:cb:69:cb:6d:bd:80:
88:cf:94:42:ad:1b:43:11:d8:15:74:ef:a4:16:d4:
14:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:81:25:58:CA:45:57:48:50:81:1E:93:2D:2C:7F:66:33:E5:C0:4A
X509v3 Authority Key Identifier:
keyid:49:2C:94:B5:D5:EC:5F:8E:37:1B:A1:D7:C0:81:A7:11:B8:E2:6A:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A916C75D0000/0/492C94B5D5EC5F8E371BA1D7C081A711B8E26A6D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSyUtdXsX443G6HXwIGnEbjiam0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A916C75D0000/0/3130332e3137322e34302e302f32332d3234203d3e203338313336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.172.40.0/23
Signature Algorithm: sha256WithRSAEncryption
d5:88:f5:41:2f:1c:17:5e:2a:d3:19:61:d6:54:9a:66:95:83:
f0:09:bf:29:d8:95:8b:68:7c:7d:ad:da:ee:6c:c2:7e:0d:26:
7b:8c:4e:c7:ab:b3:ed:16:42:27:20:8d:38:4d:7a:93:04:cd:
16:ba:c4:04:14:10:d0:2b:5f:de:dc:39:be:07:14:ae:27:a8:
fa:28:2c:3a:78:85:09:3a:e2:93:51:a6:bf:03:40:d3:0e:40:
55:1c:25:d5:b5:62:c5:94:d2:20:d3:e2:be:a4:45:d1:15:f7:
e2:b4:3c:a0:0c:fa:c0:f6:cf:e2:d6:83:2c:1f:26:ec:f2:91:
82:65:2b:42:07:7f:e0:9d:02:c3:de:f3:04:2c:2f:24:46:fd:
24:55:e9:78:6c:24:f6:25:1c:9a:35:c8:da:fa:97:7a:85:3d:
41:be:47:be:ce:a0:fe:1b:d3:eb:f5:2d:42:5f:c6:f1:1b:63:
94:1c:de:d0:0a:76:f1:bd:30:a6:0b:e0:97:71:de:67:63:95:
7f:c8:1b:8c:46:ab:ff:6b:9f:8c:69:58:ba:3e:61:da:9a:3c:
66:7b:92:98:84:0b:a5:c6:5c:f5:1d:75:f4:cc:a8:4a:48:a0:
81:ac:b2:98:f5:a5:87:94:3e:4c:f7:c1:d1:7c:26:a2:52:26:
a6:3b:72:98
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgIUJe/LOqiY2M10BFq9KiiUOyE4owkwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNkM3NUQwMDAwMTEwLwYDVQQFEyg0OTJDOTRCNUQ1
RUM1RjhFMzcxQkExRDdDMDgxQTcxMUI4RTI2QTZEMB4XDTI0MDYxOTEyNTQyOFoX
DTI1MDYxODEyNTkyOFowMzExMC8GA1UEAxMoRDU4MTI1NThDQTQ1NTc0ODUwODEx
RTkzMkQyQzdGNjYzM0U1QzA0QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOYQmhcFwl1ezgFMkmQTyCnmfkya8UWR0cr5w1rcpgBZzQIv0WYZIUW8X+DO
KlPcvGO/YZ1YeeN21J+xIJye2hfGhxDEMxOGQcJDQ8ODP4akEs8bglts95tNdVzR
89Nl1Intdgz69ky+E/wRH8tY1YzOmJTcw0piLpl5kHL1MlqdLoZ98tmxZd885xdx
KMrolaYK2dPzV+zDs9b7CYN00b5G/P/Ku2amyDK7EKLfzG2m4j94WEU7JwrdDiu9
bdPPdrVzcS39YpENTWYBeyFJcBo0Q+0lv9UNuKvOkH/RpKFtMQTBXnXwzqH3y2nL
bb2AiM+UQq0bQxHYFXTvpBbUFBcCAwEAAaOCAhEwggINMB0GA1UdDgQWBBTVgSVY
ykVXSFCBHpMtLH9mM+XASjAfBgNVHSMEGDAWgBRJLJS11exfjjcbodfAgacRuOJq
bTAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE2Qzc1RDAwMDAvMC80OTJDOTRC
NUQ1RUM1RjhFMzcxQkExRDdDMDgxQTcxMUI4RTI2QTZELmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9TU3lVdGRYc1g0
NDNHNkhYd0lHbkViamlhbTAuY2VyMIGLBggrBgEFBQcBCwR/MH0wewYIKwYBBQUH
MAuGb3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxNkM3
NUQwMDAwLzAvMzEzMDMzMmUzMTM3MzIyZTM0MzAyZTMwMmYzMjMzMmQzMjM0MjAz
ZDNlMjAzMzM4MzEzMzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ6woMA0GCSqGSIb3DQEBCwUAA4IB
AQDViPVBLxwXXirTGWHWVJpmlYPwCb8p2JWLaHx9rdrubMJ+DSZ7jE7Hq7PtFkIn
II04TXqTBM0WusQEFBDQK1/e3Dm+BxSuJ6j6KCw6eIUJOuKTUaa/A0DTDkBVHCXV
tWLFlNIg0+K+pEXRFffitDygDPrA9s/i1oMsHybs8pGCZStCB3/gnQLD3vMELC8k
Rv0kVel4bCT2JRyaNcja+pd6hT1Bvke+zqD+G9Pr9S1CX8bxG2OUHN7QCnbxvTCm
C+CXcd5nY5V/yBuMRqv/a5+MaVi6PmHamjxme5KYhAulxlz1HXX0zKhKSKCBrLKY
9aWHlD5M98HRfCaiUiamO3KY
-----END CERTIFICATE-----
Generated at Thu Aug 15 08:47:21 2024 by rpki-client on console-ams.rpki-client.org