Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A916C75D0000/0/3130332e3137322e34302e302f32332d3234203d3e20393833.roa
File: 3130332e3137322e34302e302f32332d3234203d3e20393833.roa (raw, json)
Hash identifier: sYfFdeyq6Q023BF0iLdR8/gnNA5qRO5GMGwLcBOgsic=
Subject key identifier: 1B:FA:32:0C:70:6F:30:24:FD:0E:72:DC:C0:2C:02:FE:BB:8F:5C:11
Certificate issuer: /CN=A916C75D0000/serialNumber=492C94B5D5EC5F8E371BA1D7C081A711B8E26A6D
Certificate serial: 0F5528E7F45DB8A0E8FC362F07437F39929DCD35
Authority key identifier: 49:2C:94:B5:D5:EC:5F:8E:37:1B:A1:D7:C0:81:A7:11:B8:E2:6A:6D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSyUtdXsX443G6HXwIGnEbjiam0.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A916C75D0000/0/3130332e3137322e34302e302f32332d3234203d3e20393833.roa
Signing time: Wed 19 Jun 2024 12:59:12 +0000
ROA not before: Wed 19 Jun 2024 12:54:12 +0000
ROA not after: Wed 18 Jun 2025 12:59:12 +0000
asID: 983
IP address blocks: 103.172.40.0/23 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:55:28:e7:f4:5d:b8:a0:e8:fc:36:2f:07:43:7f:39:92:9d:cd:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C75D0000/serialNumber=492C94B5D5EC5F8E371BA1D7C081A711B8E26A6D
Validity
Not Before: Jun 19 12:54:12 2024 GMT
Not After : Jun 18 12:59:12 2025 GMT
Subject: CN=1BFA320C706F3024FD0E72DCC02C02FEBB8F5C11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2f:b4:63:fe:f6:1d:28:78:f3:28:f3:79:92:
86:92:dd:55:a6:31:df:02:15:b7:e1:18:92:cc:39:
cb:09:62:d2:5a:ec:91:84:1c:df:a5:d2:58:b8:f6:
15:8f:aa:75:38:0c:b4:01:2b:be:c3:24:cb:74:07:
29:d2:00:7f:f3:43:27:79:b3:75:8b:61:10:de:8a:
c4:ae:67:9d:cd:a6:3f:61:62:20:b2:8c:e2:be:31:
41:5a:c1:6c:a6:bb:0b:87:5e:53:da:76:b1:1c:fc:
d8:dc:68:f1:b2:d0:53:49:7c:d7:4e:bb:73:d4:ec:
24:74:b7:f8:51:e7:7b:d5:15:ba:ae:64:9f:07:f6:
cb:40:57:c0:d5:f4:21:75:4d:aa:1d:c8:40:af:b3:
1a:f9:f2:9a:82:13:eb:57:f3:ac:0e:5a:e0:f0:dd:
48:16:3f:2c:af:9b:64:0a:f5:28:6f:b9:87:7e:df:
f0:20:fb:2d:63:ea:85:d3:84:c5:75:ec:a2:60:a0:
f5:78:b0:3e:cb:ad:10:01:51:70:a5:50:35:44:76:
71:bf:64:42:5b:c7:6c:b5:a2:e3:d8:7a:a7:6e:7b:
b5:21:4a:1c:e4:04:9c:3f:ac:af:7b:a2:21:58:73:
26:42:c9:f0:6d:25:ce:37:df:f7:78:f4:97:e8:b5:
30:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:FA:32:0C:70:6F:30:24:FD:0E:72:DC:C0:2C:02:FE:BB:8F:5C:11
X509v3 Authority Key Identifier:
keyid:49:2C:94:B5:D5:EC:5F:8E:37:1B:A1:D7:C0:81:A7:11:B8:E2:6A:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A916C75D0000/0/492C94B5D5EC5F8E371BA1D7C081A711B8E26A6D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSyUtdXsX443G6HXwIGnEbjiam0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A916C75D0000/0/3130332e3137322e34302e302f32332d3234203d3e20393833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.172.40.0/23
Signature Algorithm: sha256WithRSAEncryption
08:04:97:6d:2f:61:87:a6:b5:81:89:08:3d:d1:db:f1:fb:75:
2f:a0:91:d9:58:c9:46:76:84:00:44:d0:55:a4:53:96:3d:bc:
34:43:08:ef:99:db:5f:ae:d2:25:f2:9f:76:33:a5:87:7a:e1:
6e:2c:a7:63:8f:4d:a7:b5:83:f1:4b:3b:97:b0:a0:04:a0:25:
e4:6b:21:a4:a1:d9:99:3f:50:da:11:fb:d6:cb:b6:d4:d8:2e:
63:78:37:72:7f:af:b6:6b:ea:fa:b5:d3:1e:eb:50:08:ea:e8:
40:72:a5:b6:24:bc:60:25:8a:9a:bf:e0:08:e6:cd:f5:8e:25:
51:26:db:8f:b7:40:07:a0:f6:af:0e:8a:41:73:aa:ed:20:f4:
8a:b6:10:1c:dc:aa:ff:15:19:a1:ed:a8:b2:31:3d:e0:07:27:
c5:87:aa:75:81:20:29:36:a6:cb:14:2d:c6:6d:fe:3d:de:77:
41:1c:0b:10:dc:4d:e2:66:cb:6e:8b:25:3f:95:cb:2a:55:e7:
05:51:3e:b1:ed:6a:8d:8e:c8:c4:5e:54:28:fb:88:16:d8:87:
54:48:84:b8:47:f7:3b:e5:5a:0a:86:f7:68:18:f9:ad:5d:65:
24:76:0c:ad:6f:e9:6e:37:87:2c:57:92:e9:6a:b0:17:b2:e9:
cb:ed:53:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 15 08:47:21 2024 by rpki-client on console-ams.rpki-client.org