Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A916C75D0000/1/3130332e3234382e3232382e302f32332d3234203d3e203338313336.roa
File: 3130332e3234382e3232382e302f32332d3234203d3e203338313336.roa (raw, json)
Hash identifier: nxSYw+edE13o6RbaURQquf37VCgUf+t39zBRYe0iz2U=
Subject key identifier: 9E:B0:03:62:3D:02:F9:37:B2:04:A6:E6:80:76:F0:18:9C:59:65:3F
Certificate issuer: /CN=A91130000000/serialNumber=E3B1D97CE75EC9867761EB52E2B0EB09AA96B906
Certificate serial: 3FB965CF44F3A49996560355F1672456B85FDE0A
Authority key identifier: E3:B1:D9:7C:E7:5E:C9:86:77:61:EB:52:E2:B0:EB:09:AA:96:B9:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47HZfOdeyYZ3YetS4rDrCaqWuQY.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A916C75D0000/1/3130332e3234382e3232382e302f32332d3234203d3e203338313336.roa
Signing time: Wed 26 Jun 2024 02:48:53 +0000
ROA not before: Wed 26 Jun 2024 02:43:53 +0000
ROA not after: Wed 25 Jun 2025 02:48:53 +0000
asID: 38136
IP address blocks: 103.248.228.0/23 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:b9:65:cf:44:f3:a4:99:96:56:03:55:f1:67:24:56:b8:5f:de:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91130000000/serialNumber=E3B1D97CE75EC9867761EB52E2B0EB09AA96B906
Validity
Not Before: Jun 26 02:43:53 2024 GMT
Not After : Jun 25 02:48:53 2025 GMT
Subject: CN=9EB003623D02F937B204A6E68076F0189C59653F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:61:43:28:cf:fa:c4:17:24:d3:ae:f3:f7:1d:
f5:76:74:ea:6f:75:cd:01:08:0a:f8:29:da:27:42:
d9:8d:01:3a:8d:f4:02:3d:c0:0a:b7:b7:a9:23:b3:
ec:6a:70:62:90:e1:fd:ed:8d:4b:c8:b8:a7:be:90:
2c:b8:6e:89:56:a1:cb:73:1e:e4:e2:1e:6f:0c:c3:
e9:4b:60:e9:b4:0e:75:94:79:f3:02:b7:c6:83:b0:
f3:6a:93:b4:aa:38:55:d8:13:8f:2f:45:d7:9f:33:
86:5a:62:51:3a:d8:8e:67:b7:53:2e:7c:09:22:66:
b6:88:6f:a3:a1:83:5c:b0:82:1b:32:20:e4:a9:6a:
8c:1c:e7:97:6b:a7:e6:36:0c:38:b8:06:cd:0f:0c:
3c:bc:1c:9f:d7:d0:10:a2:c5:0e:01:4f:55:a2:db:
35:3c:70:21:7f:74:6c:39:f2:ab:47:35:aa:cd:37:
11:d3:82:69:2a:69:6a:ad:cb:d9:75:07:eb:d9:ac:
4b:a7:6e:dd:b0:1c:2f:b5:23:75:77:12:30:6c:0a:
a6:1f:62:0e:01:96:b6:e7:5a:d9:a1:38:6a:9e:67:
87:3e:8b:18:7b:18:0d:2c:a9:69:ee:52:3b:35:b8:
f9:5b:56:a9:37:88:4c:f8:68:27:cf:be:33:9c:0d:
75:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:B0:03:62:3D:02:F9:37:B2:04:A6:E6:80:76:F0:18:9C:59:65:3F
X509v3 Authority Key Identifier:
keyid:E3:B1:D9:7C:E7:5E:C9:86:77:61:EB:52:E2:B0:EB:09:AA:96:B9:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A916C75D0000/1/E3B1D97CE75EC9867761EB52E2B0EB09AA96B906.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47HZfOdeyYZ3YetS4rDrCaqWuQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A916C75D0000/1/3130332e3234382e3232382e302f32332d3234203d3e203338313336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.248.228.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:21:0e:f1:55:c9:41:bf:d5:f9:69:6a:c5:29:a3:ce:75:94:
69:aa:6c:cb:30:1a:fb:8c:f7:63:d3:3b:9d:57:27:87:18:a3:
1c:ba:80:40:4e:54:94:82:a5:9d:31:40:fb:7a:88:81:f3:e3:
70:fb:16:b9:7c:53:76:08:1f:3c:c2:c3:af:ee:40:1c:65:4f:
50:07:d1:d9:1f:96:e8:42:09:7b:af:e8:95:ec:b4:5b:83:6b:
a9:90:22:cb:69:f3:20:9c:e2:3a:3f:39:b9:52:e6:9e:b5:88:
64:77:94:59:02:9f:0f:5f:da:92:45:3b:a6:74:ef:d4:0b:3b:
7e:85:b9:47:b5:29:4c:cc:ed:bf:64:0c:32:20:0a:1c:9d:29:
40:4a:4f:70:3e:33:56:f8:9e:db:0a:7f:69:23:68:ed:a0:89:
ab:9a:a7:44:85:20:f7:71:54:ea:4c:24:fc:0f:8d:17:95:e0:
7f:dd:5c:ac:30:2c:c9:bd:b2:be:66:81:70:34:30:c3:70:70:
06:1d:38:9d:49:f1:7d:fd:b7:18:81:ef:c4:1e:9b:96:49:3e:
41:fb:db:b8:9b:c3:f3:4b:58:00:bb:ae:c2:27:0b:d7:1c:0d:
9b:4c:71:e9:74:bc:ee:6a:57:fe:b1:2e:0e:75:e3:ed:f7:2e:
ce:90:b5:35
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgIUP7llz0TzpJmWVgNV8WckVrhf3gowDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMTMwMDAwMDAwMTEwLwYDVQQFEyhFM0IxRDk3Q0U3
NUVDOTg2Nzc2MUVCNTJFMkIwRUIwOUFBOTZCOTA2MB4XDTI0MDYyNjAyNDM1M1oX
DTI1MDYyNTAyNDg1M1owMzExMC8GA1UEAxMoOUVCMDAzNjIzRDAyRjkzN0IyMDRB
NkU2ODA3NkYwMTg5QzU5NjUzRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJphQyjP+sQXJNOu8/cd9XZ06m91zQEICvgp2idC2Y0BOo30Aj3ACre3qSOz
7GpwYpDh/e2NS8i4p76QLLhuiVahy3Me5OIebwzD6Utg6bQOdZR58wK3xoOw82qT
tKo4VdgTjy9F158zhlpiUTrYjme3Uy58CSJmtohvo6GDXLCCGzIg5KlqjBznl2un
5jYMOLgGzQ8MPLwcn9fQEKLFDgFPVaLbNTxwIX90bDnyq0c1qs03EdOCaSppaq3L
2XUH69msS6du3bAcL7UjdXcSMGwKph9iDgGWtuda2aE4ap5nhz6LGHsYDSypae5S
OzW4+VtWqTeITPhoJ8++M5wNdTkCAwEAAaOCAhQwggIQMB0GA1UdDgQWBBSesANi
PQL5N7IEpuaAdvAYnFllPzAfBgNVHSMEGDAWgBTjsdl8517Jhndh61LisOsJqpa5
BjAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE2Qzc1RDAwMDAvMS9FM0IxRDk3
Q0U3NUVDOTg2Nzc2MUVCNTJFMkIwRUIwOUFBOTZCOTA2LmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi80N0haZk9kZXlZ
WjNZZXRTNHJEckNhcVd1UVkuY2VyMIGOBggrBgEFBQcBCwSBgTB/MH0GCCsGAQUF
BzALhnFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0b3J5L0E5MTZD
NzVEMDAwMC8xLzMxMzAzMzJlMzIzNDM4MmUzMjMyMzgyZTMwMmYzMjMzMmQzMjM0
MjAzZDNlMjAzMzM4MzEzMzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ/jkMA0GCSqGSIb3DQEBCwUA
A4IBAQAvIQ7xVclBv9X5aWrFKaPOdZRpqmzLMBr7jPdj0zudVyeHGKMcuoBATlSU
gqWdMUD7eoiB8+Nw+xa5fFN2CB88wsOv7kAcZU9QB9HZH5boQgl7r+iV7LRbg2up
kCLLafMgnOI6Pzm5UuaetYhkd5RZAp8PX9qSRTumdO/UCzt+hblHtSlMzO2/ZAwy
IAocnSlASk9wPjNW+J7bCn9pI2jtoImrmqdEhSD3cVTqTCT8D40XleB/3VysMCzJ
vbK+ZoFwNDDDcHAGHTidSfF9/bcYge/EHpuWST5B+9u4m8PzS1gAu67CJwvXHA2b
THHpdLzualf+sS4OdePt9y7OkLU1
-----END CERTIFICATE-----
Generated at Thu Aug 15 00:24:18 2024 by rpki-client on console-ams.rpki-client.org