Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A916C75D0000/1/3130332e3234382e3232382e302f32332d3234203d3e20393833.roa
File: 3130332e3234382e3232382e302f32332d3234203d3e20393833.roa (raw, json)
Hash identifier: lGWnwbRTlkvAPUMHxdc2a9leF4q/I4r3P27i+wdtTyA=
Subject key identifier: ED:E4:99:E2:59:DB:31:5B:3A:C9:21:B7:82:47:CA:AB:7D:26:83:96
Certificate issuer: /CN=A91130000000/serialNumber=E3B1D97CE75EC9867761EB52E2B0EB09AA96B906
Certificate serial: 7D59EE09138F0BB87E8ABA57D345C32346488B48
Authority key identifier: E3:B1:D9:7C:E7:5E:C9:86:77:61:EB:52:E2:B0:EB:09:AA:96:B9:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47HZfOdeyYZ3YetS4rDrCaqWuQY.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A916C75D0000/1/3130332e3234382e3232382e302f32332d3234203d3e20393833.roa
Signing time: Wed 26 Jun 2024 02:48:43 +0000
ROA not before: Wed 26 Jun 2024 02:43:43 +0000
ROA not after: Wed 25 Jun 2025 02:48:43 +0000
asID: 983
IP address blocks: 103.248.228.0/23 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:59:ee:09:13:8f:0b:b8:7e:8a:ba:57:d3:45:c3:23:46:48:8b:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91130000000/serialNumber=E3B1D97CE75EC9867761EB52E2B0EB09AA96B906
Validity
Not Before: Jun 26 02:43:43 2024 GMT
Not After : Jun 25 02:48:43 2025 GMT
Subject: CN=EDE499E259DB315B3AC921B78247CAAB7D268396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:c8:48:85:5b:f7:7d:22:f7:5d:c7:3a:a2:75:
bf:a6:eb:85:28:02:2f:dc:89:f7:1f:32:cd:7c:d3:
46:ea:48:76:e5:ed:ff:f8:36:c0:da:a2:87:7b:5c:
a4:f3:ab:dd:11:2b:76:be:8f:b8:9e:53:1a:37:86:
38:ab:e1:9a:b1:88:5e:0a:3e:ca:d7:df:6d:7a:f1:
2d:0d:39:9c:7a:df:34:3c:1f:af:88:f1:a7:d1:6a:
ba:4f:f9:02:e8:04:f4:f0:24:60:24:66:65:2e:41:
e5:35:62:24:53:ae:9a:e6:7e:fc:7c:4d:2d:4c:f5:
cc:9e:74:7e:65:e8:08:d2:7a:8a:44:d4:6a:0c:b6:
f1:f4:6a:4f:41:d6:b5:9c:51:91:83:61:e5:c1:68:
10:01:c7:86:e5:de:fe:22:fa:1c:de:ac:2c:cb:2e:
93:e9:a1:e6:1c:59:c2:19:19:a1:38:f2:6b:44:9e:
45:bc:98:ef:88:10:29:c6:69:2a:2f:ae:ef:74:34:
39:a7:b9:1c:93:8b:2d:bb:d3:01:83:ff:78:5b:22:
c0:d9:3d:7f:ad:b4:34:ec:9f:1e:68:0e:bd:72:d5:
0a:36:54:6a:93:c3:ed:ff:40:83:78:4f:25:6a:0b:
27:c0:ee:a5:88:9b:a0:b7:d2:d2:6f:57:7e:78:68:
c1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:E4:99:E2:59:DB:31:5B:3A:C9:21:B7:82:47:CA:AB:7D:26:83:96
X509v3 Authority Key Identifier:
keyid:E3:B1:D9:7C:E7:5E:C9:86:77:61:EB:52:E2:B0:EB:09:AA:96:B9:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A916C75D0000/1/E3B1D97CE75EC9867761EB52E2B0EB09AA96B906.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47HZfOdeyYZ3YetS4rDrCaqWuQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A916C75D0000/1/3130332e3234382e3232382e302f32332d3234203d3e20393833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.248.228.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:c0:f1:a7:d3:b2:55:cd:9f:ff:1b:19:9c:67:97:f6:13:bd:
6e:b7:81:f9:f7:a0:a4:0e:4a:de:85:b6:18:13:d8:4b:f4:1d:
e8:f2:3e:d9:0d:bb:64:34:57:df:95:80:00:eb:f6:47:84:34:
32:d5:e7:74:ce:e4:ab:e9:eb:22:37:4c:44:80:9b:b1:11:ce:
3d:d3:b0:fb:6b:55:b6:27:36:5b:17:9c:0b:c4:3b:e1:81:33:
fd:22:e8:db:90:f6:c1:4a:19:1d:59:a3:0c:48:19:93:9f:f2:
6f:48:da:3f:04:af:fd:40:5f:4f:ea:3c:4c:fa:cf:f3:2b:1d:
8b:cd:df:17:dd:b5:f3:33:06:bb:3b:b5:a6:c6:b2:02:77:85:
a0:1c:8c:e0:bc:3a:cf:81:02:ef:8b:f7:91:cf:ef:eb:b2:a3:
14:7b:73:c5:3f:21:47:26:da:99:ac:9e:e0:d5:f5:9d:f5:aa:
42:45:76:ab:5c:60:11:ca:9f:6e:1f:e8:6a:08:84:60:4c:d0:
30:cb:54:59:27:83:f2:73:c5:6c:18:89:4f:41:94:69:a2:65:
ee:05:b9:b6:eb:60:64:98:c7:2d:a6:77:1f:30:53:b6:f4:59:
d1:95:ce:11:56:af:8a:76:fb:e3:5c:31:04:d1:67:69:f3:82:
e2:72:81:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 15 00:04:00 2024 by rpki-client on console-fra.rpki-client.org