Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/3/3230332e342e3137312e302f32342d3234203d3e2039343439.roa
File: 3230332e342e3137312e302f32342d3234203d3e2039343439.roa (raw, json)
Hash identifier: XsHr5rUoO+7BpWKTFwiViHnrB2MAR4USWjHWRHVkcBg=
Subject key identifier: 5B:0F:93:0B:C8:C2:F0:85:41:9C:D0:9E:39:53:D1:02:B8:5A:AF:CE
Certificate issuer: /CN=A911AC370000/serialNumber=B18F989967D30F2509E3D29707C5F85B5F6BDB6F
Certificate serial: 286AE4F351B7CF72AD58461E3B03D91D56720421
Authority key identifier: B1:8F:98:99:67:D3:0F:25:09:E3:D2:97:07:C5:F8:5B:5F:6B:DB:6F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/3/3230332e342e3137312e302f32342d3234203d3e2039343439.roa
Signing time: Sun 03 Nov 2024 05:08:55 +0000
ROA not before: Sun 03 Nov 2024 05:03:55 +0000
ROA not after: Sun 02 Nov 2025 05:08:55 +0000
asID: 9449
IP address blocks: 203.4.171.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:6a:e4:f3:51:b7:cf:72:ad:58:46:1e:3b:03:d9:1d:56:72:04:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911AC370000/serialNumber=B18F989967D30F2509E3D29707C5F85B5F6BDB6F
Validity
Not Before: Nov 3 05:03:55 2024 GMT
Not After : Nov 2 05:08:55 2025 GMT
Subject: CN=5B0F930BC8C2F085419CD09E3953D102B85AAFCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b5:c4:86:6c:36:a6:f7:63:e9:9f:08:c1:9e:
7e:2c:76:5f:da:ae:1c:03:35:38:de:dd:f0:57:72:
37:48:61:89:b6:f9:20:4d:49:c2:f1:17:a3:65:35:
f5:67:01:cc:fc:ad:37:13:59:8e:57:68:c9:02:bb:
64:0f:6c:b7:4f:a9:07:2a:93:a0:b9:a6:28:d1:01:
fe:a9:47:ae:3f:2d:ef:7f:9a:8b:85:f3:15:d9:db:
50:ac:f3:ab:63:19:74:a1:f0:66:3a:fc:d2:ac:0d:
ca:d1:ce:8a:37:10:2b:e6:5d:1d:04:b1:46:af:ac:
83:7c:71:c8:d2:a6:cb:40:14:43:ce:b9:7a:bb:6c:
84:d8:83:27:83:13:cc:5f:8a:14:71:de:19:7a:bd:
c7:ec:5a:a7:14:04:37:6c:40:3a:49:92:82:7c:94:
9b:89:e0:53:7b:f6:e1:05:e6:9a:a4:3b:a2:43:f9:
f4:66:ed:5c:c6:7b:35:78:5f:cf:32:e2:6e:9a:75:
2d:ab:91:45:2a:9b:87:16:18:83:9a:40:8e:0f:91:
f2:1a:0d:08:1f:63:49:87:79:3a:bc:55:f8:60:b1:
eb:37:be:64:e2:4d:b9:63:37:e9:75:06:fa:58:f9:
5a:35:b7:24:c1:d4:a2:b0:fb:84:a1:6c:f4:82:76:
c2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:0F:93:0B:C8:C2:F0:85:41:9C:D0:9E:39:53:D1:02:B8:5A:AF:CE
X509v3 Authority Key Identifier:
keyid:B1:8F:98:99:67:D3:0F:25:09:E3:D2:97:07:C5:F8:5B:5F:6B:DB:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/3/3230332e342e3137312e302f32342d3234203d3e2039343439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.4.171.0/24
Signature Algorithm: sha256WithRSAEncryption
74:09:45:80:38:c5:dc:7b:4f:6a:4d:5e:9f:f0:95:3d:ef:d4:
1a:13:e7:03:c2:56:15:64:a1:ef:83:7d:5a:b8:9b:93:a0:42:
01:7f:10:67:1d:df:6e:9f:b5:8f:ae:af:7c:9d:46:d3:d4:3b:
9a:66:f9:76:0c:8f:8b:be:00:97:63:3c:c6:f6:bd:e1:b8:9b:
07:0b:5f:df:58:c4:09:2a:75:30:0e:59:9a:e9:8b:cf:7a:c5:
82:a6:19:1b:30:48:6d:f9:e3:88:73:2a:98:68:4c:cc:68:c3:
81:ee:14:1e:60:0a:7d:70:83:ce:91:e2:6d:36:29:40:50:90:
22:23:6d:4c:19:bc:e2:99:c3:31:97:d8:42:97:16:0a:c9:26:
dd:26:6a:e6:32:0d:55:b6:97:4d:7c:5f:db:6c:10:6b:83:4d:
5c:0d:c2:7d:df:95:70:4d:88:18:cd:b7:ce:a6:d4:24:52:c0:
51:84:9b:7a:5a:51:42:36:51:cd:ac:42:30:1d:d6:f0:2f:09:
fa:58:af:72:d5:7d:3a:42:1e:1d:14:a5:19:10:ff:31:29:77:
99:06:2a:11:19:d4:e1:8c:5c:c6:00:89:64:3f:41:5b:6e:10:
c4:d5:3a:ff:a2:ef:5b:d8:c3:7f:f3:5a:05:02:eb:a2:40:ed:
3e:2d:d5:ca
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgIUKGrk81G3z3KtWEYeOwPZHVZyBCEwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMUFDMzcwMDAwMTEwLwYDVQQFEyhCMThGOTg5OTY3
RDMwRjI1MDlFM0QyOTcwN0M1Rjg1QjVGNkJEQjZGMB4XDTI0MTEwMzA1MDM1NVoX
DTI1MTEwMjA1MDg1NVowMzExMC8GA1UEAxMoNUIwRjkzMEJDOEMyRjA4NTQxOUNE
MDlFMzk1M0QxMDJCODVBQUZDRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALS1xIZsNqb3Y+mfCMGefix2X9quHAM1ON7d8FdyN0hhibb5IE1JwvEXo2U1
9WcBzPytNxNZjldoyQK7ZA9st0+pByqToLmmKNEB/qlHrj8t73+ai4XzFdnbUKzz
q2MZdKHwZjr80qwNytHOijcQK+ZdHQSxRq+sg3xxyNKmy0AUQ865ertshNiDJ4MT
zF+KFHHeGXq9x+xapxQEN2xAOkmSgnyUm4ngU3v24QXmmqQ7okP59GbtXMZ7NXhf
zzLibpp1LauRRSqbhxYYg5pAjg+R8hoNCB9jSYd5OrxV+GCx6ze+ZOJNuWM36XUG
+lj5WjW3JMHUorD7hKFs9IJ2woECAwEAAaOCAg0wggIJMB0GA1UdDgQWBBRbD5ML
yMLwhUGc0J45U9ECuFqvzjAfBgNVHSMEGDAWgBSxj5iZZ9MPJQnj0pcHxfhbX2vb
bzAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvMy9CMThGOTg5
OTY3RDMwRjI1MDlFM0QyOTcwN0M1Rjg1QjVGNkJEQjZGLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9zWS1ZbVdmVER5
VUo0OUtYQjhYNFcxOXIyMjguY2VyMIGHBggrBgEFBQcBCwR7MHkwdwYIKwYBBQUH
MAuGa3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxOTA1
MzAwMDAwLzMvMzIzMDMzMmUzNDJlMzEzNzMxMmUzMDJmMzIzNDJkMzIzNDIwM2Qz
ZTIwMzkzNDM0Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYB
BQUHAQcBAf8EEDAOMAwEAgABMAYDBADLBKswDQYJKoZIhvcNAQELBQADggEBAHQJ
RYA4xdx7T2pNXp/wlT3v1BoT5wPCVhVkoe+DfVq4m5OgQgF/EGcd326ftY+ur3yd
RtPUO5pm+XYMj4u+AJdjPMb2veG4mwcLX99YxAkqdTAOWZrpi896xYKmGRswSG35
44hzKphoTMxow4HuFB5gCn1wg86R4m02KUBQkCIjbUwZvOKZwzGX2EKXFgrJJt0m
auYyDVW2l018X9tsEGuDTVwNwn3flXBNiBjNt86m1CRSwFGEm3paUUI2Uc2sQjAd
1vAvCfpYr3LVfTpCHh0UpRkQ/zEpd5kGKhEZ1OGMXMYAiWQ/QVtuEMTVOv+i71vY
w3/zWgUC66JA7T4t1co=
-----END CERTIFICATE-----
Generated at Mon Nov 4 08:26:38 2024 by rpki-client on console-fra.rpki-client.org