Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/4/3230332e372e3139362e302f32332d3233203d3e2037353436.roa
File: 3230332e372e3139362e302f32332d3233203d3e2037353436.roa (raw, json)
Hash identifier: 2WwNl1pB5rNdmdA0ZckBBDyrcj3CVHHtlaccRQqUQAY=
Subject key identifier: C8:2B:AB:40:9D:A0:C8:28:39:90:66:76:05:2E:2D:7F:48:FA:DB:D5
Certificate issuer: /CN=A91E539C0000/serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4
Certificate serial: 288EFE8C7A3415039AB25D0EAE457C56FE2A0098
Authority key identifier: B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/4/3230332e372e3139362e302f32332d3233203d3e2037353436.roa
Signing time: Thu 01 Aug 2024 01:47:35 +0000
ROA not before: Thu 01 Aug 2024 01:42:35 +0000
ROA not after: Thu 31 Jul 2025 01:47:35 +0000
asID: 7546
IP address blocks: 203.7.196.0/23 maxlen: 23
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:8e:fe:8c:7a:34:15:03:9a:b2:5d:0e:ae:45:7c:56:fe:2a:00:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E539C0000/serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4
Validity
Not Before: Aug 1 01:42:35 2024 GMT
Not After : Jul 31 01:47:35 2025 GMT
Subject: CN=C82BAB409DA0C82839906676052E2D7F48FADBD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e9:85:97:56:35:9e:08:d4:ae:b1:37:3b:fb:
7b:48:f7:49:e7:7d:73:e8:13:3b:ba:16:e0:77:56:
ea:62:4d:30:e9:6e:4c:08:5b:2b:38:14:f5:81:ef:
de:fc:93:c1:71:ad:3d:27:e3:b3:14:92:10:3e:9c:
06:a3:b3:a5:e6:f3:87:df:f7:8a:ab:6b:d0:f9:93:
c9:4a:58:60:5d:2c:bd:32:e5:ff:f0:93:38:0b:70:
18:b2:c7:86:98:71:e0:e2:6d:4f:ea:d0:08:31:bc:
34:6d:81:0c:61:b3:c3:02:1d:53:29:e7:30:d1:31:
c7:f1:a9:1b:e6:d1:c2:5b:97:61:e4:cb:b9:26:17:
bf:ff:e6:19:9e:00:34:67:27:70:e1:13:56:44:6d:
6b:15:b1:af:c1:a5:5e:6b:69:53:65:9b:61:6e:d5:
8a:fa:80:98:7b:94:5b:4b:d9:5f:f9:27:cb:17:ab:
60:29:c5:d4:9f:f5:8b:0d:ec:39:47:c9:a3:25:0d:
cf:5a:1d:ae:95:a4:2a:a8:de:f7:60:2d:48:e7:10:
8c:d3:4d:d8:21:a0:ba:ef:d2:ef:fe:f3:63:2d:cd:
a8:75:5f:db:c4:28:60:91:0b:ac:b4:58:ad:6e:35:
25:59:eb:8a:0f:1b:dd:42:65:95:e2:00:09:d3:9d:
08:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:2B:AB:40:9D:A0:C8:28:39:90:66:76:05:2E:2D:7F:48:FA:DB:D5
X509v3 Authority Key Identifier:
keyid:B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/3230332e372e3139362e302f32332d3233203d3e2037353436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.7.196.0/23
Signature Algorithm: sha256WithRSAEncryption
40:32:43:1c:19:fa:03:49:81:c3:02:4e:5c:b9:d2:46:9d:78:
00:7a:b5:76:18:eb:cd:82:f9:6e:41:ba:b2:98:31:c8:9b:9b:
b0:11:21:b2:fd:ea:8d:88:cd:95:0b:1c:d8:f7:ff:56:61:e8:
81:bb:f9:2c:eb:6f:88:74:88:3b:47:92:fc:84:cd:ab:a0:8a:
e6:25:94:a5:31:c9:2e:62:98:7a:b6:44:95:45:59:6f:ae:91:
ed:4b:a7:49:e4:1c:f7:6c:07:f0:7d:bf:8b:ee:18:c0:75:61:
38:68:bb:12:5d:ef:e1:66:94:45:49:e1:27:5e:ff:8c:59:1d:
a3:2e:3e:31:5e:e7:5b:2a:5e:c8:8b:2a:d9:98:ef:cd:d1:97:
27:aa:2f:0e:f0:a9:bc:40:6c:55:12:46:14:fd:71:fb:be:6f:
10:23:ac:70:73:dc:a2:7a:57:8c:93:2d:e3:6b:84:e1:b7:38:
7d:fc:c6:b0:16:a7:37:36:f0:d0:1e:e9:8f:8b:9e:b6:5e:92:
f5:57:85:33:db:18:af:ab:d4:e3:1f:56:fb:b4:72:8c:8f:d6:
57:40:c9:65:a8:17:47:b0:58:43:32:5e:bc:1a:74:85:05:d5:
47:4e:af:c0:8e:af:32:a3:b1:26:1f:30:eb:2d:4c:c4:e8:b7:
62:7f:a4:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 4 11:00:41 2024 by rpki-client on console-ams.rpki-client.org