Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/7/3130332e3138342e3137342e302f32332d3234203d3e2039343439.roa
File: 3130332e3138342e3137342e302f32332d3234203d3e2039343439.roa (raw, json)
Hash identifier: SbkxL+7COZ6Tytm7k2uPgmc/+iWRhYRcOoIgx0LtkYU=
Subject key identifier: 44:26:A3:E4:01:83:98:94:CA:B4:71:B9:C4:A9:52:EA:34:7B:97:D7
Certificate issuer: /CN=A919619E0000/serialNumber=4B1987D5160068092602529871C93EA320045A75
Certificate serial: 2FC4DF242FCD2A24BE75A7213C1BE811743AB10D
Authority key identifier: 4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/7/3130332e3138342e3137342e302f32332d3234203d3e2039343439.roa
Signing time: Sun 03 Nov 2024 05:08:52 +0000
ROA not before: Sun 03 Nov 2024 05:03:52 +0000
ROA not after: Sun 02 Nov 2025 05:08:52 +0000
asID: 9449
IP address blocks: 103.184.174.0/23 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:c4:df:24:2f:cd:2a:24:be:75:a7:21:3c:1b:e8:11:74:3a:b1:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919619E0000/serialNumber=4B1987D5160068092602529871C93EA320045A75
Validity
Not Before: Nov 3 05:03:52 2024 GMT
Not After : Nov 2 05:08:52 2025 GMT
Subject: CN=4426A3E401839894CAB471B9C4A952EA347B97D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b1:74:ff:05:4d:34:fd:02:9b:d4:5d:cf:86:
bf:1b:07:12:0f:24:27:c4:f9:8e:ab:da:76:fd:92:
4c:98:03:32:61:86:a6:2e:9e:88:85:3e:89:f6:6b:
85:c2:4b:bc:28:b5:9d:ec:35:1a:5d:b5:7d:cb:75:
8a:4e:16:ec:97:ff:3b:ef:4f:0a:13:5d:dc:cf:88:
0f:05:89:20:78:96:c6:70:85:36:06:e5:0e:0c:a1:
d5:2c:07:fa:b8:ff:7f:37:94:0c:12:13:58:b5:b3:
77:58:1b:a7:61:06:8e:49:e8:92:5e:9f:89:fa:49:
f6:e6:64:3f:09:13:6e:0b:f6:a6:d0:e3:f5:f0:62:
d6:cd:34:fd:c1:46:6b:50:f2:c7:de:c0:7f:f6:91:
b0:c3:f1:79:8e:21:b2:07:b6:19:87:6b:cc:8d:b3:
58:65:77:35:e3:c1:44:c2:bf:3e:9c:70:4e:7a:ad:
fd:61:61:47:2b:37:9f:9b:6a:ee:04:c7:d8:1a:1d:
4b:07:5b:88:8d:7f:ae:85:b8:7b:d7:b8:7d:42:de:
23:57:0f:0f:d1:e2:6d:35:f2:42:12:3b:00:01:ae:
74:ba:7a:0c:0c:12:5e:cb:29:53:af:d6:d1:c0:a8:
9a:bd:48:4f:d9:46:d9:55:42:bf:5d:89:a1:64:f8:
41:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:26:A3:E4:01:83:98:94:CA:B4:71:B9:C4:A9:52:EA:34:7B:97:D7
X509v3 Authority Key Identifier:
keyid:4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/3130332e3138342e3137342e302f32332d3234203d3e2039343439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.184.174.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:24:62:de:92:3f:db:31:e3:5a:eb:76:6a:20:19:79:24:5f:
83:d2:7f:56:bc:7b:de:77:4c:f7:bb:7a:59:86:0e:cc:77:8e:
c8:0e:c6:2b:b8:59:47:16:65:48:d4:d0:21:2d:f5:6b:de:a5:
db:e1:ee:39:c5:99:93:89:64:d7:0f:07:23:66:58:97:ba:d6:
c0:db:1d:61:da:22:cb:23:86:e5:ad:69:78:ce:ab:7c:1d:b8:
42:77:9e:8a:af:0e:79:1c:41:4d:a7:79:a1:7a:cb:3a:0c:3d:
bf:0a:cd:30:54:ee:a4:67:a7:a6:78:81:e1:97:4a:e3:42:33:
57:6f:36:ff:be:1c:35:c5:d3:65:69:9e:5d:3c:61:60:5f:45:
9d:da:3c:eb:d1:97:c2:02:6b:42:46:77:f6:7f:c8:65:4d:47:
2c:c7:de:6f:fb:76:fb:ae:fe:eb:fc:b1:94:dd:19:65:f0:56:
5a:21:9a:88:20:c2:46:7a:dd:b1:d0:20:12:e3:79:54:dd:be:
88:c3:8f:a6:bd:7f:91:54:67:25:92:5a:02:19:20:ea:ea:64:
96:43:58:5c:81:f9:c7:1f:3f:1f:c3:3d:2e:eb:82:78:7f:70:
d2:03:64:7f:88:df:f1:ad:b0:75:39:cd:26:60:13:13:e8:68:
e1:bf:ae:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 4 07:08:46 2024 by rpki-client on console-fra.rpki-client.org