Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/7/3130332e3138342e3137342e302f32342d3234203d3e2039383838.roa
File: 3130332e3138342e3137342e302f32342d3234203d3e2039383838.roa (raw, json)
Hash identifier: Q/aH6kNKuXVt73Ew+BqqLqH3M7nHZtDfHM/UNfPEuLQ=
Subject key identifier: E0:22:88:FE:AE:7F:62:F1:D0:24:64:D5:E7:4A:AA:9E:EE:D1:7C:EB
Certificate issuer: /CN=A919619E0000/serialNumber=4B1987D5160068092602529871C93EA320045A75
Certificate serial: 2C9E5055CA275251C5223859CCFBCD20273B0B17
Authority key identifier: 4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/7/3130332e3138342e3137342e302f32342d3234203d3e2039383838.roa
Signing time: Sun 01 Jan 2023 03:43:38 +0000
ROA not before: Sun 01 Jan 2023 03:38:38 +0000
ROA not after: Sun 31 Dec 2023 03:43:38 +0000
asID: 9888
IP address blocks: 103.184.174.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:9e:50:55:ca:27:52:51:c5:22:38:59:cc:fb:cd:20:27:3b:0b:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919619E0000/serialNumber=4B1987D5160068092602529871C93EA320045A75
Validity
Not Before: Jan 1 03:38:38 2023 GMT
Not After : Dec 31 03:43:38 2023 GMT
Subject: CN=E02288FEAE7F62F1D02464D5E74AAA9EEED17CEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:04:00:d7:77:e4:62:92:c4:2f:0f:02:bd:0a:
7d:f9:28:be:10:30:91:4e:43:cf:50:7d:62:64:11:
94:81:43:a4:2d:61:74:fa:40:c5:06:cf:47:94:08:
85:89:bf:89:1a:e1:98:ab:86:07:9c:78:77:09:a9:
1f:4d:bf:4f:e3:da:86:de:1c:e0:ac:09:ed:88:ef:
81:2d:9b:16:74:af:ab:4d:16:3a:99:d4:fe:ea:82:
f9:3d:a2:48:b8:ff:e0:f7:54:74:d8:64:63:4a:a0:
cd:61:74:fe:75:42:1c:4b:1d:05:81:4b:68:26:84:
87:0c:2b:fc:08:c2:91:11:10:da:e7:5e:a1:dd:86:
eb:be:c0:36:4c:c6:b1:24:aa:6a:01:7c:03:52:d2:
68:72:53:fb:8b:11:77:e2:68:30:f3:3d:4c:25:3d:
ef:03:a8:17:0d:4a:af:b5:70:bc:fa:97:6d:c8:6f:
0d:f5:2d:c2:88:62:74:43:b9:e3:9a:05:db:88:46:
08:12:a7:2c:fc:1f:ce:fb:c6:99:76:ec:20:00:e8:
2d:b5:57:b4:b6:b3:6b:a8:8a:5c:f2:79:ff:6a:e7:
5f:96:ac:7f:4f:a8:46:17:65:21:24:86:29:a1:d2:
aa:d8:4e:e0:39:92:e7:28:16:76:d3:9c:ec:6a:26:
5e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:22:88:FE:AE:7F:62:F1:D0:24:64:D5:E7:4A:AA:9E:EE:D1:7C:EB
X509v3 Authority Key Identifier:
keyid:4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/3130332e3138342e3137342e302f32342d3234203d3e2039383838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.184.174.0/24
Signature Algorithm: sha256WithRSAEncryption
74:4c:64:da:eb:85:5d:4e:99:ea:54:ac:d0:87:d8:a9:1d:78:
80:50:33:fb:ba:e5:6b:b3:d4:2e:07:e0:28:e4:ae:ff:c5:4f:
5b:65:c5:a7:c6:f2:79:90:39:47:fb:84:32:f5:3c:25:82:67:
69:69:f6:65:26:b5:9b:19:03:33:d0:f7:78:55:67:06:96:92:
2a:c8:d6:c4:7e:8b:92:52:48:fe:8d:4d:d4:bb:64:a6:fd:78:
8f:59:06:b4:21:e3:b8:d1:0b:00:74:c2:8f:75:9f:ed:1f:11:
4d:a2:46:77:46:d7:7c:b9:d6:13:9b:88:25:54:27:39:c3:3f:
46:49:64:53:32:8b:24:e3:59:aa:9c:54:f7:70:d7:b7:d9:e1:
ab:14:d3:7a:47:c6:2d:47:f0:86:df:1e:7c:88:0e:16:fe:fd:
ca:1d:19:21:09:60:98:7e:61:6f:34:bb:3b:19:1f:f5:a9:f2:
9a:fc:0d:ad:ae:05:4b:0d:d9:9b:0d:4f:c7:b6:2d:56:aa:15:
d9:2d:58:db:02:80:98:3b:b9:26:62:e8:a4:d0:3e:92:9a:2b:
47:47:71:fa:35:1f:91:33:ed:05:00:01:39:da:ea:d6:e0:e6:
a6:c4:97:b9:a9:50:95:19:ed:b3:54:24:87:d4:88:9c:3c:26:
22:94:5d:8d
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgIULJ5QVconUlHFIjhZzPvNICc7CxcwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxOTYxOUUwMDAwMTEwLwYDVQQFEyg0QjE5ODdENTE2
MDA2ODA5MjYwMjUyOTg3MUM5M0VBMzIwMDQ1QTc1MB4XDTIzMDEwMTAzMzgzOFoX
DTIzMTIzMTAzNDMzOFowMzExMC8GA1UEAxMoRTAyMjg4RkVBRTdGNjJGMUQwMjQ2
NEQ1RTc0QUFBOUVFRUQxN0NFQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKYEANd35GKSxC8PAr0KffkovhAwkU5Dz1B9YmQRlIFDpC1hdPpAxQbPR5QI
hYm/iRrhmKuGB5x4dwmpH02/T+Paht4c4KwJ7YjvgS2bFnSvq00WOpnU/uqC+T2i
SLj/4PdUdNhkY0qgzWF0/nVCHEsdBYFLaCaEhwwr/AjCkREQ2udeod2G677ANkzG
sSSqagF8A1LSaHJT+4sRd+JoMPM9TCU97wOoFw1Kr7VwvPqXbchvDfUtwohidEO5
45oF24hGCBKnLPwfzvvGmXbsIADoLbVXtLaza6iKXPJ5/2rnX5asf0+oRhdlISSG
KaHSqthO4DmS5ygWdtOc7GomXqUCAwEAAaOCAhEwggINMB0GA1UdDgQWBBTgIoj+
rn9i8dAkZNXnSqqe7tF86zAfBgNVHSMEGDAWgBRLGYfVFgBoCSYCUphxyT6jIARa
dTAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvNy80QjE5ODdE
NTE2MDA2ODA5MjYwMjUyOTg3MUM5M0VBMzIwMDQ1QTc1LmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9TeG1IMVJZQWFB
a21BbEtZY2NrLW95QUVXblUuY2VyMIGLBggrBgEFBQcBCwR/MH0wewYIKwYBBQUH
MAuGb3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxOTA1
MzAwMDAwLzcvMzEzMDMzMmUzMTM4MzQyZTMxMzczNDJlMzAyZjMyMzQyZDMyMzQy
MDNkM2UyMDM5MzgzODM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ7iuMA0GCSqGSIb3DQEBCwUAA4IB
AQB0TGTa64VdTpnqVKzQh9ipHXiAUDP7uuVrs9QuB+Ao5K7/xU9bZcWnxvJ5kDlH
+4Qy9TwlgmdpafZlJrWbGQMz0Pd4VWcGlpIqyNbEfouSUkj+jU3Uu2Sm/XiPWQa0
IeO40QsAdMKPdZ/tHxFNokZ3Rtd8udYTm4glVCc5wz9GSWRTMosk41mqnFT3cNe3
2eGrFNN6R8YtR/CG3x58iA4W/v3KHRkhCWCYfmFvNLs7GR/1qfKa/A2trgVLDdmb
DU/Hti1WqhXZLVjbAoCYO7kmYuik0D6SmitHR3H6NR+RM+0FAAE52urW4OamxJe5
qVCVGe2zVCSH1IicPCYilF2N
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:24 2024 by rpki-client on console-fra.rpki-client.org