Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/8/3130332e3131352e39302e302f32332d3234203d3e20313531303432.roa
File: 3130332e3131352e39302e302f32332d3234203d3e20313531303432.roa (raw, json)
Hash identifier: K/KrDaljp1H4myaxPFT6dCIJNctB1j/tYPwu5Ytg03M=
Subject key identifier: 33:D4:6D:07:1F:35:46:D1:4F:CD:05:C3:42:3F:1D:59:C7:D8:B6:EB
Certificate issuer: /CN=A91F73F50000/serialNumber=6F204BC2AA0DE1A4001F9ACDEA099255CE7214FB
Certificate serial: 66FA58B70F17CF872096535E8FEF825F0CE22AD9
Authority key identifier: 6F:20:4B:C2:AA:0D:E1:A4:00:1F:9A:CD:EA:09:92:55:CE:72:14:FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byBLwqoN4aQAH5rN6gmSVc5yFPs.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/8/3130332e3131352e39302e302f32332d3234203d3e20313531303432.roa
Signing time: Tue 18 Jul 2023 22:53:02 +0000
ROA not before: Tue 18 Jul 2023 22:48:02 +0000
ROA not after: Tue 16 Jul 2024 22:53:02 +0000
asID: 151042
IP address blocks: 103.115.90.0/23 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:fa:58:b7:0f:17:cf:87:20:96:53:5e:8f:ef:82:5f:0c:e2:2a:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F73F50000/serialNumber=6F204BC2AA0DE1A4001F9ACDEA099255CE7214FB
Validity
Not Before: Jul 18 22:48:02 2023 GMT
Not After : Jul 16 22:53:02 2024 GMT
Subject: CN=33D46D071F3546D14FCD05C3423F1D59C7D8B6EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0d:5c:19:bc:93:eb:ea:7f:6e:be:76:ea:c5:
a0:de:e2:02:14:ba:12:52:26:d7:37:b8:ed:d6:a3:
38:f8:18:c5:84:f5:6e:ac:7e:ed:3b:a2:31:ea:01:
01:ab:38:56:ae:86:88:86:4a:dc:99:1b:49:4b:19:
c6:2b:8f:17:f9:bb:ed:eb:e8:53:ff:95:15:9c:75:
04:53:57:6f:87:b8:27:71:12:d5:2d:52:43:cd:8e:
a8:05:fa:2e:37:ef:5c:93:97:88:f2:0d:ae:f4:e6:
a6:56:89:98:b5:d3:2c:d3:75:b0:60:e6:89:1f:79:
4e:66:eb:74:0a:19:14:f0:11:8f:c3:bd:d0:ad:42:
58:f1:2f:ba:ed:c9:ef:50:7f:98:7b:53:7c:85:2b:
b6:c5:c7:e2:c1:27:24:3c:7f:0a:f4:58:66:ac:8d:
9a:62:09:b6:42:30:d5:61:37:73:db:12:56:15:a6:
b5:7f:f1:65:1b:38:26:d3:ec:79:bf:2c:1b:24:02:
89:a3:7a:4f:4d:30:44:5f:64:80:f6:ee:e0:98:30:
35:c4:cf:a1:6f:c6:f6:84:67:30:38:4d:2f:84:98:
c8:4a:8f:4c:10:96:02:35:ba:74:1f:e2:71:a7:b5:
ac:c0:79:26:57:93:07:a3:0b:b1:66:00:77:a2:7e:
97:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D4:6D:07:1F:35:46:D1:4F:CD:05:C3:42:3F:1D:59:C7:D8:B6:EB
X509v3 Authority Key Identifier:
keyid:6F:20:4B:C2:AA:0D:E1:A4:00:1F:9A:CD:EA:09:92:55:CE:72:14:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91905300000/8/6F204BC2AA0DE1A4001F9ACDEA099255CE7214FB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byBLwqoN4aQAH5rN6gmSVc5yFPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/8/3130332e3131352e39302e302f32332d3234203d3e20313531303432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.115.90.0/23
Signature Algorithm: sha256WithRSAEncryption
b3:bd:da:59:ac:e5:fd:da:0c:79:57:d6:d3:b9:15:6b:20:d4:
a7:6b:78:8e:fb:f2:09:b2:60:e6:e5:58:76:ac:78:b5:59:5a:
bb:77:de:24:92:ed:7b:34:7e:64:91:a3:df:e4:7f:4e:c5:a8:
25:17:3a:54:97:3b:49:4c:d7:42:bb:85:88:83:f1:a1:0d:37:
a5:aa:b0:f9:59:ad:79:b4:aa:8d:0c:be:56:f6:43:0b:57:b6:
0d:07:db:39:0c:15:29:d3:99:5e:78:72:82:59:13:33:f5:be:
d2:c0:da:96:09:3a:58:54:e5:09:85:27:9f:3e:06:42:94:3e:
82:16:8e:e2:8c:46:11:ed:d3:da:7e:a7:3c:f9:cc:b7:2f:60:
7b:a6:3c:7a:88:25:b6:22:73:fe:54:99:29:5b:e9:db:12:05:
c8:5e:67:7f:12:32:a0:52:e1:95:56:52:0e:a3:ef:c0:a0:b4:
67:5b:c0:a5:0f:a5:9f:2b:d0:9c:bc:19:f0:cf:ad:08:8a:4a:
72:ee:57:73:d6:a1:63:81:94:53:a8:22:95:c0:0b:1c:c1:c3:
2f:5c:15:9b:ae:85:4a:d7:c3:64:5c:a6:c3:af:7f:bf:a0:95:
b3:49:01:d5:02:60:b2:4c:6c:79:1f:58:01:f0:42:b2:22:28:
16:1b:1b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 03:09:54 2024 by rpki-client on console-fra.rpki-client.org