Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/8/3130332e3131352e39302e302f32332d3234203d3e2039383838.roa
File: 3130332e3131352e39302e302f32332d3234203d3e2039383838.roa (raw, json)
Hash identifier: T8HvzUUgSLpmtoQ3coR0tPqGPhdESXZ7dc154GDpYCU=
Subject key identifier: 97:A9:51:16:4F:B8:C0:31:88:38:A6:4A:F1:AF:31:80:9E:F8:7C:0B
Certificate issuer: /CN=A91F73F50000/serialNumber=6F204BC2AA0DE1A4001F9ACDEA099255CE7214FB
Certificate serial: 63855FACF040B31072DCAAAEBB6F17B7755C7DB2
Authority key identifier: 6F:20:4B:C2:AA:0D:E1:A4:00:1F:9A:CD:EA:09:92:55:CE:72:14:FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byBLwqoN4aQAH5rN6gmSVc5yFPs.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/8/3130332e3131352e39302e302f32332d3234203d3e2039383838.roa
Signing time: Mon 20 Mar 2023 01:13:23 +0000
ROA not before: Mon 20 Mar 2023 01:08:23 +0000
ROA not after: Mon 18 Mar 2024 01:13:23 +0000
asID: 9888
IP address blocks: 103.115.90.0/23 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:85:5f:ac:f0:40:b3:10:72:dc:aa:ae:bb:6f:17:b7:75:5c:7d:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F73F50000/serialNumber=6F204BC2AA0DE1A4001F9ACDEA099255CE7214FB
Validity
Not Before: Mar 20 01:08:23 2023 GMT
Not After : Mar 18 01:13:23 2024 GMT
Subject: CN=97A951164FB8C0318838A64AF1AF31809EF87C0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ec:e5:0d:e7:16:ea:7b:71:5f:53:52:9f:69:
40:7e:06:22:97:46:22:24:53:3f:ad:85:66:2e:55:
d3:d4:54:10:32:ea:a7:1c:63:c7:e1:b5:5a:dd:9b:
41:fe:d7:bd:98:73:d3:98:15:ef:8f:51:77:4d:b8:
a3:e5:7d:f5:6c:06:d3:c5:a6:46:28:d1:6b:df:15:
0a:d1:63:73:3e:16:fc:79:da:1e:5a:f5:40:6c:37:
25:64:73:eb:ce:75:fe:90:6e:6d:41:1d:0c:89:a9:
ac:90:fd:b6:09:a2:86:43:9c:ff:da:4d:3f:6a:d1:
80:bf:81:ad:e7:45:3b:0b:65:59:78:b2:73:ce:92:
1c:d5:65:4d:31:2d:cd:55:48:56:9c:5b:14:08:2f:
de:74:44:38:77:4d:fd:da:cf:ae:a6:fa:48:f8:1b:
19:93:ea:f9:f3:6f:7e:dc:eb:ec:96:4d:be:a2:ff:
57:b8:3e:93:b5:94:e2:d2:55:8a:c0:bb:6c:42:6a:
64:55:73:24:75:ba:8d:1d:ca:9d:e6:3a:5b:24:3b:
3f:b4:17:89:eb:e5:c0:0e:66:3a:eb:e4:b8:0a:82:
b6:64:51:55:49:81:91:44:5d:66:04:ab:f9:a1:18:
cb:a1:c4:dc:2c:f1:e5:96:c6:ca:e9:de:cd:f1:36:
ae:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A9:51:16:4F:B8:C0:31:88:38:A6:4A:F1:AF:31:80:9E:F8:7C:0B
X509v3 Authority Key Identifier:
keyid:6F:20:4B:C2:AA:0D:E1:A4:00:1F:9A:CD:EA:09:92:55:CE:72:14:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91905300000/8/6F204BC2AA0DE1A4001F9ACDEA099255CE7214FB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byBLwqoN4aQAH5rN6gmSVc5yFPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/8/3130332e3131352e39302e302f32332d3234203d3e2039383838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.115.90.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:76:3f:cb:e8:d7:16:5b:28:66:1c:49:73:3a:a3:97:68:af:
13:af:96:ed:8f:c9:92:a5:25:c6:1e:72:b1:a2:f8:bd:6a:3b:
2f:a0:b7:ee:67:86:2a:44:34:94:a2:53:27:8f:7e:4d:3d:65:
22:4b:4a:2d:12:e9:39:89:0e:49:f4:0d:11:13:9c:27:87:e5:
ab:05:31:8c:bd:f5:85:c0:ae:93:05:4e:fa:14:bd:49:8d:b5:
61:d1:a1:eb:cd:7e:fe:45:7b:4a:2a:7e:97:d7:88:46:9b:43:
8c:e4:10:b7:c8:16:48:1b:0a:73:3c:1c:1d:fa:f1:55:fe:e7:
f7:29:65:58:24:e1:0f:4d:4b:c0:da:2f:67:fc:8c:08:bd:91:
2f:84:57:ac:25:2d:ee:d6:e3:b1:fe:11:6e:cb:85:72:51:8b:
9b:44:b2:da:19:63:0f:9d:b8:c5:98:5a:08:5e:96:e0:1f:64:
d3:09:9d:6b:58:5a:35:99:b3:81:e4:da:2b:e3:d3:0c:61:91:
78:d4:4b:3a:e6:e6:71:b9:b3:98:e8:06:c3:c2:65:ee:81:c9:
ed:21:81:e2:10:fd:6a:a0:2d:27:ea:39:4e:fa:d8:04:eb:f6:
fd:30:b3:09:68:fa:d4:81:ad:38:d9:ab:0b:7d:40:f4:e9:d1:
85:11:f7:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:24 2024 by rpki-client on console-fra.rpki-client.org