Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91BE6D70000/0/3130332e3137352e32362e302f32342d3234203d3e20323132323338.roa
File: 3130332e3137352e32362e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: W511LYTleiQ6dSb5GANYbMRj/u6/OeUf7y/f/m24wR8=
Subject key identifier: FC:21:EB:2B:2C:5A:8E:E4:13:31:87:07:53:AF:75:D2:E4:18:42:EA
Certificate issuer: /CN=A91BE6D70000/serialNumber=BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB
Certificate serial: 65B6D9486C3B81B155A1F41827099C330E94E20E
Authority key identifier: BE:DE:DD:0A:BC:1A:F2:93:7E:D3:1D:36:03:3B:7C:AB:04:8B:89:BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vt7dCrwa8pN-0x02Azt8qwSLibs.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91BE6D70000/0/3130332e3137352e32362e302f32342d3234203d3e20323132323338.roa
Signing time: Tue 11 Oct 2022 04:35:18 +0000
ROA not before: Tue 11 Oct 2022 04:30:18 +0000
ROA not after: Tue 10 Oct 2023 04:35:18 +0000
asID: 212238
IP address blocks: 103.175.26.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:b6:d9:48:6c:3b:81:b1:55:a1:f4:18:27:09:9c:33:0e:94:e2:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BE6D70000/serialNumber=BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB
Validity
Not Before: Oct 11 04:30:18 2022 GMT
Not After : Oct 10 04:35:18 2023 GMT
Subject: CN=FC21EB2B2C5A8EE41331870753AF75D2E41842EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:16:26:84:f9:12:fc:04:25:62:fd:a6:d5:af:
71:45:76:8c:04:b9:1b:d6:03:d1:c5:c7:6f:28:02:
b7:e4:0d:24:f5:f7:3b:39:b3:8b:5e:b4:b1:e9:f8:
22:d4:0e:d9:fe:48:4d:c1:cb:ca:7b:ef:46:e2:2a:
bf:4a:81:70:d6:b7:4a:72:74:fa:55:05:f1:46:d4:
07:41:d3:f6:37:d0:fa:b2:4a:56:a6:14:24:de:30:
31:cf:6d:2e:c3:73:c5:d6:71:c3:3f:a2:2c:97:d6:
9d:ce:77:bc:db:7b:e8:6d:63:50:62:1a:78:3d:a2:
66:69:91:72:1d:0f:8b:f0:d4:0a:5e:ab:f7:20:e2:
0d:c1:0d:5e:59:46:d6:d0:4e:c9:72:a7:3e:bb:78:
6e:62:3c:05:a3:98:cb:88:7c:81:4b:e4:c9:cd:c9:
11:13:d5:fe:38:60:1d:4d:0c:8b:e0:eb:d3:f9:f1:
43:ae:86:09:7f:1c:d5:0e:5c:da:7c:b6:b8:ec:d9:
9e:03:96:f0:76:06:ce:d5:87:5d:75:4d:aa:58:9f:
e2:a0:02:42:be:24:52:04:7a:47:17:40:eb:8f:df:
99:89:eb:0a:2d:86:9d:aa:1d:ee:ef:74:44:de:20:
35:18:c2:52:d3:bf:be:66:7c:d0:63:8c:20:54:07:
61:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:21:EB:2B:2C:5A:8E:E4:13:31:87:07:53:AF:75:D2:E4:18:42:EA
X509v3 Authority Key Identifier:
keyid:BE:DE:DD:0A:BC:1A:F2:93:7E:D3:1D:36:03:3B:7C:AB:04:8B:89:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91BE6D70000/0/BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vt7dCrwa8pN-0x02Azt8qwSLibs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91BE6D70000/0/3130332e3137352e32362e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.175.26.0/24
Signature Algorithm: sha256WithRSAEncryption
24:69:f7:49:4a:9a:db:98:3d:ce:fb:c4:bd:01:92:ff:31:53:
96:ec:64:06:80:26:9b:24:da:49:7f:55:92:40:15:10:d7:3e:
78:d1:62:c7:f5:62:d3:5f:cf:54:81:fb:5f:7a:f6:5e:cb:71:
0b:21:b6:6b:c1:df:e7:b8:f4:ef:28:d6:3c:20:63:ab:91:ab:
af:6c:86:cc:76:bf:9e:65:30:0d:36:48:bc:4b:08:25:05:af:
2e:41:95:b0:4c:a6:15:f5:2b:28:49:01:af:1d:00:43:b2:7a:
9d:57:b5:3f:c8:30:f3:6e:69:b7:5a:91:b5:76:83:82:16:d9:
6d:22:e5:02:a4:74:73:99:b2:b1:6d:16:e0:16:db:35:94:bc:
b0:1b:1a:a7:91:fe:ff:25:55:41:8b:8c:97:db:96:43:bd:5c:
75:44:39:d2:c8:c8:1c:fb:3d:5c:2f:85:51:55:cb:b6:02:87:
3b:32:58:1e:a6:9a:fe:e0:7c:b6:63:ef:bf:0a:d8:0a:52:ec:
d5:cd:73:08:1f:6a:d3:e8:a7:03:f1:6d:0d:f7:ff:e2:6a:7c:
5d:b3:28:1b:00:3e:d6:fd:e1:0f:31:6f:56:cc:35:2c:0a:ca:
45:cc:60:a5:62:90:fb:11:a8:1c:88:a0:cc:1e:2a:a9:30:c5:
e3:03:1f:29
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgIUZbbZSGw7gbFVofQYJwmcMw6U4g4wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxQkU2RDcwMDAwMTEwLwYDVQQFEyhCRURFREQwQUJD
MUFGMjkzN0VEMzFEMzYwMzNCN0NBQjA0OEI4OUJCMB4XDTIyMTAxMTA0MzAxOFoX
DTIzMTAxMDA0MzUxOFowMzExMC8GA1UEAxMoRkMyMUVCMkIyQzVBOEVFNDEzMzE4
NzA3NTNBRjc1RDJFNDE4NDJFQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMQWJoT5EvwEJWL9ptWvcUV2jAS5G9YD0cXHbygCt+QNJPX3Ozmzi160sen4
ItQO2f5ITcHLynvvRuIqv0qBcNa3SnJ0+lUF8UbUB0HT9jfQ+rJKVqYUJN4wMc9t
LsNzxdZxwz+iLJfWnc53vNt76G1jUGIaeD2iZmmRch0Pi/DUCl6r9yDiDcENXllG
1tBOyXKnPrt4bmI8BaOYy4h8gUvkyc3JERPV/jhgHU0Mi+Dr0/nxQ66GCX8c1Q5c
2ny2uOzZngOW8HYGztWHXXVNqlif4qACQr4kUgR6RxdA64/fmYnrCi2Gnaod7u90
RN4gNRjCUtO/vmZ80GOMIFQHYakCAwEAAaOCAhQwggIQMB0GA1UdDgQWBBT8Iesr
LFqO5BMxhwdTr3XS5BhC6jAfBgNVHSMEGDAWgBS+3t0KvBryk37THTYDO3yrBIuJ
uzAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFCRTZENzAwMDAvMC9CRURFREQw
QUJDMUFGMjkzN0VEMzFEMzYwMzNCN0NBQjA0OEI4OUJCLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi92dDdkQ3J3YThw
Ti0weDAyQXp0OHF3U0xpYnMuY2VyMIGOBggrBgEFBQcBCwSBgTB/MH0GCCsGAQUF
BzALhnFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0b3J5L0E5MUJF
NkQ3MDAwMC8wLzMxMzAzMzJlMzEzNzM1MmUzMjM2MmUzMDJmMzIzNDJkMzIzNDIw
M2QzZTIwMzIzMTMyMzIzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ68aMA0GCSqGSIb3DQEBCwUA
A4IBAQAkafdJSprbmD3O+8S9AZL/MVOW7GQGgCabJNpJf1WSQBUQ1z540WLH9WLT
X89UgftfevZey3ELIbZrwd/nuPTvKNY8IGOrkauvbIbMdr+eZTANNki8SwglBa8u
QZWwTKYV9SsoSQGvHQBDsnqdV7U/yDDzbmm3WpG1doOCFtltIuUCpHRzmbKxbRbg
Fts1lLywGxqnkf7/JVVBi4yX25ZDvVx1RDnSyMgc+z1cL4VRVcu2Aoc7Mlgeppr+
4Hy2Y++/CtgKUuzVzXMIH2rT6KcD8W0N9//ianxdsygbAD7W/eEPMW9WzDUsCspF
zGClYpD7EagciKDMHiqpMMXjAx8p
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:51 2024 by rpki-client on console-ams.rpki-client.org