Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91BE6D70000/0/3130332e3137352e32362e302f32342d3234203d3e20383334.roa
File: 3130332e3137352e32362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: xfTJKf1CfjiGzyTqxrl1SZ2os8kH3kB5CsymSdljNHs=
Subject key identifier: A1:3A:07:1E:BF:F8:B3:7C:EE:39:4B:47:E6:A9:84:DF:F2:1C:47:EA
Certificate issuer: /CN=A91BE6D70000/serialNumber=BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB
Certificate serial: 7F8713495CFF406AD29297C1EF8D4215258B7F31
Authority key identifier: BE:DE:DD:0A:BC:1A:F2:93:7E:D3:1D:36:03:3B:7C:AB:04:8B:89:BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vt7dCrwa8pN-0x02Azt8qwSLibs.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91BE6D70000/0/3130332e3137352e32362e302f32342d3234203d3e20383334.roa
Signing time: Tue 11 Oct 2022 04:35:41 +0000
ROA not before: Tue 11 Oct 2022 04:30:41 +0000
ROA not after: Tue 10 Oct 2023 04:35:41 +0000
asID: 834
IP address blocks: 103.175.26.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:87:13:49:5c:ff:40:6a:d2:92:97:c1:ef:8d:42:15:25:8b:7f:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BE6D70000/serialNumber=BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB
Validity
Not Before: Oct 11 04:30:41 2022 GMT
Not After : Oct 10 04:35:41 2023 GMT
Subject: CN=A13A071EBFF8B37CEE394B47E6A984DFF21C47EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:23:ab:b4:25:13:a0:67:1b:1f:75:db:d1:35:
8d:09:dd:de:2e:17:c5:bd:f2:e9:b2:be:55:34:87:
40:da:41:b2:c4:4b:3e:43:12:0a:bf:33:39:42:e8:
c9:c9:21:36:ea:4e:87:8d:44:a7:4a:bf:05:2a:4a:
29:b1:ad:b6:24:a2:0f:fe:9d:ca:4c:51:1a:ff:4c:
56:fa:48:c7:c3:46:03:10:c4:b0:72:ab:5a:d7:df:
4c:13:c7:f7:0a:b6:cc:e4:7a:6f:ca:7e:96:b9:2a:
45:f4:73:39:69:3d:c9:0d:f8:2d:94:7b:ad:8d:af:
ee:a5:13:fe:df:5d:ba:b0:47:28:fd:36:a8:a1:35:
41:fb:d4:f8:e0:2c:67:54:28:65:1a:7e:aa:a1:34:
a4:3f:1f:74:86:17:a6:e6:ae:80:5f:fb:aa:33:48:
0d:33:b9:f2:88:c7:db:da:0c:50:5d:d5:6d:0a:aa:
09:56:14:0a:90:6f:cc:8a:a1:ec:d1:bb:3f:cc:cf:
c0:4d:6a:ed:e8:39:99:02:c0:fa:7a:5e:05:d4:fd:
04:ab:7b:b7:ca:bf:0b:8b:39:6e:e2:be:67:35:fc:
bd:d4:0d:57:0f:93:11:0e:16:42:7e:ac:22:0f:ee:
bd:40:61:f1:11:97:6d:01:09:e9:18:33:15:43:41:
e6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:3A:07:1E:BF:F8:B3:7C:EE:39:4B:47:E6:A9:84:DF:F2:1C:47:EA
X509v3 Authority Key Identifier:
keyid:BE:DE:DD:0A:BC:1A:F2:93:7E:D3:1D:36:03:3B:7C:AB:04:8B:89:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91BE6D70000/0/BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vt7dCrwa8pN-0x02Azt8qwSLibs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91BE6D70000/0/3130332e3137352e32362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.175.26.0/24
Signature Algorithm: sha256WithRSAEncryption
40:c3:fc:25:51:17:92:a8:e8:36:ac:76:9e:3c:8f:0f:99:d5:
07:d8:38:9a:d2:c4:48:60:95:14:ba:72:da:9f:7f:16:c4:b8:
a5:2c:32:68:24:fc:14:c2:91:a4:16:94:a5:d0:8d:86:e0:20:
28:0d:4f:a0:b7:5a:88:5b:78:dd:b0:95:f1:a5:fc:26:a1:60:
6e:12:f2:b9:b0:ab:c6:5e:44:68:67:c5:a3:ce:a3:4b:d7:11:
0e:a3:8e:17:43:56:55:6a:5c:aa:0a:84:06:a3:98:26:00:45:
ea:1f:bf:c7:a1:04:b1:12:34:96:4f:05:1a:30:0c:0c:a2:ff:
4b:4f:9e:d3:57:f8:7f:f8:40:4d:3f:5e:f8:07:4a:9f:93:45:
54:7f:a7:5e:ce:c3:68:e4:5e:c4:66:08:eb:ed:c3:89:58:57:
ee:01:65:2a:ba:e6:19:cf:e2:73:75:9d:3b:90:b6:7b:0c:13:
4e:73:e3:ad:ba:cf:f1:2e:c3:83:4f:fe:4c:2a:3c:5d:92:9a:
97:a4:82:bd:7e:7d:30:f6:4e:ad:f1:7b:fb:b6:ee:d1:f9:89:
8c:d5:9f:d2:7f:42:cc:58:f1:b1:e4:27:fc:00:4a:e9:89:62:
56:cd:c8:ec:66:8d:f4:fc:e1:a7:4d:01:f3:0b:ad:21:a7:1f:
1e:ce:c9:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:51 2024 by rpki-client on console-ams.rpki-client.org