Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/0/3130332e3136302e3131362e302f32332d3234203d3e2039343439.roa
File: 3130332e3136302e3131362e302f32332d3234203d3e2039343439.roa (raw, json)
Hash identifier: yogL8/81axQDf/PWzTASWBYKmDx9+f4U8iWDqKSfbiU=
Subject key identifier: 90:F8:86:2B:98:B8:94:6D:07:FE:1C:54:EB:61:95:BA:75:83:33:B1
Certificate issuer: /CN=A91905300000/serialNumber=30356EF46D594DA57C7697011183ACFFE04613E0
Certificate serial: 4D5A5D85C625D5E8931CD1359415EC2026F91EF5
Authority key identifier: 30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/0/3130332e3136302e3131362e302f32332d3234203d3e2039343439.roa
Signing time: Fri 20 Dec 2024 01:09:40 +0000
ROA not before: Fri 20 Dec 2024 01:04:40 +0000
ROA not after: Fri 19 Dec 2025 01:09:40 +0000
asID: 9449
IP address blocks: 103.160.116.0/23 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:5a:5d:85:c6:25:d5:e8:93:1c:d1:35:94:15:ec:20:26:f9:1e:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91905300000
Validity
Not Before: Dec 20 01:04:40 2024 GMT
Not After : Dec 19 01:09:40 2025 GMT
Subject: CN=90F8862B98B8946D07FE1C54EB6195BA758333B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b6:79:7e:5b:48:69:84:08:41:62:92:9d:e7:
8a:7c:2f:36:10:26:bf:19:70:f8:dd:cb:de:a2:d4:
b3:74:7e:f1:2b:98:e8:c7:23:bc:33:89:e3:3f:59:
24:4a:c7:a3:f8:d6:79:56:bc:71:7a:5c:e8:b8:f6:
95:ef:1d:1b:3e:5a:d7:d3:45:b7:24:eb:63:d7:c2:
ae:3a:f6:03:23:6e:52:fa:bd:a9:e2:dc:14:a6:93:
77:39:26:51:78:60:e3:05:88:6f:d2:69:0f:40:b0:
91:37:57:cd:e4:06:4d:d6:5e:6b:9b:33:3e:33:e5:
b6:0b:1a:a2:81:5c:62:8e:9d:14:21:89:60:86:d5:
d2:3c:07:cd:54:25:55:6b:86:70:f7:0c:ea:c6:81:
15:d6:2b:1f:bc:f2:70:34:5b:2c:81:7c:89:90:ad:
62:69:c9:08:b3:96:a6:d3:81:c1:be:b0:a5:6a:6c:
af:ad:00:ce:bd:fe:da:93:2f:fa:d1:20:4b:00:fa:
1b:9b:2a:7c:c4:1c:05:ae:e6:30:df:26:01:dd:19:
9d:a2:5c:92:56:02:2a:54:d3:9c:3f:23:62:c6:8f:
b9:c5:46:01:ff:30:09:6d:28:52:57:c3:b4:06:3b:
11:a1:2a:0c:1e:0c:0e:86:46:16:82:2d:98:ec:b6:
37:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:F8:86:2B:98:B8:94:6D:07:FE:1C:54:EB:61:95:BA:75:83:33:B1
X509v3 Authority Key Identifier:
keyid:30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/3130332e3136302e3131362e302f32332d3234203d3e2039343439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.160.116.0/23
Signature Algorithm: sha256WithRSAEncryption
ba:98:35:14:b8:be:0b:47:48:c4:82:5a:fb:98:14:74:a9:40:
f5:6d:0d:9a:bc:cf:28:85:f2:f8:b0:4d:e6:9b:5e:91:95:04:
03:17:18:40:50:73:3e:c7:82:52:fa:a1:f6:53:31:a6:f5:bf:
98:03:62:65:48:d2:be:81:06:fb:40:0d:35:9a:c0:bf:73:62:
24:7c:81:88:ce:2d:80:eb:15:64:96:88:41:fb:2e:11:58:c8:
65:39:2d:e0:5f:55:74:c1:50:91:9e:25:60:ba:1f:57:2d:6a:
83:e1:bb:5f:20:21:b0:3f:a4:be:14:9a:d5:28:2a:fe:b0:61:
34:8b:de:a8:00:0f:e5:19:71:59:7c:95:fd:b9:ac:35:6f:c0:
6d:07:90:07:f5:a0:db:31:26:b0:c3:d4:94:89:bf:d8:c6:be:
95:1b:ae:dd:f3:42:5a:f6:16:83:ed:6d:da:11:c4:fd:06:cc:
2f:65:34:c1:41:03:7b:69:f4:54:8a:8e:81:a1:ec:63:15:a1:
e3:ca:3e:97:57:65:89:32:d7:4d:c0:f8:b7:a0:ac:66:ae:55:
74:89:25:fa:58:46:ae:28:91:4d:27:a7:bc:95:33:9b:4c:99:
7f:f2:c9:da:53:4b:91:18:44:aa:45:77:18:37:86:05:72:5a:
2d:27:52:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 20:12:25 2025 by rpki-client