Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/0/3130332e3136302e3131362e302f32332d3234203d3e2039343439.roa
File: 3130332e3136302e3131362e302f32332d3234203d3e2039343439.roa (raw, json)
Hash identifier: V65t3qYEGbB95hU6CB69RKYBZX60qujWmWdv9lMxpNQ=
Subject key identifier: F5:8B:7A:91:36:C6:71:5E:17:A9:2D:65:50:59:B0:4F:FC:D4:0C:CD
Certificate issuer: /CN=A91905300000/serialNumber=30356EF46D594DA57C7697011183ACFFE04613E0
Certificate serial: 6DE8621D86508C71DC287123E28FDDB8F311A907
Authority key identifier: 30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/0/3130332e3136302e3131362e302f32332d3234203d3e2039343439.roa
Signing time: Fri 19 Jan 2024 00:33:56 +0000
ROA not before: Fri 19 Jan 2024 00:28:56 +0000
ROA not after: Fri 17 Jan 2025 00:33:56 +0000
asID: 9449
IP address blocks: 103.160.116.0/23 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:e8:62:1d:86:50:8c:71:dc:28:71:23:e2:8f:dd:b8:f3:11:a9:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91905300000/serialNumber=30356EF46D594DA57C7697011183ACFFE04613E0
Validity
Not Before: Jan 19 00:28:56 2024 GMT
Not After : Jan 17 00:33:56 2025 GMT
Subject: CN=F58B7A9136C6715E17A92D655059B04FFCD40CCD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:a7:77:a4:cc:f7:7b:e2:a6:5d:8e:6c:85:4a:
3b:a3:05:40:ac:7f:b5:f5:63:6f:26:e9:6a:ea:85:
20:1a:c4:5f:56:b9:6f:f5:72:0b:cc:2a:00:5f:93:
11:93:9b:5b:3d:b8:39:5f:54:48:af:b6:86:cf:f1:
b6:ac:4a:ad:c2:a1:81:ea:25:20:75:e8:85:db:02:
98:84:d9:a3:ba:eb:96:39:99:a2:ca:38:5a:d6:be:
fe:1d:ac:35:96:80:f3:bc:c8:5b:b6:6a:cf:bd:22:
fb:91:b9:40:ea:81:57:d4:d7:b0:9a:73:5b:a2:d2:
c4:cd:29:d8:c1:e2:19:ca:b4:9c:38:24:a2:0f:f8:
b5:ff:c0:3a:b0:dd:bd:99:78:99:df:ac:e7:8c:91:
a7:46:a9:ee:99:70:dd:32:54:e1:20:0e:dd:86:ac:
6a:1b:00:2a:e4:ed:22:a6:2f:75:db:63:54:02:af:
cb:a0:63:76:e5:4a:bc:7a:ad:8c:9c:e7:34:27:2b:
26:e6:96:1f:c3:a1:d2:81:a4:ae:fc:29:b7:8b:a3:
64:36:bf:b8:9d:a6:09:ea:bd:d6:bf:01:5a:fa:a7:
92:08:94:00:95:ad:8d:36:9d:65:9e:a6:e9:73:65:
a9:e9:ec:f6:12:5e:35:a8:c4:d8:ce:43:54:94:5e:
c7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:8B:7A:91:36:C6:71:5E:17:A9:2D:65:50:59:B0:4F:FC:D4:0C:CD
X509v3 Authority Key Identifier:
keyid:30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/3130332e3136302e3131362e302f32332d3234203d3e2039343439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.160.116.0/23
Signature Algorithm: sha256WithRSAEncryption
46:a4:30:1f:85:3a:61:95:5e:82:d0:f4:74:b9:0e:b8:b1:e0:
0e:05:b7:c6:b0:6a:e5:cd:26:51:9e:11:37:7c:2d:ed:3e:d9:
f2:9c:45:50:c4:d7:e8:6e:56:ad:fd:78:37:18:be:05:2a:50:
61:89:1e:52:9c:dc:38:f6:76:d9:0f:12:e9:68:69:bb:84:8d:
be:fa:f7:40:9d:41:56:3d:4e:24:a6:a8:a5:72:49:a8:8b:0f:
8e:4e:60:04:6e:60:38:54:e4:c7:e6:c1:68:a9:aa:34:cb:af:
2e:fe:58:d6:c4:53:a2:53:30:4f:8a:00:db:7a:03:df:7f:71:
b0:54:c4:6b:f1:1d:80:d6:12:23:e4:20:a8:31:02:a1:1e:1d:
16:78:bc:5f:eb:d5:1b:88:c6:a4:7e:20:dc:cf:b4:73:bb:df:
ba:0b:da:73:2d:08:02:34:a7:9b:86:00:84:9d:cc:8f:c2:bc:
1f:e6:59:19:77:6c:0e:6c:2c:5e:49:1f:7a:35:79:61:b1:c0:
49:66:8f:39:bd:c5:68:59:1b:b9:91:5d:36:bf:0b:10:5e:d5:
53:bb:0d:73:94:62:47:e5:bb:41:82:7d:7e:bf:87:2e:31:d8:
b6:72:28:e1:be:20:6b:5c:14:78:fe:5e:29:71:70:8f:a8:ae:
91:c7:70:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 06:07:42 2024 by rpki-client on console-fra.rpki-client.org