Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/0/3130332e3136302e3131362e302f32332d3234203d3e2039383838.roa
File: 3130332e3136302e3131362e302f32332d3234203d3e2039383838.roa (raw, json)
Hash identifier: /+sJT+4M3YxlKiSTmSS+QE+W2EVnE9RJ/vLKVPLkgic=
Subject key identifier: 26:9E:3D:C6:CD:B6:3D:B7:9D:E0:8E:B3:CA:54:63:FA:A6:DF:6D:86
Certificate issuer: /CN=A91905300000/serialNumber=30356EF46D594DA57C7697011183ACFFE04613E0
Certificate serial: 7D2F27440AD0F2FD54C75E6DA37A1902CA576347
Authority key identifier: 30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/0/3130332e3136302e3131362e302f32332d3234203d3e2039383838.roa
Signing time: Wed 15 Jan 2025 02:10:13 +0000
ROA not before: Wed 15 Jan 2025 02:05:13 +0000
ROA not after: Wed 14 Jan 2026 02:10:13 +0000
asID: 9888
IP address blocks: 103.160.116.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:2f:27:44:0a:d0:f2:fd:54:c7:5e:6d:a3:7a:19:02:ca:57:63:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91905300000
Validity
Not Before: Jan 15 02:05:13 2025 GMT
Not After : Jan 14 02:10:13 2026 GMT
Subject: CN=269E3DC6CDB63DB79DE08EB3CA5463FAA6DF6D86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4c:ff:42:2d:c0:15:f2:aa:cf:a4:ed:cb:87:
5a:84:66:9a:c5:83:77:2d:96:ec:4c:21:2c:9f:fd:
d4:6d:8f:b4:79:4a:8d:f6:e1:67:f3:5b:a3:3a:01:
64:dc:d7:83:80:c6:e0:2f:6d:d6:66:d5:74:5f:3d:
0a:dc:45:2b:ab:86:f2:a7:1e:09:e1:8c:1b:fe:f0:
84:bc:2f:eb:c8:dc:c4:6d:7e:50:62:64:53:c8:0c:
41:65:25:5b:a9:da:b9:92:68:26:77:97:c3:7b:7c:
d9:3b:55:92:0a:fa:22:a7:e9:2e:ee:c9:00:17:db:
ad:82:37:65:07:16:3b:38:aa:ed:64:d3:d0:3f:66:
79:3f:c2:79:a6:2e:7e:97:6d:97:e5:e4:90:21:c0:
72:84:f2:8c:fb:8d:c5:41:c8:8b:99:4a:99:e5:e5:
07:6d:27:c7:44:d2:f4:4c:00:22:15:d1:52:1a:60:
01:0b:9d:3c:ec:b2:b7:9b:a4:19:2e:cf:65:8a:3f:
06:d1:41:28:5e:04:b3:ab:d3:68:46:e0:2b:86:31:
3e:95:79:bf:f1:c3:4a:99:de:23:d0:2b:ed:70:d1:
10:f2:01:2e:79:98:28:d8:41:c9:b8:23:c9:b8:ca:
35:c9:84:94:57:6f:92:a1:0a:51:cf:05:be:41:62:
e6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:9E:3D:C6:CD:B6:3D:B7:9D:E0:8E:B3:CA:54:63:FA:A6:DF:6D:86
X509v3 Authority Key Identifier:
keyid:30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/3130332e3136302e3131362e302f32332d3234203d3e2039383838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.160.116.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:9e:72:8e:2a:5c:f2:4e:eb:f3:2a:1f:61:9f:47:7f:ad:ac:
0f:4c:ce:d6:e4:cb:f3:7f:98:aa:3a:7d:90:7c:79:a0:26:54:
8a:4c:25:e2:61:95:bb:a2:6f:c3:c3:d3:2b:72:76:c8:8a:83:
76:65:fe:b1:b0:09:b9:2c:e0:87:51:fd:4e:ca:87:ac:ed:53:
f9:cf:74:10:94:c2:f8:ad:7d:4b:af:ab:1e:be:00:a8:ce:56:
f9:89:3f:22:96:89:eb:7b:bf:20:2c:57:5a:4a:35:e1:dc:1e:
9a:f8:dc:d4:4f:f9:cc:6e:bf:b6:73:f6:50:f6:39:cc:e0:d7:
ca:4b:32:7e:f7:2c:7d:36:6f:8a:8e:ee:91:69:0c:ac:57:e2:
9d:f9:f0:0e:e3:c1:ad:09:a5:5a:b8:a6:92:b0:c5:93:35:a8:
e1:b2:c5:f7:6b:b4:ee:84:58:77:40:46:f0:22:65:d2:91:7e:
0b:35:35:23:e9:bc:e4:6d:e0:c9:d6:35:e5:93:d4:7b:4f:87:
62:db:d4:ba:34:e5:e2:30:6d:48:65:d7:95:77:4a:e4:f3:e3:
69:69:cf:a5:0c:d2:be:e1:0f:bf:48:8e:aa:d1:f3:06:6f:93:
cb:e3:cd:76:04:0a:6d:f6:e1:25:ea:fc:cc:63:75:7c:5f:be:
73:00:e6:b0
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgIUfS8nRArQ8v1Ux15to3oZAspXY0cwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxOTA1MzAwMDAwMTEwLwYDVQQFEygzMDM1NkVGNDZE
NTk0REE1N0M3Njk3MDExMTgzQUNGRkUwNDYxM0UwMB4XDTI1MDExNTAyMDUxM1oX
DTI2MDExNDAyMTAxM1owMzExMC8GA1UEAxMoMjY5RTNEQzZDREI2M0RCNzlERTA4
RUIzQ0E1NDYzRkFBNkRGNkQ4NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKpM/0ItwBXyqs+k7cuHWoRmmsWDdy2W7EwhLJ/91G2PtHlKjfbhZ/NbozoB
ZNzXg4DG4C9t1mbVdF89CtxFK6uG8qceCeGMG/7whLwv68jcxG1+UGJkU8gMQWUl
W6nauZJoJneXw3t82TtVkgr6IqfpLu7JABfbrYI3ZQcWOziq7WTT0D9meT/CeaYu
fpdtl+XkkCHAcoTyjPuNxUHIi5lKmeXlB20nx0TS9EwAIhXRUhpgAQudPOyyt5uk
GS7PZYo/BtFBKF4Es6vTaEbgK4YxPpV5v/HDSpneI9Ar7XDREPIBLnmYKNhBybgj
ybjKNcmElFdvkqEKUc8FvkFi5gUCAwEAAaOCAhEwggINMB0GA1UdDgQWBBQmnj3G
zbY9t53gjrPKVGP6pt9thjAfBgNVHSMEGDAWgBQwNW70bVlNpXx2lwERg6z/4EYT
4DAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvMC8zMDM1NkVG
NDZENTk0REE1N0M3Njk3MDExMTgzQUNGRkUwNDYxM0UwLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9NRFZ1OUcxWlRh
VjhkcGNCRVlPc18tQkdFLUEuY2VyMIGLBggrBgEFBQcBCwR/MH0wewYIKwYBBQUH
MAuGb3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxOTA1
MzAwMDAwLzAvMzEzMDMzMmUzMTM2MzAyZTMxMzEzNjJlMzAyZjMyMzMyZDMyMzQy
MDNkM2UyMDM5MzgzODM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ6B0MA0GCSqGSIb3DQEBCwUAA4IB
AQCKnnKOKlzyTuvzKh9hn0d/rawPTM7W5Mvzf5iqOn2QfHmgJlSKTCXiYZW7om/D
w9MrcnbIioN2Zf6xsAm5LOCHUf1Oyoes7VP5z3QQlML4rX1Lr6sevgCozlb5iT8i
lonre78gLFdaSjXh3B6a+NzUT/nMbr+2c/ZQ9jnM4NfKSzJ+9yx9Nm+Kju6RaQys
V+Kd+fAO48GtCaVauKaSsMWTNajhssX3a7TuhFh3QEbwImXSkX4LNTUj6bzkbeDJ
1jXlk9R7T4di29S6NOXiMG1IZdeVd0rk8+Npac+lDNK+4Q+/SI6q0fMGb5PL4812
BApt9uEl6vzMY3V8X75zAOaw
-----END CERTIFICATE-----
Generated at Mon Apr 7 05:02:29 2025 by rpki-client