Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/0/3130332e3136302e3131362e302f32332d3234203d3e2039383838.roa
File: 3130332e3136302e3131362e302f32332d3234203d3e2039383838.roa (raw, json)
Hash identifier: SEXH3rTr3ODp+cxeCWzzWssiWyunrAWFKrobJPJjdpw=
Subject key identifier: 2E:CD:87:01:CB:F0:61:DE:76:1C:77:BD:E6:77:2E:E8:C9:1F:BE:E1
Certificate issuer: /CN=A91905300000/serialNumber=30356EF46D594DA57C7697011183ACFFE04613E0
Certificate serial: 5FBF6A13AB4CA9498378AC39059D2AA4090AD802
Authority key identifier: 30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/0/3130332e3136302e3131362e302f32332d3234203d3e2039383838.roa
Signing time: Wed 14 Feb 2024 01:40:32 +0000
ROA not before: Wed 14 Feb 2024 01:35:32 +0000
ROA not after: Wed 12 Feb 2025 01:40:32 +0000
asID: 9888
IP address blocks: 103.160.116.0/23 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:bf:6a:13:ab:4c:a9:49:83:78:ac:39:05:9d:2a:a4:09:0a:d8:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91905300000/serialNumber=30356EF46D594DA57C7697011183ACFFE04613E0
Validity
Not Before: Feb 14 01:35:32 2024 GMT
Not After : Feb 12 01:40:32 2025 GMT
Subject: CN=2ECD8701CBF061DE761C77BDE6772EE8C91FBEE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3f:95:8f:87:e4:01:75:a8:53:cf:dc:d3:44:
cf:2a:d1:31:06:8e:17:94:25:a9:ee:d0:9d:5e:e2:
3e:05:e0:cc:dc:f5:6b:87:b1:e9:62:ca:ac:88:17:
b3:76:f0:33:f5:e4:27:31:f6:c7:3a:f9:fc:6a:2e:
12:bc:ba:a4:5a:e6:01:78:48:93:97:7c:2e:73:f7:
02:ed:2c:e6:c5:51:ce:e7:09:4a:58:38:2d:df:4c:
42:c6:88:1d:db:5d:c1:57:83:78:bc:5d:25:9a:fd:
a9:c8:f6:d7:f2:bd:f0:d9:47:a6:a5:ec:ff:de:45:
c0:07:16:14:c3:80:16:39:f1:ee:5b:11:fa:a4:ca:
25:e0:5f:78:78:d3:49:70:b3:59:f5:88:3b:e1:5e:
29:84:77:53:a9:95:df:0c:2a:22:2a:d8:a1:e9:59:
69:d2:19:fa:25:94:a6:63:21:bf:db:be:34:31:d3:
c9:11:ac:b8:49:5e:60:76:85:bd:1e:a2:9c:04:3e:
d1:3b:fd:04:3c:2c:ce:ec:13:68:cb:71:eb:06:75:
43:4e:86:8d:fb:fc:36:3e:53:22:d5:64:f5:ad:73:
c4:c0:6f:f4:0f:7d:95:97:7d:5b:38:e0:7a:ce:90:
8d:1f:24:70:23:c8:48:1b:09:db:69:77:1e:b0:34:
69:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:CD:87:01:CB:F0:61:DE:76:1C:77:BD:E6:77:2E:E8:C9:1F:BE:E1
X509v3 Authority Key Identifier:
keyid:30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/3130332e3136302e3131362e302f32332d3234203d3e2039383838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.160.116.0/23
Signature Algorithm: sha256WithRSAEncryption
19:83:19:ee:67:f5:b7:6e:58:2c:4a:de:53:38:11:20:86:ae:
46:fc:25:5a:cb:4f:35:08:f3:bc:61:30:17:50:71:5c:0b:fb:
ce:a1:6d:58:ce:42:4c:31:91:b3:9d:6a:88:af:e0:b3:f5:68:
8e:1d:1b:9e:c0:3f:39:70:0e:0d:cc:58:af:be:59:74:b3:53:
1e:24:ff:84:e0:e5:ae:44:14:53:2f:44:12:93:a1:a2:62:48:
ed:25:c1:36:dc:d1:c8:34:c4:24:03:63:8d:21:5e:b3:e4:53:
57:e6:9a:cb:47:fb:e1:10:30:e2:93:f9:47:5d:75:68:dd:8b:
1f:46:cb:1d:eb:d9:70:76:f6:bd:6e:41:40:ef:ce:42:88:29:
ee:7c:ea:70:e5:03:8a:14:41:b6:49:9b:fd:7a:cf:07:28:34:
92:ee:7b:e3:90:a2:5b:ab:c1:01:6c:9a:c2:36:a9:cc:7d:82:
65:db:91:8c:cb:2b:33:b2:cf:d1:07:23:34:3a:df:6c:dc:e6:
c5:2a:e3:07:ba:23:63:82:47:a1:db:52:66:e8:ab:a4:32:fe:
e1:cb:98:3a:ca:0c:de:82:0d:19:5a:1c:5b:e6:28:64:1d:49:
f4:bf:ea:40:e2:8c:0f:4b:66:fa:48:c4:82:79:cf:2b:38:6b:
7f:e9:b2:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 06:15:40 2024 by rpki-client on console-ams.rpki-client.org