Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/0/3130332e3136302e3131362e302f32342d3234203d3e2039343439.roa
File: 3130332e3136302e3131362e302f32342d3234203d3e2039343439.roa (raw, json)
Hash identifier: +17vx779yAl9Bj++Q7UCMilyLMTiEZ3bNuxHgYhKN+4=
Subject key identifier: 55:A6:8E:1C:56:0E:31:4E:71:FF:15:2D:77:BD:DB:6A:53:87:F2:B4
Certificate issuer: /CN=A91905300000/serialNumber=30356EF46D594DA57C7697011183ACFFE04613E0
Certificate serial: 7FD8868A0A277E07C2FD2A779CDBA44D841DDEB3
Authority key identifier: 30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/0/3130332e3136302e3131362e302f32342d3234203d3e2039343439.roa
Signing time: Sun 01 Jan 2023 03:43:38 +0000
ROA not before: Sun 01 Jan 2023 03:38:38 +0000
ROA not after: Sun 31 Dec 2023 03:43:38 +0000
asID: 9449
IP address blocks: 103.160.116.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:d8:86:8a:0a:27:7e:07:c2:fd:2a:77:9c:db:a4:4d:84:1d:de:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91905300000/serialNumber=30356EF46D594DA57C7697011183ACFFE04613E0
Validity
Not Before: Jan 1 03:38:38 2023 GMT
Not After : Dec 31 03:43:38 2023 GMT
Subject: CN=55A68E1C560E314E71FF152D77BDDB6A5387F2B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e5:b3:f9:b3:61:ff:5c:bf:52:d1:e7:0b:51:
1a:38:6e:e5:bd:7e:66:07:76:eb:8c:b3:6a:18:84:
36:a8:b5:e1:97:25:0c:45:3e:3c:6b:a7:a4:c5:85:
78:ea:7e:8f:29:2d:a8:35:08:f5:aa:f6:9c:23:d9:
c3:19:0b:e9:33:15:47:c1:23:c8:0c:75:3c:7e:2c:
df:22:ed:cd:07:a8:a2:50:44:14:e3:9d:48:9d:49:
85:cb:67:0e:94:47:1c:a2:5f:f6:a1:3b:67:fe:36:
47:8d:5f:1b:d9:be:73:c6:7d:31:bf:06:39:2f:a1:
97:aa:b0:04:33:22:6c:66:9a:7c:09:3a:5e:55:ce:
49:54:f1:26:38:4c:4c:34:57:36:e9:96:5e:71:44:
ae:a2:a1:08:5b:fe:d8:8d:89:2a:25:b1:c8:81:7f:
4a:82:9d:c4:1f:43:31:cc:aa:64:34:59:31:22:e3:
4a:4d:fe:af:da:e3:e0:50:ed:98:87:d9:5e:ea:85:
0b:23:bf:a8:aa:6f:dd:7c:e9:da:47:2c:ab:4a:53:
4a:9e:55:a6:62:a3:e5:6a:bd:92:58:11:ba:36:81:
66:9a:d3:b4:34:a0:73:41:44:d9:26:5e:a4:bd:38:
0b:f0:3f:f2:49:c4:a6:dd:b0:c6:ae:86:fb:0f:6d:
94:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A6:8E:1C:56:0E:31:4E:71:FF:15:2D:77:BD:DB:6A:53:87:F2:B4
X509v3 Authority Key Identifier:
keyid:30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/3130332e3136302e3131362e302f32342d3234203d3e2039343439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.160.116.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:97:03:ec:6b:fe:12:35:d0:a6:41:ce:a0:d8:f7:29:8d:60:
99:d9:7b:77:ff:e5:1f:c6:fb:42:1b:98:4e:04:de:39:95:e4:
74:7c:16:53:04:ba:74:57:a2:77:84:a6:c1:86:40:4b:75:d8:
b2:0e:69:4b:a9:dc:ea:69:2f:4a:13:6f:25:0b:03:94:c5:d0:
6c:1b:8e:bf:b9:cb:07:9a:ac:8c:08:11:2e:16:2c:74:c4:04:
b6:2f:d5:9b:2a:76:63:9b:19:42:7d:ba:48:fd:50:4a:8a:01:
58:1e:5f:64:57:91:a9:f2:1c:cc:c6:ee:09:2f:05:d9:ec:41:
53:09:83:8f:9d:66:f1:c8:56:2d:7a:6d:f6:47:ad:ba:19:e3:
bd:bf:6d:62:2a:64:6e:5d:6a:07:c4:3b:e9:fb:5d:5f:ae:3a:
42:97:4b:e8:c4:36:35:d7:a5:35:f4:98:dc:69:9b:2d:54:94:
c8:75:67:b2:78:62:57:82:4e:73:ac:0f:a9:c8:eb:0a:9e:33:
27:ad:cf:5e:63:2e:96:67:a0:ab:92:b5:b3:85:24:cb:0b:75:
4a:67:22:56:f3:cc:2a:f4:96:fc:f6:6b:3f:e6:15:f3:77:94:
e3:5e:e0:8f:f9:97:af:ff:7a:9d:13:58:0d:21:af:be:41:51:
1b:13:16:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:24 2024 by rpki-client on console-fra.rpki-client.org