Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/0/3130332e3136302e3131372e302f32342d3234203d3e203130323134.roa
File:                     3130332e3136302e3131372e302f32342d3234203d3e203130323134.roa (raw, json)
Hash identifier:          6vRxzR0C7mFGm3Atb33kyqYfpxFubHOA2vPnldm5NIQ=
Subject key identifier:   11:15:91:4E:7D:F9:50:86:0C:4C:88:05:F0:AE:E5:6A:32:AF:26:41
Certificate issuer:       /CN=A91905300000/serialNumber=30356EF46D594DA57C7697011183ACFFE04613E0
Certificate serial:       14E16F6FA6CCDB5D367C7360867DC4AE52D2BAAD
Authority key identifier: 30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91905300000/0/3130332e3136302e3131372e302f32342d3234203d3e203130323134.roa
Signing time:             Sun 01 Jan 2023 03:43:39 +0000
ROA not before:           Sun 01 Jan 2023 03:38:39 +0000
ROA not after:            Sun 31 Dec 2023 03:43:39 +0000
asID:                     10214
IP address blocks:        103.160.117.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:e1:6f:6f:a6:cc:db:5d:36:7c:73:60:86:7d:c4:ae:52:d2:ba:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91905300000/serialNumber=30356EF46D594DA57C7697011183ACFFE04613E0
        Validity
            Not Before: Jan  1 03:38:39 2023 GMT
            Not After : Dec 31 03:43:39 2023 GMT
        Subject: CN=1115914E7DF950860C4C8805F0AEE56A32AF2641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:35:c9:b3:db:30:fb:a8:3a:0d:15:41:9b:4f:
                    34:0a:34:5e:8d:d7:de:0b:3c:a1:7f:7d:56:36:e0:
                    1f:aa:49:8c:6f:e4:b6:b8:65:fe:5f:9c:f3:4d:f4:
                    70:94:ee:2d:c4:34:b2:be:08:e3:7a:27:ab:9a:ce:
                    f3:2d:34:86:7a:97:36:9f:e9:0b:91:b5:2a:b7:06:
                    61:13:bf:5a:fe:ba:4e:23:be:64:68:01:56:7e:e1:
                    f2:d4:be:0a:17:6a:ad:f5:ff:0c:7a:94:7b:17:76:
                    c5:52:bc:30:0b:bf:fa:e8:f3:e5:d1:68:72:c7:14:
                    96:51:ad:03:d6:d3:c1:55:91:c2:d1:3b:fa:d4:27:
                    8e:c5:9b:12:f4:ae:bb:4c:f7:61:2e:e8:bb:5b:25:
                    82:b1:e3:47:0c:88:30:fc:b2:1c:da:2d:6c:50:b8:
                    dc:3c:0c:c5:88:c2:c4:56:f6:3c:2b:bc:15:4b:ef:
                    e9:2e:a7:09:b8:20:b9:fe:d3:40:20:8f:43:3a:ef:
                    30:91:d0:10:f4:78:57:f6:1c:0b:e2:6f:81:f1:04:
                    c2:eb:e8:57:b9:22:fb:c7:cc:93:47:14:83:c0:66:
                    9a:43:79:ce:c1:07:d9:30:89:66:a5:ff:da:5b:a4:
                    7f:22:ed:4a:a2:4a:cf:cf:7b:0e:b8:3b:24:cb:c9:
                    22:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:15:91:4E:7D:F9:50:86:0C:4C:88:05:F0:AE:E5:6A:32:AF:26:41
            X509v3 Authority Key Identifier:
                keyid:30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/3130332e3136302e3131372e302f32342d3234203d3e203130323134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:2c:c0:08:e3:b4:f9:02:e1:46:0a:47:be:7c:21:d4:10:9e:
         f7:d8:60:e9:d7:a4:5e:67:a5:88:82:83:58:fb:48:b1:61:be:
         02:25:17:bf:96:6b:98:82:be:2e:ed:b8:3e:05:d9:09:0f:01:
         51:1c:99:cc:f5:aa:65:f6:48:cd:bf:ee:0d:34:5f:b4:d9:e4:
         48:d2:79:18:ee:1d:f8:10:1b:30:6a:6d:45:2b:16:dc:20:9a:
         07:8b:c1:93:0a:12:0e:0c:a7:d1:03:44:84:74:8a:79:e1:c5:
         49:0b:e3:78:b9:17:bd:c7:18:69:ad:7d:ec:73:cf:89:03:fd:
         c4:f3:30:fc:f2:02:d4:db:a0:48:a4:d4:4a:72:ad:f4:28:17:
         2e:a3:fb:0f:67:89:b0:85:6f:ff:a9:02:d7:30:38:5d:dc:85:
         72:37:4b:bb:7b:0e:2d:b8:c0:4c:f2:84:17:f2:a6:46:f3:17:
         35:e0:e1:88:3e:91:51:7f:91:5b:7f:f2:a3:be:8f:23:c2:8b:
         58:1e:3f:b0:64:00:1e:9f:e6:60:f9:87:e8:3b:c7:16:b1:f3:
         a8:9d:52:33:1d:87:a7:55:f4:aa:02:b6:23:ca:98:61:37:ed:
         a9:6b:f1:26:fd:65:5a:5c:8b:b9:be:da:2c:26:17:10:2e:11:
         36:98:29:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:24 2024 by rpki-client on console-fra.rpki-client.org