Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/4/3130332e36302e3230302e302f32322d3234203d3e2037353436.roa
File: 3130332e36302e3230302e302f32322d3234203d3e2037353436.roa (raw, json)
Hash identifier: 7Xv6tB9T/KjUN8TySusNpmGTsOOvyBlLXRnYBKe44dU=
Subject key identifier: 41:B0:7F:A2:F9:6D:55:A6:D1:8B:CD:8E:2E:47:92:F9:49:69:68:EA
Certificate issuer: /CN=A91E539C0000/serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4
Certificate serial: 183D8017B61CE26E2E8CA046D01C3B1AC94BB691
Authority key identifier: B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/4/3130332e36302e3230302e302f32322d3234203d3e2037353436.roa
Signing time: Sun 03 Nov 2024 05:08:54 +0000
ROA not before: Sun 03 Nov 2024 05:03:54 +0000
ROA not after: Sun 02 Nov 2025 05:08:54 +0000
asID: 7546
IP address blocks: 103.60.200.0/22 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:3d:80:17:b6:1c:e2:6e:2e:8c:a0:46:d0:1c:3b:1a:c9:4b:b6:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E539C0000/serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4
Validity
Not Before: Nov 3 05:03:54 2024 GMT
Not After : Nov 2 05:08:54 2025 GMT
Subject: CN=41B07FA2F96D55A6D18BCD8E2E4792F9496968EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:64:0d:21:09:9c:64:43:f5:33:5b:e1:68:93:
71:26:2e:9b:f4:65:cd:d5:95:b2:58:29:f3:bc:e6:
8e:e6:33:55:f9:58:11:5c:df:7c:9a:a1:21:3e:f8:
5d:28:df:00:e8:40:07:79:76:94:04:fd:07:5b:01:
dd:d9:22:46:25:a2:38:f9:3f:bb:ef:c0:b1:58:e3:
b2:d1:29:a6:8b:26:0f:e1:fa:3b:16:2f:95:7c:01:
7a:31:cd:4b:d4:ee:8b:a4:ae:aa:66:1d:d9:17:e5:
be:a7:4e:6f:cc:d9:21:ae:b7:4a:e1:64:69:89:17:
37:69:69:a5:1d:9f:df:35:fa:76:85:24:7a:7a:69:
ca:86:7a:73:22:cc:10:d1:33:29:63:6d:83:be:cf:
be:83:54:44:e5:0c:30:de:19:34:eb:84:48:01:10:
0c:00:27:26:87:81:d1:a5:bd:73:0d:ac:0c:1e:ab:
3c:7b:6d:43:60:c6:2b:e4:94:00:b8:06:77:ba:cb:
05:00:48:f0:7b:6d:dc:b1:24:af:d1:4f:21:1e:0e:
52:0b:8c:15:72:ba:26:25:b3:9b:ee:6c:7f:01:d1:
54:f4:eb:2b:c4:ad:fd:9d:36:c4:db:15:45:96:13:
00:e6:4d:4e:5d:61:de:a2:d1:a6:b9:43:f7:06:1d:
03:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B0:7F:A2:F9:6D:55:A6:D1:8B:CD:8E:2E:47:92:F9:49:69:68:EA
X509v3 Authority Key Identifier:
keyid:B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/3130332e36302e3230302e302f32322d3234203d3e2037353436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.60.200.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:57:5f:3d:1c:fc:bd:0c:db:88:60:3c:7f:85:e7:cb:97:fb:
e9:04:0b:67:28:3d:77:63:fa:75:3e:0e:37:42:8d:9c:ae:d8:
f5:83:46:c6:e1:0d:60:d5:3a:29:6d:78:24:28:29:3f:df:21:
7d:14:cb:99:67:89:8d:a9:98:6a:02:10:d9:1d:9f:43:a2:02:
12:75:2b:90:6e:c9:27:71:6c:db:8b:b9:96:ec:32:34:b3:f9:
47:24:d0:59:27:12:5f:47:9e:67:42:42:57:a9:99:17:54:c5:
03:5b:1d:3c:8c:d0:0e:e3:8b:a2:d2:56:79:eb:79:47:35:63:
fe:da:82:0d:ad:81:e4:cc:40:6c:39:b1:e4:91:57:6e:8f:e8:
68:39:b6:cf:cf:61:5b:cf:f6:7b:62:71:d4:9a:1a:24:31:b1:
df:34:df:b6:75:b0:14:29:7d:8a:84:5e:de:e0:68:77:d2:0e:
2b:63:8d:67:f1:fb:80:f8:60:ef:3d:1f:03:31:21:13:09:bb:
bd:0d:cb:cb:af:87:89:9b:09:c2:b2:24:c2:d8:0a:49:94:e8:
c7:33:5c:e6:3a:7b:93:11:88:c1:e4:f5:55:42:3c:80:76:09:
88:b5:05:8c:23:f9:4a:41:db:dc:11:a1:40:01:4c:9e:45:5e:
70:86:96:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 4 10:08:01 2024 by rpki-client on console-fra.rpki-client.org