Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/4/3130332e36302e3230302e302f32322d3234203d3e2037353436.roa
File: 3130332e36302e3230302e302f32322d3234203d3e2037353436.roa (raw, json)
Hash identifier: kncx0QitZHv7BHcL9ZgGiQ43RImCDqGCY5zXkESPUjE=
Subject key identifier: CA:DD:28:E1:10:F7:DD:2E:06:60:0D:47:75:7E:48:8D:36:E6:FB:3D
Certificate issuer: /CN=A91E539C0000/serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4
Certificate serial: 5CC0E2B3DA300D9A97C3E0B5C91234F2C5E62029
Authority key identifier: B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/4/3130332e36302e3230302e302f32322d3234203d3e2037353436.roa
Signing time: Sun 03 Dec 2023 04:12:02 +0000
ROA not before: Sun 03 Dec 2023 04:07:02 +0000
ROA not after: Sun 01 Dec 2024 04:12:02 +0000
asID: 7546
IP address blocks: 103.60.200.0/22 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:c0:e2:b3:da:30:0d:9a:97:c3:e0:b5:c9:12:34:f2:c5:e6:20:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E539C0000/serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4
Validity
Not Before: Dec 3 04:07:02 2023 GMT
Not After : Dec 1 04:12:02 2024 GMT
Subject: CN=CADD28E110F7DD2E06600D47757E488D36E6FB3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:72:23:0a:d7:77:46:34:ab:2d:0b:58:ed:34:
62:fa:1e:f6:d1:13:2f:b9:40:a0:b4:c4:36:41:57:
d5:78:f4:02:89:17:55:d8:db:90:6a:33:e8:1a:9e:
7d:7e:44:13:62:c7:3f:8b:48:bd:b5:42:36:c4:56:
b2:aa:f0:a1:a0:32:07:26:6d:69:8e:15:a8:07:3b:
d2:36:70:6f:7b:68:58:e3:3d:72:11:a6:c3:ab:f7:
1c:7c:fe:a1:8a:d8:01:7d:90:cd:1c:99:f3:42:e8:
94:91:95:38:55:6c:1c:78:44:7b:b9:4e:c1:13:92:
7f:ba:08:6d:fe:b1:98:59:40:85:a8:c4:32:f7:73:
3c:8e:67:f6:52:25:03:eb:0a:79:16:0a:ae:60:3b:
d0:8a:14:09:70:ee:20:1a:74:a1:88:c1:f8:2d:85:
fa:5e:ce:3d:51:30:f7:3c:48:de:49:27:0e:88:da:
18:7a:a5:a2:1d:60:91:75:de:69:7b:da:5b:fb:2d:
f0:58:ee:8a:fe:66:e8:38:7d:aa:2e:71:a9:90:b9:
36:c5:5a:c5:ef:47:50:72:f1:ad:f0:b1:cd:fe:6f:
b6:a5:d3:67:82:fa:9d:b3:b1:07:6e:04:9e:07:88:
a4:9a:26:7b:94:ff:2f:3b:e5:a7:d7:aa:74:85:55:
1f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:DD:28:E1:10:F7:DD:2E:06:60:0D:47:75:7E:48:8D:36:E6:FB:3D
X509v3 Authority Key Identifier:
keyid:B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/3130332e36302e3230302e302f32322d3234203d3e2037353436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.60.200.0/22
Signature Algorithm: sha256WithRSAEncryption
61:63:21:4e:a0:d3:2e:dd:59:4d:c1:1b:97:3b:dc:0a:77:db:
91:b5:fd:e6:0b:5d:d2:02:0a:c0:98:63:39:8c:8d:84:31:f2:
da:8e:4b:ae:c4:af:4a:dd:4a:a0:18:9c:57:db:8d:02:87:a9:
39:8c:0c:e0:0e:b2:46:be:7a:46:62:1b:50:34:44:2b:47:f2:
7f:0e:20:80:b2:1d:0b:93:38:76:15:9b:db:a0:89:33:9b:84:
1d:66:47:c5:d6:5a:d2:fe:23:0a:e2:61:11:83:04:ae:a6:59:
bf:43:a9:82:47:c9:c8:93:e7:2d:ca:b1:4a:fd:6a:d8:90:1d:
5b:6c:48:40:ce:2d:9b:d2:68:9e:ec:55:77:bf:ca:ab:7c:96:
07:03:e4:ab:da:be:a1:5a:ec:30:f8:4e:e6:27:4e:7a:7f:7b:
3c:af:27:a4:a3:b6:b2:55:01:50:be:62:12:0f:b4:32:5b:19:
7e:b5:28:7f:98:58:19:6b:46:a5:82:93:c9:79:b1:97:68:46:
6d:f6:e7:c9:89:2e:ce:85:e9:e8:b9:40:86:ea:fb:fb:75:09:
53:c0:2e:c1:59:c6:04:ac:c4:27:f3:e6:ff:56:61:ed:ed:5e:
32:b5:47:76:26:b8:63:f2:f2:14:8e:c4:d1:1f:61:e3:13:c3:
6b:68:de:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 10:27:39 2024 by rpki-client on console-ams.rpki-client.org