Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/4/3132322e39392e3132302e302f32322d3234203d3e2037353436.roa
File: 3132322e39392e3132302e302f32322d3234203d3e2037353436.roa (raw, json)
Hash identifier: xpwTWZBP7/eHtTbqk9F/apgXLOcT+0v7j0EpR9aSWOI=
Subject key identifier: 5B:F9:11:E0:98:80:1A:74:1D:67:5E:3C:CF:1F:E4:A1:4D:94:F5:D9
Certificate issuer: /CN=A91E539C0000/serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4
Certificate serial: 0EE560CBAA389FE1530CD1297F1D82FAC5B51614
Authority key identifier: B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/4/3132322e39392e3132302e302f32322d3234203d3e2037353436.roa
Signing time: Sun 03 Nov 2024 05:08:53 +0000
ROA not before: Sun 03 Nov 2024 05:03:53 +0000
ROA not after: Sun 02 Nov 2025 05:08:53 +0000
asID: 7546
IP address blocks: 122.99.120.0/22 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:e5:60:cb:aa:38:9f:e1:53:0c:d1:29:7f:1d:82:fa:c5:b5:16:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E539C0000/serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4
Validity
Not Before: Nov 3 05:03:53 2024 GMT
Not After : Nov 2 05:08:53 2025 GMT
Subject: CN=5BF911E098801A741D675E3CCF1FE4A14D94F5D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fd:00:cd:6e:11:bb:10:e8:bd:da:f2:81:8c:
92:7d:b0:db:2e:f9:f0:84:27:2c:31:d4:64:64:d3:
ec:79:ff:70:af:1b:3a:29:22:ed:05:28:a4:ea:73:
e4:1b:28:f9:27:b8:49:1c:16:3d:f9:50:47:57:84:
45:3e:4e:77:7b:83:e0:58:ba:69:04:f0:b5:70:6f:
8f:f1:9d:60:50:bd:44:b5:27:3c:e2:60:f3:7e:06:
ab:e0:e2:6f:92:36:f6:a5:48:ad:e5:e6:4d:34:d7:
0d:0b:3d:95:7b:e6:7e:6e:ea:35:86:40:d9:76:ae:
a2:6c:4f:90:84:a5:fe:a6:fd:ea:b5:fe:9f:4a:ef:
b9:59:4c:21:c0:3d:c9:aa:e5:40:9a:f8:c4:d0:25:
12:99:54:c4:fe:30:d0:63:32:ed:9d:a6:49:25:79:
c3:83:40:74:5b:95:ca:78:e7:af:8f:08:51:00:12:
c0:c6:58:13:49:c0:74:50:e2:06:b3:cb:2a:eb:65:
5a:fc:67:d3:2d:77:69:df:74:89:a3:b0:1e:b6:56:
21:b1:ea:be:ad:8f:34:e6:db:48:14:77:c4:94:e1:
02:9e:2b:a4:ee:4a:1b:02:02:12:9d:2d:b3:b6:2d:
f8:14:75:1b:bd:91:f1:bf:66:39:ef:30:3a:fb:aa:
b6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F9:11:E0:98:80:1A:74:1D:67:5E:3C:CF:1F:E4:A1:4D:94:F5:D9
X509v3 Authority Key Identifier:
keyid:B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/3132322e39392e3132302e302f32322d3234203d3e2037353436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.99.120.0/22
Signature Algorithm: sha256WithRSAEncryption
48:f7:13:c7:ce:e6:2d:a6:29:d7:e3:7d:78:aa:8a:8b:69:c1:
5d:b7:2a:c9:7a:01:93:b7:19:e3:7a:7b:27:35:5f:8e:a7:6a:
a3:e0:68:0c:f9:82:32:53:1a:06:e3:a8:e7:8c:54:2e:b0:a6:
c7:a4:4d:2c:68:1f:b8:a5:20:ed:8d:ed:98:b7:1e:15:f7:e3:
75:d8:82:14:d5:17:d9:10:83:22:d9:79:d6:98:89:96:7a:0c:
ec:1c:a7:20:03:50:ef:99:e7:79:7a:b9:31:fa:19:b6:d1:86:
a4:bc:1c:5b:66:24:df:d1:ce:91:f1:58:c5:4e:6d:e5:b0:7e:
58:9b:af:15:2a:e9:d6:57:4f:d7:77:23:ac:a9:cc:92:fc:41:
c4:08:d6:c4:ed:af:16:9c:4b:3b:93:4c:a1:8d:fd:35:e4:43:
a9:b3:36:3d:25:a5:91:b2:4a:04:a5:6a:76:a2:92:5c:3c:07:
08:e7:3e:c8:d6:6a:f8:f8:ab:23:62:a3:33:a3:e9:9a:ef:9d:
4c:a1:15:ad:20:4b:c5:be:a3:23:50:62:96:97:fc:ed:7c:a7:
1f:06:75:c0:51:42:fc:ad:c3:fa:a7:31:d5:4e:83:52:11:9a:
70:0d:35:78:52:de:67:eb:1d:e3:01:b6:59:97:4d:5e:bf:0b:
36:99:8f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 4 11:00:41 2024 by rpki-client on console-ams.rpki-client.org