Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/0/3130332e3136302e3131362e302f32332d3234203d3e2039343439.roa
File: 3130332e3136302e3131362e302f32332d3234203d3e2039343439.roa (raw, json)
Hash identifier: batOurECOmg5G2sj1UILzLS7d5iYVCjrSXPEU7VRxlQ=
Subject key identifier: 28:F7:E3:C9:EE:3F:22:14:F4:31:94:A5:5B:9F:21:E6:32:E5:64:0E
Certificate issuer: /CN=A91905300000/serialNumber=30356EF46D594DA57C7697011183ACFFE04613E0
Certificate serial: 33956C6A1041B29A27E9EB7980F49931BFAEE7F6
Authority key identifier: 30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/0/3130332e3136302e3131362e302f32332d3234203d3e2039343439.roa
Signing time: Fri 17 Feb 2023 00:18:03 +0000
ROA not before: Fri 17 Feb 2023 00:13:03 +0000
ROA not after: Fri 16 Feb 2024 00:18:03 +0000
asID: 9449
IP address blocks: 103.160.116.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:95:6c:6a:10:41:b2:9a:27:e9:eb:79:80:f4:99:31:bf:ae:e7:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91905300000/serialNumber=30356EF46D594DA57C7697011183ACFFE04613E0
Validity
Not Before: Feb 17 00:13:03 2023 GMT
Not After : Feb 16 00:18:03 2024 GMT
Subject: CN=28F7E3C9EE3F2214F43194A55B9F21E632E5640E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:60:d6:e7:b1:ec:79:f0:24:77:7c:c0:0d:07:
cc:ee:c5:50:4a:13:08:3f:fb:e6:4a:d4:b4:a5:5a:
9e:dc:61:91:68:f6:7a:fb:3d:00:87:c1:08:f4:93:
8a:cf:5d:26:dd:d0:b1:a3:ec:f9:eb:7a:67:79:b0:
85:8d:20:d0:0f:a5:53:f7:d9:93:31:33:be:cd:60:
08:96:85:2f:b5:37:f7:8a:7a:11:c9:1a:54:dc:3b:
73:d1:8d:e2:ff:6b:bd:33:27:9c:41:8e:bf:ce:c1:
c2:2d:21:0f:60:28:e3:a2:b6:48:64:65:e7:74:1d:
c5:61:e5:f5:0a:2d:45:c7:b9:64:f0:fc:1a:3c:b9:
f0:9b:64:0d:c3:69:84:28:48:2a:96:c3:cb:df:1a:
27:6f:ea:6f:34:73:51:9d:df:81:e7:99:cb:ed:25:
e8:a9:d4:d8:a9:e6:f6:cc:81:13:52:69:24:97:9a:
0c:67:8d:89:53:0f:ff:70:a9:ae:12:7c:ff:71:67:
6e:7c:49:0c:25:b6:c7:bb:2b:14:6e:6a:e4:0c:f9:
8c:c1:d5:7d:63:4b:35:96:62:d4:51:b7:99:59:1e:
63:32:4a:be:55:1b:00:f1:2a:60:bd:f7:9f:42:e9:
17:07:9b:9c:c4:5e:98:90:0a:35:23:20:44:9d:c2:
94:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F7:E3:C9:EE:3F:22:14:F4:31:94:A5:5B:9F:21:E6:32:E5:64:0E
X509v3 Authority Key Identifier:
keyid:30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/3130332e3136302e3131362e302f32332d3234203d3e2039343439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.160.116.0/23
Signature Algorithm: sha256WithRSAEncryption
28:94:b5:5a:96:24:83:c4:0a:01:19:23:59:3e:fa:bf:eb:6c:
68:50:d0:6c:d2:4e:3a:c1:91:45:86:c9:36:74:4f:2e:aa:88:
76:e0:aa:ca:6b:9e:38:1c:5c:dd:ef:d0:09:b1:a3:e4:21:6a:
40:5f:4c:f0:4e:bb:e2:c3:b5:d3:f4:f1:c8:bc:a7:85:1d:f9:
92:2e:09:97:98:a4:8c:41:57:37:5c:66:46:da:dd:03:55:f8:
48:68:74:83:d3:78:ae:48:65:59:56:d7:29:13:b8:51:84:af:
ed:21:4d:dd:c5:d4:97:be:93:de:af:6b:9f:6d:a5:fc:22:0b:
41:8f:ff:4a:34:51:6b:9d:8b:48:d9:0d:e8:96:91:90:f3:51:
53:45:45:1b:a7:57:a3:bb:c7:a4:6a:89:bc:a1:01:64:1e:a5:
34:19:de:d0:31:1d:8d:81:8a:38:22:d8:45:9f:54:df:fc:8e:
23:1a:87:17:f9:c2:13:f2:23:a6:d4:54:5b:19:b4:60:57:d6:
7c:ef:98:1c:e2:03:9c:c0:fe:c3:d2:f3:98:37:a2:11:8a:51:
e8:05:37:8f:7d:68:7c:8f:db:42:c6:02:54:c7:b0:9a:d1:65:
84:c5:26:7e:72:59:f3:6f:8b:ae:0f:47:90:1a:02:2c:43:f8:
08:57:b5:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:07:07 2025 by rpki-client