Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/0/3130332e3136302e3131362e302f32332d3234203d3e2039383838.roa
File: 3130332e3136302e3131362e302f32332d3234203d3e2039383838.roa (raw, json)
Hash identifier: M+81RA0IpQfZbEaVoXnR9HL4zNSZdCyWhNKvI02AikY=
Subject key identifier: 7F:51:A7:AB:D3:AE:EC:79:40:5A:7A:4E:73:5C:BD:CB:D5:A2:3E:5F
Certificate issuer: /CN=A91905300000/serialNumber=30356EF46D594DA57C7697011183ACFFE04613E0
Certificate serial: 3DFAC12E696D34F145466ECD0DF83179D29BD656
Authority key identifier: 30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/0/3130332e3136302e3131362e302f32332d3234203d3e2039383838.roa
Signing time: Wed 15 Mar 2023 01:29:03 +0000
ROA not before: Wed 15 Mar 2023 01:24:03 +0000
ROA not after: Wed 13 Mar 2024 01:29:03 +0000
asID: 9888
IP address blocks: 103.160.116.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:fa:c1:2e:69:6d:34:f1:45:46:6e:cd:0d:f8:31:79:d2:9b:d6:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91905300000/serialNumber=30356EF46D594DA57C7697011183ACFFE04613E0
Validity
Not Before: Mar 15 01:24:03 2023 GMT
Not After : Mar 13 01:29:03 2024 GMT
Subject: CN=7F51A7ABD3AEEC79405A7A4E735CBDCBD5A23E5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6d:65:bb:c6:35:15:70:55:cd:7a:21:b6:72:
ad:92:55:13:2e:f5:db:71:69:59:a7:93:da:8f:ec:
50:b8:e1:bb:93:5e:93:08:80:f4:c5:83:17:99:0b:
53:69:bd:34:bf:ac:bf:31:0e:09:a2:35:78:70:aa:
ad:b1:84:e4:b3:6d:d2:46:04:a8:6b:37:62:19:6a:
7b:f6:0d:7e:2c:fa:4e:ba:d8:4e:5f:76:e3:37:c8:
eb:ad:02:67:41:a8:f4:c0:37:ec:ff:ed:1a:32:db:
a3:da:85:d9:66:70:db:c5:f9:20:fe:c3:ba:98:fb:
e2:a3:e7:ca:6b:66:58:45:13:51:e4:91:2e:39:79:
10:b7:01:c8:89:66:b7:db:65:db:03:79:e5:46:84:
7a:0d:ef:52:05:83:08:b2:55:b5:0f:0e:00:55:96:
c6:77:3b:0d:81:94:07:e5:b5:9b:8b:c0:9f:51:48:
a8:6c:d2:78:db:01:b6:b3:2b:70:33:0b:8e:50:28:
7d:00:ac:bf:ea:ec:f3:a3:5d:0a:d1:eb:ff:e0:19:
89:ba:bd:7b:1c:cd:86:53:68:68:03:15:46:af:25:
2a:d8:51:3a:f7:14:fb:a4:09:5f:3a:59:38:d4:49:
32:77:3f:33:43:be:aa:11:2f:19:2c:35:de:1b:95:
45:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:51:A7:AB:D3:AE:EC:79:40:5A:7A:4E:73:5C:BD:CB:D5:A2:3E:5F
X509v3 Authority Key Identifier:
keyid:30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/3130332e3136302e3131362e302f32332d3234203d3e2039383838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.160.116.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:36:20:85:63:5e:6b:48:79:89:47:63:13:e5:1e:2d:87:d2:
0c:ed:7a:4b:7f:c0:94:08:b8:45:2b:4f:b0:7c:ac:8a:3f:42:
d4:cb:1a:3d:62:1a:5e:87:00:72:69:02:4d:cc:a1:a4:38:df:
2a:af:77:e6:c4:fc:ba:90:59:bc:28:2f:83:fc:b6:6a:b4:af:
38:08:12:31:f4:8d:b2:a6:9e:58:98:e7:ee:20:9c:45:94:46:
6c:54:36:00:3c:39:08:56:54:18:30:da:4b:bb:db:dc:96:0c:
5e:2c:33:97:05:15:b9:a0:a2:57:f6:6b:54:39:21:ed:1d:34:
00:9c:70:21:56:02:3d:4a:70:97:53:89:6a:18:9c:0e:07:a5:
b9:76:7b:4f:2b:76:c4:8f:7a:db:58:96:61:fe:d8:8d:62:5a:
11:93:ef:19:ae:61:dc:3f:8f:7a:f5:82:67:ed:0f:21:85:f6:
6d:8b:20:c3:7b:4e:73:8f:ab:32:5e:56:2a:55:4f:d2:46:72:
12:0c:18:e6:ce:1a:20:8d:21:bc:47:87:8a:48:03:03:83:40:
18:90:bf:32:82:79:e2:71:10:85:13:3e:e5:ae:03:c4:cf:d7:
30:d5:64:32:72:03:f6:f3:4b:c8:fb:4f:a0:3a:c5:e7:65:f6:
ae:bd:d4:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:21:04 2025 by rpki-client