Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/3/3230332e342e3137302e302f32332d3234203d3e2039343439.roa
File: 3230332e342e3137302e302f32332d3234203d3e2039343439.roa (raw, json)
Hash identifier: Y8US0Ocdq6iuACcuu6blfuO/mWF61f4U7kbk1PWrIBw=
Subject key identifier: 0D:A9:06:CD:B9:E1:8E:FC:BA:C5:0A:E4:0B:4C:0B:8C:85:3A:EA:D2
Certificate issuer: /CN=A911AC370000/serialNumber=B18F989967D30F2509E3D29707C5F85B5F6BDB6F
Certificate serial: 0399C17FAF69CB95335B1B65D1313A3C6516FF01
Authority key identifier: B1:8F:98:99:67:D3:0F:25:09:E3:D2:97:07:C5:F8:5B:5F:6B:DB:6F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/3/3230332e342e3137302e302f32332d3234203d3e2039343439.roa
Signing time: Tue 04 Mar 2025 01:16:03 +0000
ROA not before: Tue 04 Mar 2025 01:11:03 +0000
ROA not after: Tue 03 Mar 2026 01:16:03 +0000
asID: 9449
IP address blocks: 203.4.170.0/23 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:99:c1:7f:af:69:cb:95:33:5b:1b:65:d1:31:3a:3c:65:16:ff:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911AC370000
Validity
Not Before: Mar 4 01:11:03 2025 GMT
Not After : Mar 3 01:16:03 2026 GMT
Subject: CN=0DA906CDB9E18EFCBAC50AE40B4C0B8C853AEAD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:13:08:4a:64:12:94:25:fe:b1:54:b4:75:bf:
81:69:aa:ee:80:15:44:ab:62:3f:29:7d:12:66:fb:
48:46:a9:09:93:1a:1d:24:25:b1:4f:52:d0:3b:9e:
2d:0b:ba:aa:f9:7e:06:67:1f:c2:2e:e6:bb:7c:87:
16:4e:a5:5b:48:4f:12:62:f7:16:dd:d4:d0:f6:7e:
3f:a3:93:7b:05:18:e2:63:68:a5:04:fe:19:b2:34:
a0:ee:32:8e:62:f1:98:5e:2c:9d:2d:3d:ab:d7:a5:
69:9e:27:7b:e0:c5:67:f9:99:13:73:e4:06:86:90:
1b:38:cd:19:12:99:26:95:8a:ea:21:dd:0d:44:3e:
0a:b2:2e:7a:43:cd:4e:aa:6d:8d:3d:f5:86:1d:5e:
53:3c:c1:21:a3:be:c0:cb:01:0e:7c:14:4d:96:d7:
3e:06:98:a6:40:a8:c4:20:b9:a0:5d:06:c3:4e:cc:
56:ff:4b:07:dd:65:df:e7:e2:18:af:2c:48:a9:f8:
c4:be:06:ca:d2:fb:ba:89:b7:53:90:b8:a0:59:ed:
99:fe:31:ec:63:b2:35:a7:51:eb:48:b2:99:55:fb:
3b:e1:88:da:1b:35:c9:ed:c2:87:59:1e:7f:7b:cf:
72:23:70:53:ee:21:5b:c5:f7:98:90:c8:61:1c:04:
68:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A9:06:CD:B9:E1:8E:FC:BA:C5:0A:E4:0B:4C:0B:8C:85:3A:EA:D2
X509v3 Authority Key Identifier:
keyid:B1:8F:98:99:67:D3:0F:25:09:E3:D2:97:07:C5:F8:5B:5F:6B:DB:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/3/3230332e342e3137302e302f32332d3234203d3e2039343439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.4.170.0/23
Signature Algorithm: sha256WithRSAEncryption
e0:56:59:96:1a:24:80:4a:7f:a7:2b:9a:d3:f5:f1:2c:97:4c:
e0:26:ff:f1:5c:82:b2:27:7a:ee:89:02:76:e7:c7:3c:0f:e7:
6a:8a:66:92:2f:31:18:26:f4:bc:d5:83:c1:a1:78:9d:6c:56:
17:18:4b:cb:80:9b:87:fb:2a:3b:48:b8:d6:a9:cf:65:6c:3b:
67:10:c8:50:86:71:88:97:c6:30:79:bf:c4:a1:67:36:fe:a2:
6f:c9:38:71:45:1c:ed:00:2b:2b:d7:75:b1:de:fc:a2:0a:f7:
5d:48:3a:5f:f8:19:10:f8:19:c5:c7:a6:e5:f3:78:36:65:0c:
12:82:72:39:1a:55:38:b4:9b:9f:c5:f0:8a:56:97:54:1c:c2:
35:c0:3c:c4:fb:25:71:04:12:16:05:c9:76:91:89:7c:c2:53:
2f:a8:80:ff:6e:fd:2a:b4:62:60:cd:01:55:d4:75:52:2b:38:
50:57:ac:d6:52:a2:6d:96:d3:64:46:57:79:ef:8e:ea:20:9f:
5d:c1:65:ff:7a:df:ba:b7:5e:0b:1e:d0:d4:0e:8f:5d:9b:b7:
b2:12:9a:68:e0:1b:5b:d7:28:78:0e:bd:b1:79:c7:a9:88:99:
e6:94:e8:af:c8:12:1c:c4:23:30:d2:09:03:6c:00:9f:4d:9b:
89:97:48:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:14:29 2025 by rpki-client