Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3133302e302f32342d3234203d3e20313531313036.roa
File: 3130332e3233382e3133302e302f32342d3234203d3e20313531313036.roa (raw, json)
Hash identifier: jHJxFEmDKUe2EPjbWcOLzV9LPmr1X1VjgRAMMGlG0Mw=
Subject key identifier: 54:4D:9F:78:F9:82:B1:A7:9F:3B:AA:91:86:70:11:9B:85:64:34:0F
Certificate issuer: /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Certificate serial: 69BCE6559C527666286B0A7DB54594F74CDF20A9
Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3133302e302f32342d3234203d3e20313531313036.roa
Signing time: Fri 21 Feb 2025 06:33:32 +0000
ROA not before: Fri 21 Feb 2025 06:28:32 +0000
ROA not after: Fri 20 Feb 2026 06:33:32 +0000
asID: 151106
IP address blocks: 103.238.130.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:bc:e6:55:9c:52:76:66:28:6b:0a:7d:b5:45:94:f7:4c:df:20:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A61310000
Validity
Not Before: Feb 21 06:28:32 2025 GMT
Not After : Feb 20 06:33:32 2026 GMT
Subject: CN=544D9F78F982B1A79F3BAA918670119B8564340F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d6:e6:ef:9c:62:eb:a3:c4:51:d8:69:5d:3a:
35:ed:6b:54:c3:2c:dd:cc:6b:33:3f:c8:ce:fe:75:
d6:d7:11:70:ee:b5:46:69:77:44:ac:5f:27:0e:25:
a3:00:49:55:32:c3:3f:97:43:37:01:71:ac:38:c1:
a2:f7:f6:8f:51:e1:68:f0:ee:e1:35:72:58:83:34:
ec:f7:4b:59:2c:1d:79:34:dd:00:40:df:a9:75:2a:
e0:65:28:fb:b8:57:7c:ab:8a:b6:3f:35:42:48:75:
96:a3:04:bd:0e:5c:09:84:00:c5:e9:9c:6a:5f:4f:
23:bc:2b:de:64:3b:f1:9e:cf:69:b7:9c:0e:64:34:
c8:86:77:f3:48:4d:55:cd:2e:53:41:7c:dd:04:61:
c4:ac:a8:ed:be:ff:19:6b:f8:1e:61:88:31:13:f7:
ec:19:98:d1:3c:5a:f1:9e:14:7f:72:34:cb:d8:0d:
51:d1:f8:cf:f3:c6:4e:2d:12:a3:0a:88:82:91:ef:
50:33:45:0a:f5:19:98:62:fd:ad:29:78:a8:06:e9:
d6:51:92:1c:cf:03:0c:fd:96:51:01:04:ac:bd:7a:
67:65:c2:55:0b:1e:7b:7e:e9:21:5c:7d:8b:54:dd:
87:2d:22:b9:27:05:5d:e5:8a:1b:7e:63:1d:5b:a4:
7a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:4D:9F:78:F9:82:B1:A7:9F:3B:AA:91:86:70:11:9B:85:64:34:0F
X509v3 Authority Key Identifier:
keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3133302e302f32342d3234203d3e20313531313036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.238.130.0/24
Signature Algorithm: sha256WithRSAEncryption
38:89:70:3e:a7:4f:41:4c:70:24:81:f4:03:1e:26:4e:b3:8f:
0b:98:69:aa:a4:f4:3b:a1:1c:98:c4:f2:1a:a4:7e:06:cc:e1:
28:e4:b6:9f:5c:06:35:d2:f4:e6:d3:dc:1e:b9:2e:57:06:0d:
43:ff:92:ee:e0:ac:a4:3b:33:da:1b:fd:59:b9:1d:71:61:5d:
4b:da:c1:e7:3a:e9:4e:d9:6f:6b:17:7c:e5:44:c3:6f:28:f0:
e8:d6:3b:1d:60:c9:9f:4e:09:77:e1:bf:1f:74:55:46:f1:43:
bd:4b:54:92:bd:f2:c4:f8:69:7a:f1:22:5e:cf:fe:fc:92:81:
c9:1a:11:76:39:2a:e2:61:53:4d:1d:d7:a6:7d:3e:6b:31:8c:
0f:d3:fa:1e:71:39:c1:fb:f4:4a:2c:13:fc:09:5f:27:be:0d:
96:0d:61:80:61:76:84:c7:03:b6:45:14:c4:88:24:3c:5d:34:
c9:82:5a:d0:32:58:b5:c2:3b:0d:ce:dc:89:0f:b8:e8:e8:43:
7e:38:3c:23:27:26:6e:dc:e5:6c:cc:d4:a6:98:43:40:6c:72:
ad:98:17:a0:28:db:c1:7d:2d:db:aa:7b:05:b6:21:3f:e9:08:
91:0d:57:59:08:50:97:67:bb:d1:65:5d:cc:8b:16:54:4c:af:
ef:1f:62:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:00:40 2025 by rpki-client