Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3133312e302f32342d3234203d3e20313531313036.roa
File: 3130332e3233382e3133312e302f32342d3234203d3e20313531313036.roa (raw, json)
Hash identifier: zZ9adMjyAK6V+yaM2Aa/8/uAbDXUgk34Q/LvbI/Y3H4=
Subject key identifier: 57:97:48:62:19:DC:D2:09:A5:AA:81:84:6E:CC:37:31:6C:D1:A1:07
Certificate issuer: /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Certificate serial: 48BAD10352361FEC5FD48CE81C5669FB3678187E
Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3133312e302f32342d3234203d3e20313531313036.roa
Signing time: Fri 21 Feb 2025 06:33:31 +0000
ROA not before: Fri 21 Feb 2025 06:28:31 +0000
ROA not after: Fri 20 Feb 2026 06:33:31 +0000
asID: 151106
IP address blocks: 103.238.131.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:ba:d1:03:52:36:1f:ec:5f:d4:8c:e8:1c:56:69:fb:36:78:18:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A61310000
Validity
Not Before: Feb 21 06:28:31 2025 GMT
Not After : Feb 20 06:33:31 2026 GMT
Subject: CN=5797486219DCD209A5AA81846ECC37316CD1A107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:3f:59:39:72:91:12:84:ee:0f:05:32:7c:b5:
1d:30:31:8c:11:65:a7:5b:c5:f6:3a:1c:02:f0:2a:
6d:fb:9a:7b:bc:84:60:22:48:6a:37:a4:00:18:bb:
b5:3b:ea:a4:22:db:0f:40:e3:2a:64:a2:f0:28:50:
2a:69:95:f4:5a:69:a3:7b:2c:bd:86:99:fb:fe:7a:
13:bf:90:80:14:35:1c:8a:af:8b:12:fe:b1:54:28:
e4:1b:54:f9:aa:8c:a2:1f:30:5b:5e:a4:85:fc:4b:
e0:e2:9f:bf:7e:7b:4d:6c:43:7b:97:15:af:0e:65:
97:93:4b:6c:a7:06:80:52:b4:3d:74:81:ab:fd:5f:
45:e0:22:e4:b5:21:83:45:33:70:26:47:40:30:49:
ca:30:2a:b1:33:72:e9:7e:0f:aa:01:15:5f:70:99:
93:34:34:6d:aa:9c:6b:0d:c9:c2:76:de:15:8f:68:
8e:69:9c:c2:3e:91:7e:f6:52:ab:e0:03:4f:90:87:
62:3a:30:3f:ee:fe:d2:ee:1d:e0:b9:12:25:97:0e:
2e:b4:36:c2:13:cd:86:e7:32:b7:3a:c8:f4:75:b0:
68:23:38:2a:d2:66:21:2e:5f:6b:14:51:6e:15:ba:
a8:2b:f8:09:09:45:22:c4:bd:b1:bc:85:c3:e0:33:
c3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:97:48:62:19:DC:D2:09:A5:AA:81:84:6E:CC:37:31:6C:D1:A1:07
X509v3 Authority Key Identifier:
keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3133312e302f32342d3234203d3e20313531313036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.238.131.0/24
Signature Algorithm: sha256WithRSAEncryption
36:d2:37:e3:54:4d:e8:29:a2:48:29:fb:1c:08:e0:14:b5:93:
63:a2:27:e3:1a:e8:52:39:3e:43:87:bf:6f:b9:14:d1:1e:5e:
30:1a:fc:28:26:12:59:7e:e9:cf:92:42:99:fb:25:f3:ae:56:
62:08:48:b3:14:6b:e5:d9:6e:69:bc:f7:60:f2:2a:e1:e9:14:
02:0c:38:ad:6b:50:af:84:77:4b:12:98:d9:53:ab:92:70:88:
8d:ad:f0:5c:fe:96:f6:8d:b3:de:d2:06:a5:ce:2c:c3:fa:f2:
78:f1:c9:8d:15:be:6c:22:33:b9:4b:9a:30:a3:f6:9d:45:ce:
e3:77:17:36:e6:48:3d:65:1e:af:ee:5f:97:f4:e5:0c:4f:6f:
f6:a6:c7:da:ad:41:e7:c4:98:af:4f:9b:d1:09:d6:a4:6c:20:
d1:57:7a:9a:ed:1d:09:5a:f6:06:ec:97:54:71:69:e2:26:01:
fc:0b:05:98:a3:7a:75:c7:8c:08:e2:d1:60:4b:d5:b0:ef:8e:
6c:21:03:84:5b:3f:c2:92:57:70:b9:5f:79:99:b8:b4:c8:c2:
64:e0:7e:68:a5:61:d0:e5:32:2a:9a:4d:88:74:21:d1:11:81:
d7:57:f5:9e:33:9c:58:89:ea:74:b8:41:99:5b:8f:dd:46:46:
fa:9e:b7:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:00:41 2025 by rpki-client