Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/4/3230332e372e3139362e302f32332d3233203d3e2037353436.roa
File: 3230332e372e3139362e302f32332d3233203d3e2037353436.roa (raw, json)
Hash identifier: DF0B2w1ci15U2MWgi9NHF/RrZ7F8ylilgRl/5FkgJoA=
Subject key identifier: 56:5B:B7:AC:F9:91:E7:2B:A5:CD:18:61:50:12:6B:A7:F9:EA:53:E2
Certificate issuer: /CN=A91E539C0000/serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4
Certificate serial: 1EE157AB8226273CD85C6698E6EF4255353BE751
Authority key identifier: B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/4/3230332e372e3139362e302f32332d3233203d3e2037353436.roa
Signing time: Thu 03 Jul 2025 02:16:52 +0000
ROA not before: Thu 03 Jul 2025 02:11:52 +0000
ROA not after: Thu 02 Jul 2026 02:16:52 +0000
asID: 7546
IP address blocks: 203.7.196.0/23 maxlen: 23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:e1:57:ab:82:26:27:3c:d8:5c:66:98:e6:ef:42:55:35:3b:e7:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E539C0000, serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4
Validity
Not Before: Jul 3 02:11:52 2025 GMT
Not After : Jul 2 02:16:52 2026 GMT
Subject: CN=565BB7ACF991E72BA5CD186150126BA7F9EA53E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f7:a1:ee:7c:f8:ae:df:89:f8:c6:83:9f:7a:
d5:cf:79:92:97:9b:fc:d3:72:9f:c5:8f:6e:57:99:
68:e6:e2:7b:cc:ec:7d:00:d2:4f:50:ce:19:1e:50:
ff:bb:ae:0c:ed:f6:69:51:9a:cd:2e:95:85:be:14:
b9:31:f2:c1:a8:51:6c:d1:00:a6:07:8e:e4:40:d1:
65:40:0b:e0:45:10:f9:73:94:7b:a3:ad:52:e1:96:
d6:fb:f4:cf:1d:80:51:42:0b:30:a9:98:57:85:5b:
b7:dd:b5:54:f9:83:54:f3:32:b4:58:18:3a:3c:29:
6d:28:9a:9e:41:24:52:43:83:65:2a:0a:bb:1d:0b:
8c:0e:53:d1:6a:a0:01:cf:97:ef:ca:37:b9:a5:02:
1f:50:d9:80:b2:5c:66:57:ea:a9:0d:98:44:db:0d:
20:d8:e9:d3:ba:43:d4:83:82:6f:ef:7d:30:f7:5a:
43:cd:67:b4:65:3b:0c:1f:7e:ea:bd:6e:c0:b2:dd:
5e:80:ab:42:11:6a:ea:6c:73:46:61:2a:9a:b5:10:
a3:ce:6e:be:1d:1b:a2:a0:01:a3:e3:41:96:3a:f5:
9d:b3:d6:4c:e4:d9:19:78:7c:2e:26:91:28:08:a2:
7f:c6:52:f3:69:02:31:44:e7:a5:f3:fa:52:e3:26:
16:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:5B:B7:AC:F9:91:E7:2B:A5:CD:18:61:50:12:6B:A7:F9:EA:53:E2
X509v3 Authority Key Identifier:
keyid:B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/3230332e372e3139362e302f32332d3233203d3e2037353436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.7.196.0/23
Signature Algorithm: sha256WithRSAEncryption
17:d8:d1:3e:0d:8c:1f:50:d6:36:54:97:dd:a3:ba:97:f7:03:
91:7c:31:c1:b5:3c:a8:d6:1e:6a:d4:a9:9e:c1:e0:67:cc:23:
ef:f6:5c:3e:63:e2:bc:c0:40:75:41:09:de:0b:1d:3b:3d:68:
f6:a4:03:09:9a:ea:1e:1b:d6:c5:b0:b5:e0:78:c9:16:46:30:
61:08:7b:42:9f:bc:b7:c8:01:3a:c3:a8:61:d9:f0:0a:fb:fd:
51:2c:58:84:b1:b9:ef:4b:cf:49:df:bb:ba:b9:5c:69:25:da:
d9:ce:4c:47:a5:47:87:39:fb:b3:76:44:c7:f0:30:70:0f:f7:
9b:b6:4d:d6:eb:88:e5:e6:ea:1e:f5:81:d4:8f:e8:98:eb:60:
6a:ea:96:0d:73:99:dc:5d:81:a9:5a:81:aa:5a:34:4f:40:ba:
db:da:8d:5a:8c:88:92:73:b0:de:a5:22:bf:7e:0d:13:43:88:
84:f7:17:28:ca:8f:49:9a:88:56:7c:69:cc:de:e2:45:9a:2a:
6d:18:bf:fd:7e:16:06:1f:05:43:f5:d9:89:e5:b5:6b:72:a0:
0c:9a:e6:4c:96:f0:6c:47:ab:1b:15:12:ca:7f:f7:ca:a4:20:
97:af:f0:b1:09:61:cd:30:37:74:f2:38:1b:1c:99:17:ba:5f:
57:ea:de:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 08:22:18 2025 by rpki-client